Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: BsxhgJKivZlxGsc0f5FhALQ9JuLTrhqJ+Zln9FTne70=
Subject key identifier: 80:87:F5:AB:E3:AB:F9:F8:DA:6C:2D:F3:0F:4D:57:19:5C:69:64:5F
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 0197B7EA789AFB11775035C7B80EAEF11A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: SMQBgNRH+sGsC83mzejsI+urvBaANF/1v7R0Sm7VqAg=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:78:9a:fb:11:77:50:35:c7:b8:0e:ae:f1:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=8087f5abe3abf9f8da6c2df30f4d57195c69645f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:88:6d:a4:d8:03:3e:99:d2:41:0e:81:04:
30:ec:a6:a8:aa:24:33:85:21:22:72:3c:54:f1:f6:
94:52:12:f9:ff:fa:20:0d:05:f1:ad:02:f8:0c:0e:
f6:e4:25:cc:b7:45:b3:55:31:88:44:ac:9f:21:b6:
b1:c4:59:7a:97:65:b1:11:e4:b7:62:0f:84:6f:23:
b1:41:ad:d2:f4:01:a3:3b:b3:13:e2:e6:78:4f:e9:
84:67:75:94:08:63:e6:0f:ea:96:95:9a:0d:40:08:
06:91:96:c4:d2:39:b0:4b:5c:13:fd:77:03:b6:f1:
81:8b:f9:ad:b6:dc:41:31:6f:77:e7:22:88:ba:1e:
55:1b:49:92:ec:87:32:ef:43:01:ff:24:1f:87:31:
cd:b4:97:79:cf:18:3b:e5:a1:5e:39:57:ae:25:93:
ed:4a:01:48:73:35:8c:07:5f:68:21:47:da:3e:d9:
39:28:74:ee:f6:71:a1:2d:1e:78:55:85:31:3e:bd:
ff:d4:84:5e:bb:35:fb:6a:74:1b:ed:d2:47:3c:da:
95:6f:fc:6b:e7:ac:6c:66:64:21:aa:a7:7a:8d:09:
c9:e9:5f:00:0c:e6:9c:e0:d4:9e:21:dc:a3:27:d4:
65:23:9d:6b:24:f0:39:aa:6a:55:7e:78:09:8d:f1:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:87:F5:AB:E3:AB:F9:F8:DA:6C:2D:F3:0F:4D:57:19:5C:69:64:5F
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8d:c1:f1:1c:64:9c:5f:ef:63:20:ec:aa:24:33:82:ce:4e:
d7:14:d3:78:f1:d3:0a:a7:24:3e:0e:15:8f:49:db:76:e7:8a:
b8:19:6c:e1:04:5c:43:94:3a:42:ed:ba:22:62:5c:10:49:22:
02:db:dc:90:a1:e9:d7:74:6d:9f:9b:c4:5c:3c:52:a2:3e:65:
55:4d:83:4f:5f:5a:00:ed:5c:d5:76:9d:5a:07:59:a5:f0:eb:
6c:1e:2c:72:44:58:ce:7b:a7:1f:0e:1f:5d:c9:5d:b4:9c:f6:
60:ca:f1:bf:f0:72:fc:33:51:b7:0d:95:97:2e:74:71:33:1d:
c0:e2:60:fc:59:36:e8:5c:e3:c8:aa:37:ec:d4:19:9e:55:49:
20:45:c3:f3:46:4f:3b:4c:95:8a:03:20:81:b5:fb:f7:03:35:
e4:ec:07:a1:c2:d6:8c:63:3e:a8:09:bb:b5:10:43:d8:3d:b6:
3b:38:42:94:0b:84:40:87:e4:33:78:82:69:98:96:81:34:fa:
c0:9b:62:b0:df:66:c0:f6:ac:c9:04:18:d2:6d:50:94:50:89:
cd:ba:13:64:54:ec:86:1f:e7:f7:13:da:fb:43:90:86:48:34:
3b:c0:6f:a7:fd:45:84:3f:44:a5:b3:66:ab:cf:1b:02:60:03:
ba:a8:3f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:29 2025 by rpki-client