Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: RYAbRlrbNVlQ7Ia6+pEJqoMVNF9BlxX7DFtUGZMDiiw=
Subject key identifier: 2D:AF:BB:F8:A5:01:EF:43:DE:05:47:71:43:8F:01:4D:BE:8C:83:22
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 0198D473ACC16B1CF3F57D28CC8BD106F765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 144E
Signing time: Sat 23 Aug 2025 01:03:27 +0000
Manifest this update: Sat 23 Aug 2025 01:03:27 +0000
Manifest next update: Sun 24 Aug 2025 01:03:27 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: aFUlTi6ICMi1TtFGzoHZ/IqIPUNL3DttO/0aJ2JU/No=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ac:c1:6b:1c:f3:f5:7d:28:cc:8b:d1:06:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Aug 23 01:03:27 2025 GMT
Not After : Aug 24 01:03:27 2025 GMT
Subject: CN=2dafbbf8a501ef43de054771438f014dbe8c8322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:8f:41:d4:bc:73:39:b4:13:43:c4:ed:36:
ea:9b:74:ef:e6:65:56:47:b4:9d:66:b1:ac:60:bd:
bf:10:76:40:0b:54:40:50:4c:32:36:1e:7a:3d:a6:
b6:25:c3:df:bd:c8:72:61:9d:fe:63:ef:b0:7d:d0:
42:56:1a:d6:05:d9:e0:3c:23:b1:13:13:40:59:94:
18:69:0d:1f:4c:dc:5b:62:49:6d:3a:c4:80:77:ab:
b4:86:13:7e:d8:f5:5b:bd:74:51:85:8d:c8:5c:d3:
41:71:96:5a:c6:78:71:d9:22:06:1c:8d:73:22:77:
79:11:da:fa:92:71:8b:14:b0:fc:c1:c5:5c:12:4b:
b2:34:d3:39:a0:c2:07:31:b4:c0:61:d2:83:c6:96:
8e:fb:d4:7a:67:0c:11:78:5e:bc:57:fd:46:9b:22:
53:ee:bd:c6:a6:b3:0e:b8:54:c9:2a:4c:3d:30:0f:
d8:b0:08:3a:41:35:08:43:be:e5:d8:d4:1d:47:fe:
a3:4a:3f:a8:08:9f:08:cc:7c:00:60:94:92:3a:2e:
95:39:b2:ec:87:7b:e9:43:8e:bf:14:9f:80:60:7c:
82:2e:a8:5c:0d:d5:52:9b:c9:2f:55:c8:11:f6:a1:
01:46:ba:6b:43:1a:08:9a:84:c5:a1:01:55:3d:79:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:BB:F8:A5:01:EF:43:DE:05:47:71:43:8F:01:4D:BE:8C:83:22
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1f:e0:f8:3d:a6:d9:7a:20:4e:ca:bd:c4:5c:08:95:d1:85:
36:3a:e1:97:b4:62:8f:a0:a2:a7:99:ea:72:a4:45:4b:62:2a:
32:35:b4:0e:e1:4d:e5:eb:c8:d8:ac:73:e8:07:80:d2:43:a2:
2b:50:5d:3e:5d:f5:b6:b2:94:b3:b5:24:8a:82:ad:a7:3f:20:
53:43:51:f8:b2:83:dc:04:e2:98:5f:da:4e:af:16:6e:7f:54:
17:84:b7:50:c2:c7:67:73:30:b5:62:c0:cc:cd:ff:59:90:f0:
8b:40:8e:7b:40:01:84:49:ab:bf:4f:65:89:e5:23:08:3f:e1:
e1:88:cc:61:a1:da:bf:43:7a:41:19:a4:83:63:ae:f4:46:45:
ff:ce:46:eb:3d:dc:38:c2:bb:c7:03:2a:14:9d:67:1f:0b:ce:
c3:7d:0f:54:bf:a1:8d:34:f7:67:da:ec:d5:e9:f4:ba:33:d9:
9f:ce:7c:c4:57:9a:c5:9c:da:58:21:86:28:b9:61:5e:ac:ec:
51:13:be:9f:15:2e:61:fe:1d:4a:74:93:ae:75:9d:c9:ce:ea:
c9:a6:05:5f:ed:f4:d6:c2:75:64:7c:c7:0e:86:a1:46:18:1f:
5b:03:81:ab:21:3f:c2:dc:3e:f2:c6:0f:81:e1:70:bc:78:62:
28:ea:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:59 2025 by rpki-client