Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: +bZ7zm/sUX+ZtbgqWo+/C47RR5JGniaYGPdwoXOfQ3Q=
Subject key identifier: C9:39:E6:0C:49:7B:EE:56:4A:EB:D4:40:77:4D:A1:F2:A0:E9:3D:E8
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 0198D5F13411E289141E40A01ACE3C59B2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: FrqCbXhb44ak5q+hYvqImAeB2N6hwqYN3+/ly63IX4g=)
2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:34:11:e2:89:14:1e:40:a0:1a:ce:3c:59:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=c939e60c497bee564aebd440774da1f2a0e93de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:ca:76:b9:4f:d6:c8:f2:98:98:d0:7b:8b:
dc:2c:66:bb:af:46:d5:42:9e:e0:cd:21:4f:03:9e:
f2:0f:ef:ee:d4:a8:93:3b:b3:20:fc:4e:09:4b:1c:
53:ac:72:9b:ad:9c:80:87:f2:66:e2:22:68:36:b8:
7d:f3:c6:6e:cb:83:f0:88:43:d2:ec:f7:ea:13:71:
46:45:9a:58:24:f7:0d:95:d9:f7:e2:d2:c5:7a:eb:
67:30:6c:25:64:bc:bf:ef:40:0a:53:76:d9:2b:41:
f0:23:7f:f4:65:2e:f4:d0:83:81:33:74:f8:f5:f2:
01:56:f9:ec:52:c0:57:4a:d2:25:5e:cb:fe:43:f0:
bb:e5:16:cf:e9:4b:95:b4:a9:f1:a8:4a:3f:8a:49:
3d:85:8d:5d:e3:ac:dc:c9:59:ad:da:fe:c4:f8:17:
5e:ed:cd:c4:de:31:ec:8c:44:61:3c:f7:5a:7f:3d:
83:99:a7:8c:1f:aa:cf:3e:79:96:45:34:ac:31:18:
fb:cf:88:72:2e:60:93:36:0b:42:48:50:e9:1b:f1:
ac:a3:4a:d7:89:e2:6b:d2:5d:95:2f:32:c7:ff:4c:
31:8f:ce:65:67:7d:b4:1d:2d:b4:8f:e2:f3:45:ed:
99:8f:e5:da:ca:e6:49:a1:35:e8:28:8d:50:08:15:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:E6:0C:49:7B:EE:56:4A:EB:D4:40:77:4D:A1:F2:A0:E9:3D:E8
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d8:d6:f4:57:a2:b1:bf:99:24:c0:e2:31:5f:7e:4e:c0:a0:
ce:ab:e0:c9:00:92:db:dd:3d:e7:9f:7f:6b:20:53:59:c9:46:
d8:45:e6:bb:80:1b:16:66:4e:c2:2e:c1:e4:dc:7b:f7:0a:01:
f7:5d:26:15:b2:1f:b7:a9:c8:f5:98:d6:22:cf:11:a6:ee:f5:
fe:f9:a7:b9:36:3b:2a:35:78:bc:76:06:08:a3:0f:c9:e5:ae:
e1:32:08:7a:ce:a2:08:51:15:8a:6a:c7:20:a6:fa:d2:47:c5:
1d:f1:ab:06:44:f6:89:17:1c:95:49:75:0f:d9:23:5e:c5:e9:
13:a1:94:d7:7e:a8:c7:1b:be:dc:9b:4e:e9:8d:f7:c2:03:1c:
88:3e:4a:50:28:6d:7e:dd:90:4a:93:aa:20:94:b5:ef:62:00:
76:2c:52:51:fa:a3:1c:76:57:83:27:b1:7e:6a:4a:97:d5:2d:
47:ef:b0:cc:a2:b6:40:e9:c1:b3:38:48:79:7c:25:66:97:4c:
23:c2:7d:bf:ff:45:5e:c5:0d:69:28:11:f6:5c:5a:61:e3:1b:
5d:5e:1d:87:a9:e1:bb:25:22:72:f5:a0:b9:39:68:77:2e:4b:
4d:8e:e3:62:05:a7:f2:88:5e:0d:e7:2c:3e:c0:4d:6a:30:60:
e3:04:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:57 2025 by rpki-client