Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: q/+WLRewb7aYYZfldEz5v6HRD1/zy1zWeD78qnpH8oE=
Subject key identifier: 7B:2B:89:F0:53:90:03:8D:CD:41:D2:F5:BE:07:52:1E:19:7F:36:28
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 0198D660BACA6D5ECCCA401C3BCA053BDF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: rhyT5EqJRIwnFiEd+ylFxgKbTEchYEXeaeM0cBY2+10=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ba:ca:6d:5e:cc:ca:40:1c:3b:ca:05:3b:df:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=7b2b89f05390038dcd41d2f5be07521e197f3628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:dc:62:93:22:f3:a6:e2:41:9b:73:f2:0e:
b2:cb:64:01:9b:2a:2e:cf:83:15:e9:c1:3c:d7:15:
19:9d:9a:bb:34:fe:d6:05:83:9b:14:6d:bd:0f:8d:
fd:3c:81:24:e6:cf:9d:a8:e2:6e:18:cc:eb:c6:e8:
b7:0d:53:bb:0b:c2:8c:db:b6:82:ec:6e:c2:17:56:
56:ae:37:b3:4b:0e:ff:12:ae:9b:1a:76:d2:9d:03:
3e:3b:86:c3:e1:74:ba:60:5d:fb:3b:85:29:49:07:
1f:b0:f9:0a:2d:43:66:c0:cf:ea:24:c1:67:22:0e:
6e:3c:dd:a6:82:76:3d:08:0a:30:c8:41:a7:86:80:
2f:79:bf:f0:e2:44:b0:7f:bd:31:64:05:34:da:52:
09:c3:22:c3:32:06:36:50:1c:55:42:75:76:ae:b7:
e0:d6:df:f3:ad:fd:c7:23:a4:63:e4:ba:8d:e1:68:
aa:f1:00:e7:1c:0d:e9:ea:66:de:80:5f:2e:d6:d3:
1d:da:44:b2:ea:aa:27:e2:e9:a0:08:b6:9e:32:6e:
94:ca:4e:de:3f:11:43:ad:e5:fe:4d:c5:56:cb:6c:
55:11:ba:c9:a3:c1:f3:68:52:31:98:2a:f3:a8:60:
92:9d:9e:02:ed:f0:98:ce:7b:86:42:6e:30:01:db:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:89:F0:53:90:03:8D:CD:41:D2:F5:BE:07:52:1E:19:7F:36:28
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ee:17:5d:ea:8f:78:5d:90:d4:47:cc:93:00:c2:07:c8:e0:
50:96:ac:02:f4:fc:03:74:f4:50:c5:39:ab:cc:4d:7d:b5:5f:
93:d3:74:66:a4:fb:14:c3:7a:78:cd:a2:d0:ea:bd:b6:d8:c6:
12:4a:95:6c:eb:d9:93:94:3b:0a:32:d8:89:42:ec:a8:62:68:
b8:5e:94:c0:d0:39:52:8d:41:59:ef:d8:80:a0:31:0e:b6:64:
8b:ac:d0:de:ef:be:72:53:55:74:18:df:a6:9f:64:5c:33:a7:
12:59:11:2b:2c:70:ab:af:d0:d1:22:21:42:95:8f:c2:c2:57:
b8:8a:f1:e8:43:ae:23:69:43:55:81:ea:04:b8:ec:ff:73:5d:
6e:f0:8f:37:86:cd:17:f9:a8:f7:f2:93:98:86:14:de:c1:03:
e4:61:80:c9:e4:4f:77:7c:11:7b:43:e9:bb:2e:80:b9:1e:13:
b9:d0:5e:e3:a1:f4:27:8c:0e:0d:40:bf:02:67:2c:64:b1:c0:
29:c9:eb:4c:00:b3:16:ce:1f:40:4e:07:d9:d6:a8:11:e1:fa:
ee:4d:57:be:1c:8e:c2:0a:be:77:c7:ec:9b:f9:54:81:e1:5a:
e7:1f:90:11:5b:22:e7:e4:30:0e:6c:37:6e:f8:c2:23:3c:6d:
36:0e:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:32 2025 by rpki-client