
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: tBG+vKTwtxdLL0VSYju86wm12HajaszFsx3AdYrq0k0=
Subject key identifier: E8:37:A0:78:31:85:43:F9:0F:29:0B:BB:58:B6:07:C7:1C:36:02:AB
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 0198D4735D75946B0BD1150775A86C6CB7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 01:03:06 +0000
Manifest this update: Sat 23 Aug 2025 01:03:06 +0000
Manifest next update: Sun 24 Aug 2025 01:03:06 +0000
Files and hashes: 1: DWjeKEhsrCMQSkqXSu5F6-_lK2c.roa (hash: E/1JJ03/M4DXDyCYKLov4LZTD3sgsbYcGtynvXI+0ao=)
2: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: lzzqb80nqcQcsvHNAHULx0nXCfy3a2D9TPhazVLZ0ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:5d:75:94:6b:0b:d1:15:07:75:a8:6c:6c:b7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Aug 23 01:03:06 2025 GMT
Not After : Aug 24 01:03:06 2025 GMT
Subject: CN=e837a078318543f90f290bbb58b607c71c3602ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:e2:02:55:26:40:55:3a:a6:24:aa:a2:64:
40:c5:99:69:45:79:0c:57:fd:60:45:a4:35:bc:de:
94:fb:74:40:88:f0:92:ee:2c:3e:31:f1:e1:7e:7d:
52:23:3d:b9:3c:b1:dd:9c:61:c1:0f:3d:81:2f:28:
11:39:82:fe:71:44:3a:01:db:e2:3f:90:39:74:64:
cf:a3:19:1e:21:55:0e:fc:58:e7:85:d5:81:94:b5:
b6:d8:d9:39:ac:d9:1d:10:8a:88:82:f7:53:4f:d9:
5f:8f:b5:6d:4d:ba:13:e6:d6:f7:e8:ec:fc:e2:09:
0b:b5:f8:c2:05:26:44:09:cd:7b:59:dd:8b:31:cd:
0b:e2:f7:8a:d9:e4:e4:55:7c:c9:43:21:02:dc:a0:
0b:f0:96:93:3a:14:ba:0c:c0:31:48:f1:65:41:88:
5c:84:5b:a0:e8:11:44:15:ad:c4:e8:b1:93:3c:e6:
3f:aa:71:5c:05:34:dc:af:7a:cc:05:60:6d:1d:92:
95:17:59:cf:0f:9d:91:14:ea:bf:a2:3e:a6:7b:14:
c6:53:0d:1a:fa:bd:ba:a0:4a:4e:7f:19:f1:5c:f6:
e3:95:25:14:3f:01:db:f2:fa:c3:f9:97:15:62:47:
81:e3:2a:d7:ce:85:7b:41:4b:8c:c3:47:97:a6:22:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:37:A0:78:31:85:43:F9:0F:29:0B:BB:58:B6:07:C7:1C:36:02:AB
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:08:e3:73:75:15:44:b9:7f:92:09:c0:aa:39:c3:0d:7a:b1:
d2:ac:9c:26:0d:4d:62:a6:28:cc:56:e0:53:e1:af:13:50:6c:
1c:51:8c:b5:5e:02:ba:f3:50:12:71:f9:1d:e2:8f:e0:07:d2:
1b:de:72:d8:c6:32:c3:9e:27:11:c8:c4:3f:ee:8c:08:37:00:
9f:39:29:12:87:bb:7e:86:b6:e5:77:69:c6:05:c9:90:f6:04:
ba:31:c1:6c:14:45:47:e7:da:4a:e4:f4:a7:ae:6e:e2:08:2a:
95:ee:4a:46:29:9d:23:c8:3d:eb:d2:a7:82:fe:56:14:82:1d:
0f:5d:3c:fe:ad:13:b1:18:73:4d:0e:10:32:c0:19:3f:72:46:
7b:8a:3e:72:be:98:bd:ad:b8:60:a6:21:66:b3:25:96:be:3b:
d4:0e:64:2a:f4:38:96:41:2e:80:4a:87:bc:5e:c6:b6:a2:35:
08:ac:ab:94:78:e7:bc:95:ce:e8:2b:2a:79:3f:f6:fb:3a:13:
bc:8b:6c:05:46:df:fa:40:3d:43:f0:56:d1:7e:d5:73:bd:45:
01:4c:66:7f:05:87:63:fe:88:5b:a9:79:79:ea:80:73:f7:00:
c5:34:51:e8:80:ea:b9:76:11:ed:f0:13:3b:b9:35:2a:80:1b:
51:15:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:01 2025 by rpki-client