Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: 6EBkCCD1qwmzdPM3mEQpPTKRlymbITfvhUWxmNEOE5w=
Subject key identifier: 00:AC:B7:A1:F3:E8:0C:18:92:B2:1F:78:27:7D:65:E7:E9:F0:B3:41
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 0198D65FB7E0E96CC9C9991D4E70564D765B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:53 +0000
Manifest this update: Sat 23 Aug 2025 10:00:53 +0000
Manifest next update: Sun 24 Aug 2025 10:00:53 +0000
Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: 6ejfaDWZ5VxGhUqeLqPEdIGjvB1TwEOfNhjCJ6S26Q4=)
2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b7:e0:e9:6c:c9:c9:99:1d:4e:70:56:4d:76:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Aug 23 10:00:53 2025 GMT
Not After : Aug 24 10:00:53 2025 GMT
Subject: CN=00acb7a1f3e80c1892b21f78277d65e7e9f0b341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:b0:52:a5:a3:3b:db:2a:0a:aa:bb:4f:5f:
53:f0:85:d9:11:f0:6d:d8:1c:a2:72:e9:aa:3b:35:
6a:89:63:cf:1e:8b:96:44:c6:3f:f4:de:85:c6:74:
a1:ae:fb:ef:a9:ef:f6:2e:40:94:d3:e8:65:af:93:
62:a3:53:e2:53:94:d0:df:8c:8c:9d:23:2d:f7:99:
d5:0a:16:a3:23:92:b3:e0:97:50:65:36:52:a4:4f:
11:0b:1b:ef:b7:89:1a:c5:79:b3:64:f2:d5:97:03:
10:47:84:53:95:fe:64:d8:b7:6e:dd:7a:9a:64:bf:
d0:df:0a:8d:c5:6b:a3:fd:fc:63:8b:5c:d0:d2:a2:
e2:a6:bd:68:c1:60:53:8f:ce:72:b3:7b:a8:03:15:
a2:30:92:73:ae:96:72:f1:d0:79:1b:df:8b:8e:d4:
e7:b8:a9:8e:6d:b4:6f:fb:cf:11:fd:d2:63:f1:79:
99:e9:dc:67:8d:ab:48:94:2b:bf:85:d2:99:4d:9a:
56:2d:7b:61:01:d1:bd:b3:69:9c:85:28:02:dd:b4:
ea:9e:55:71:2b:49:aa:3a:99:eb:5a:94:87:fd:e4:
b0:f3:87:16:c1:6d:21:52:27:1b:8a:b8:e1:9d:2d:
32:14:7c:d0:4a:ce:5d:e2:c8:e8:9e:a4:b8:3f:98:
50:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:B7:A1:F3:E8:0C:18:92:B2:1F:78:27:7D:65:E7:E9:F0:B3:41
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:22:4d:70:af:0a:c2:e9:41:ff:1c:75:54:c8:03:0e:84:
0d:3e:42:4d:31:a7:0f:a1:67:96:94:50:94:29:a1:d2:87:d4:
43:e8:01:5b:28:9d:d6:e1:fc:e4:8b:cc:95:69:0f:96:f3:4f:
83:15:c9:2b:1c:32:5d:52:2d:24:c7:3d:b5:38:0e:2c:03:86:
8c:06:3e:09:2b:04:98:8e:98:fd:f9:68:0d:28:f5:3f:9e:ea:
29:51:f5:a4:5c:ff:af:02:76:5d:0c:4b:a8:ef:02:d8:ee:14:
d3:75:61:92:55:91:c4:39:d1:09:ab:e6:f4:5c:ba:26:5a:62:
66:1f:fb:d5:7e:d0:9d:85:4c:65:e0:55:c4:3e:91:7f:b7:c5:
b2:2a:1b:d6:74:9e:fa:73:e2:5d:b4:c2:2f:9f:28:a3:d0:82:
37:48:62:b9:5d:2f:c9:49:cc:da:ca:75:eb:e9:2f:b2:a1:5d:
e9:66:48:9a:a5:02:91:e3:b0:63:77:f3:26:6a:bc:0c:62:fb:
ff:dc:06:6e:74:69:6f:32:9b:65:b0:c8:4c:1b:30:b8:cf:46:
f1:63:0f:5d:8e:30:bb:06:53:a6:00:16:83:8f:d3:77:8e:c7:
c3:05:e4:60:a7:e9:aa:74:ca:87:b8:aa:78:9c:42:80:39:2d:
d1:10:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:37 2025 by rpki-client