Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: S9EN11g3vEA1oHhLvVrYNppIIGA1/LNk8R1pZQtJgE8=
Subject key identifier: D2:16:C8:86:D4:39:31:A5:01:39:D2:2C:1F:0F:50:8E:70:95:C7:87
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 0198D70622643D4C3D79D1E8F42C76F4862F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 157A
Signing time: Sat 23 Aug 2025 13:02:40 +0000
Manifest this update: Sat 23 Aug 2025 13:02:40 +0000
Manifest next update: Sun 24 Aug 2025 13:02:40 +0000
Files and hashes: 1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=)
2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: Yu4UhHi4JSF+V1kehgv6v4CWV3Wc7Lx0+ZSiX7QvBXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:22:64:3d:4c:3d:79:d1:e8:f4:2c:76:f4:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Aug 23 13:02:40 2025 GMT
Not After : Aug 24 13:02:40 2025 GMT
Subject: CN=d216c886d43931a50139d22c1f0f508e7095c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4b:e0:8d:b0:eb:78:1e:59:32:5a:f2:ec:8b:
36:2f:57:10:9a:f9:43:6a:9a:fb:8c:b4:f3:35:42:
27:31:07:8d:9a:02:d0:4e:17:1c:44:d5:d9:cb:af:
a6:2e:77:87:cf:60:fb:e8:b1:a8:de:8a:51:f5:fd:
4a:66:81:47:68:f0:af:d5:50:0c:6e:89:58:d1:bb:
ad:7a:3a:d8:5d:12:93:24:e4:98:91:64:d6:e2:0e:
c1:f1:95:6f:81:29:d7:a0:40:67:98:23:da:8e:36:
57:47:97:f9:04:68:96:72:7e:1c:5c:a2:d4:6c:9e:
60:46:a4:fe:76:39:ba:77:37:79:fa:44:58:b6:32:
0a:a9:da:6e:d2:1e:e0:bf:f6:19:06:9a:92:d7:94:
43:f0:a6:3f:46:c3:56:34:69:75:d2:88:fc:04:ae:
ee:f1:c2:f8:1f:16:0d:9e:db:b7:02:3d:dd:0c:6b:
8b:cd:88:b0:27:d3:69:90:10:91:b7:7d:91:8f:9b:
5a:a7:2a:ee:c0:09:61:39:dc:14:74:d3:9c:d3:8e:
d2:96:19:b2:ab:ab:79:f4:c6:fd:0d:b4:71:1a:79:
1c:68:41:a2:be:65:b5:db:a5:1c:2f:59:32:f9:3b:
c2:ea:de:39:57:91:9f:a1:2a:4b:da:9f:c2:05:c3:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:C8:86:D4:39:31:A5:01:39:D2:2C:1F:0F:50:8E:70:95:C7:87
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:06:a5:cd:61:dd:fe:a4:72:13:a9:ef:c3:02:5a:ed:f2:0e:
49:77:5f:4f:8a:78:1e:2c:15:0b:66:b7:4a:ff:26:de:1f:94:
5a:df:02:c4:ba:39:5d:78:83:4b:3f:e7:69:1d:b9:c6:b4:51:
0a:a2:1a:01:da:a0:bb:f3:ad:c2:c8:98:26:a7:0f:15:21:8e:
b0:63:ca:56:41:fe:ec:b9:bc:f6:f4:8a:a5:c9:74:2c:15:ae:
31:dd:18:12:5b:69:c6:79:62:fe:1c:e9:35:83:7b:b4:e0:64:
6b:23:1c:ac:86:f2:db:95:6f:5c:f2:25:1f:b7:28:25:f1:e8:
57:34:52:18:50:ae:28:af:87:ad:3b:31:df:cb:0f:72:6f:00:
ba:88:28:3e:c8:78:f2:df:79:cb:12:a3:7f:f8:25:6b:f7:ae:
af:b8:c8:7a:a4:0a:65:b1:ba:26:15:32:ff:2a:8a:f6:b7:02:
fd:9f:48:41:f8:fc:4e:41:aa:85:56:97:cb:5b:3d:4d:f6:6d:
25:39:db:ec:89:a5:d3:02:6d:44:96:0c:67:e7:e7:68:86:ba:
d7:17:67:0c:f8:8c:90:f1:8b:6d:5e:51:29:fa:dd:01:76:71:
12:28:8b:d4:0c:32:70:50:3c:ab:3c:d0:97:c7:8b:08:05:7f:
c5:bf:0c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:37 2025 by rpki-client