Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: ApmPzaLUOqs6lnBJO0485jDIZ1i80Exh747u92ifsLo=
Subject key identifier: 4A:83:E3:C5:46:60:D5:49:AE:E9:1F:EA:13:3B:D8:4B:6D:26:13:85
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 0198D5BC1F8DB92CF4DE1770F676A2D73D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: qvjMuRh81H55ytxYoV+WIZCLWIOgY3jgQOFQukU1XAs=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1f:8d:b9:2c:f4:de:17:70:f6:76:a2:d7:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=4a83e3c54660d549aee91fea133bd84b6d261385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:9b:6f:b0:d5:00:e8:31:29:65:f6:51:b8:
16:54:4e:11:cd:ec:fb:85:d7:20:d2:36:24:ea:78:
6f:5d:cd:f9:64:c7:99:ba:24:5a:c1:79:c5:30:05:
84:de:b1:32:c9:8f:2a:f4:86:d4:d1:ec:6f:1e:14:
48:10:6b:62:cd:4a:c5:3c:e7:66:32:65:86:1b:4e:
e0:d4:0c:e3:24:b8:61:0a:59:3f:9e:6f:6e:22:6f:
7f:27:d0:1b:3d:2b:da:8d:5e:2d:b7:3d:6f:97:64:
0f:71:7b:7d:e0:fe:01:54:3b:51:86:8b:df:a6:31:
1b:1d:6d:36:42:c3:0e:bd:b8:e2:b0:5e:31:57:36:
9d:cc:bc:6f:f5:15:9e:fa:3d:6d:ce:bf:56:87:da:
bc:35:33:bf:ec:47:dc:a9:ad:53:bc:9f:bf:ac:12:
d0:51:83:0d:5a:3a:2b:43:fd:e0:74:5f:dc:e8:88:
d0:40:75:5e:5e:df:6b:cd:f5:9b:1b:dd:a8:d2:23:
48:80:8a:57:dd:f1:8f:0a:a0:31:6b:67:e6:61:89:
82:59:51:df:7a:22:aa:9f:da:20:8c:ab:1d:8f:0a:
a3:b5:6d:aa:05:65:67:a3:65:d4:be:9c:15:f9:b9:
bb:b7:b2:4f:7e:1d:28:13:de:36:6c:77:64:e7:85:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:E3:C5:46:60:D5:49:AE:E9:1F:EA:13:3B:D8:4B:6D:26:13:85
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:67:39:a6:63:16:78:4f:59:6b:56:68:d4:92:c9:d3:f6:c7:
c2:2c:e7:a7:7b:5f:71:67:89:d8:fa:bf:24:b3:ec:4c:3d:04:
d2:b9:b6:8c:c7:d3:bf:31:b0:70:c7:0a:46:b2:4c:3c:0e:d0:
6e:d4:b3:28:b7:8c:ea:70:99:34:11:bc:b7:b2:24:1e:1c:70:
04:e4:ad:90:2e:ba:76:45:fd:f9:31:27:45:ba:d7:cf:24:a0:
98:ee:2c:37:88:da:1f:17:d9:62:e3:8e:2f:a0:9e:7a:40:3d:
56:a2:4a:e2:8b:19:d8:ee:65:73:f6:ec:77:dd:b6:cf:d0:49:
cb:f2:2a:33:b3:a1:f7:55:de:66:11:ce:2c:e8:67:be:c8:de:
cc:f2:32:fe:a9:dc:5b:f7:94:d3:ee:dd:a2:2b:2e:d5:c1:97:
b4:cd:ef:e7:99:ed:de:c5:9f:17:da:14:26:99:d3:c0:f1:13:
81:34:13:80:99:d5:67:60:51:96:7e:37:a9:7a:d2:51:12:77:
31:bb:e8:35:e7:e6:c4:35:e5:60:9c:9f:59:44:23:42:ce:ea:
0b:f1:c6:f3:47:c9:9e:23:22:4e:09:16:a7:67:b1:be:ca:2f:
fe:12:90:8f:ad:46:84:20:b4:69:a7:5f:ba:3f:f1:e5:86:0f:
af:ff:43:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:21 2025 by rpki-client