Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: oUldCwjTGRxyHI6eCK4LCDPXu9kVWN3vR4oKcWP1J0k=
Subject key identifier: F0:C8:12:60:06:9D:C3:3C:79:B6:D4:5C:97:0D:DC:E8:E3:93:2F:02
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 0198D5F16A3195A3DA910CDECB2201B1CA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: fvkX4CV2fxdaxBFve9Qxt7gKprIps/Ef+NNLM7P9xyc=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6a:31:95:a3:da:91:0c:de:cb:22:01:b1:ca:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=f0c81260069dc33c79b6d45c970ddce8e3932f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:1f:65:67:ad:5c:bd:a1:7d:b5:1c:c6:23:
93:e8:94:d6:b8:f7:ed:7f:de:57:aa:38:d5:07:ee:
a4:a0:f4:80:ed:5a:8c:0b:b2:c0:b2:e2:cd:96:05:
05:4d:e4:17:60:7b:42:a2:a8:02:f6:b9:5d:6d:c9:
11:2e:22:2f:87:2a:99:a5:dc:8c:5c:c0:67:95:fd:
bd:b1:28:ad:79:db:a6:4d:e8:d2:d8:fc:8a:23:26:
5a:81:67:8f:ce:19:06:ad:90:92:8c:58:d5:5b:70:
7c:7d:77:72:fb:03:8e:ba:b3:57:b3:5f:bd:b3:fb:
02:6c:66:09:ca:17:e0:fc:48:bf:fe:4b:c0:28:5b:
ac:55:a0:26:d9:67:63:db:f7:21:e8:70:e1:4e:d2:
1e:29:03:65:88:74:94:c4:61:1a:fc:33:6b:28:e1:
f1:45:93:e2:9d:87:80:09:e1:47:0a:a1:27:24:e7:
d1:a7:19:7d:eb:c9:69:17:23:e8:39:95:83:92:10:
09:39:61:5a:5f:53:a3:f2:84:77:9b:b8:0b:60:5d:
c2:a4:2e:ef:0f:85:aa:19:67:f3:d9:1f:98:7e:e9:
84:98:e9:b8:40:e3:5f:b0:90:c6:a4:d1:f0:32:11:
20:0c:21:22:05:da:f6:29:84:ca:2f:40:19:df:07:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:12:60:06:9D:C3:3C:79:B6:D4:5C:97:0D:DC:E8:E3:93:2F:02
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2f:10:a9:1d:9b:71:c1:a5:b7:35:6d:ea:35:66:0a:44:89:
9d:2c:36:6e:ed:1a:39:d6:81:f8:f3:05:e3:a9:75:2c:3c:e6:
68:6b:f9:30:57:18:12:4e:6e:2e:03:86:51:24:fb:73:26:5e:
fc:31:44:cd:db:0d:99:9b:c7:45:11:1a:88:97:84:c9:6e:1f:
28:08:05:e9:64:9a:85:6c:43:26:a1:20:c1:60:ee:8b:c8:a4:
4c:c9:46:f4:d5:ba:db:78:ad:1b:18:7d:e4:6d:e1:a6:b7:81:
5b:c8:52:c3:ac:c8:cf:c6:5b:1d:4c:10:b9:4c:67:dc:98:0e:
53:90:9d:52:1c:af:a8:e0:cc:3d:76:48:07:35:c1:d5:0b:19:
c4:44:09:cb:bb:e7:1c:62:25:74:cd:60:66:34:e6:6f:62:5e:
d3:b0:10:02:68:b4:20:58:ae:11:98:19:5a:52:a3:71:16:09:
36:1c:b1:62:0c:d3:93:5f:6c:6d:a5:22:53:57:27:e7:35:96:
81:65:6e:3a:08:ba:a8:16:97:80:1a:e0:df:90:c2:8e:50:49:
28:79:16:78:17:17:05:f1:b0:32:56:eb:15:d4:84:4d:e6:d3:
fa:75:62:d1:1d:29:b1:18:86:4c:b6:05:94:e6:b6:22:e4:4b:
53:cc:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:38 2025 by rpki-client