Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: sJFYBk7IxgyYaRX8KTl/mQotUKFmPp4WXwF814Q+Nyw=
Subject key identifier: 91:4D:48:91:31:12:E5:BC:DC:27:42:DC:18:5E:AD:49:D0:B3:07:4D
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 01984777D308B390AC72851EDE340B2BB1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 13C3
Signing time: Sat 26 Jul 2025 16:01:31 +0000
Manifest this update: Sat 26 Jul 2025 16:01:31 +0000
Manifest next update: Sun 27 Jul 2025 16:01:31 +0000
Files and hashes: 1: hzoYOWaigOBhVgvLojtyU6Dx7N4.roa (hash: T/q+Lugm+i1exm5XgQ+QByz6sPtwXurIWQU3uySV9uU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: P4S08L4bMI2c+kxetzdXTU1fwrVdRPbD8s+I8TQTY5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:d3:08:b3:90:ac:72:85:1e:de:34:0b:2b:b1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Jul 26 16:01:31 2025 GMT
Not After : Jul 27 16:01:31 2025 GMT
Subject: CN=914d48913112e5bcdc2742dc185ead49d0b3074d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:57:4a:e9:9a:2b:57:d5:f4:68:fc:04:25:
b7:04:45:a3:3e:6f:53:a4:c4:11:11:69:10:16:c6:
e4:96:7d:01:2b:66:a9:db:80:be:30:73:0a:1c:c4:
5b:e3:04:db:b2:84:3d:b8:4f:ae:aa:70:83:51:05:
b5:eb:f2:93:f2:a2:ef:8d:36:a1:e9:ed:37:79:94:
72:e8:8e:57:3e:5d:0c:11:2a:ef:ac:30:87:64:68:
0f:96:71:c1:f3:bc:ea:bf:6b:48:30:a0:86:83:56:
67:a3:df:f2:38:35:6b:56:fb:4c:25:fb:1a:a3:e5:
5f:cf:3c:11:68:18:45:a4:e0:a9:f2:b7:60:49:66:
bc:a8:34:e4:5a:53:b3:18:fd:6f:03:2a:83:b7:e1:
2f:c1:eb:30:0a:b7:9f:06:12:9b:7a:f7:5a:53:23:
95:99:7e:8b:6e:35:ca:19:34:c3:45:e8:8e:71:1c:
80:67:b6:e6:cf:ff:ed:97:b5:b3:75:b7:75:8c:55:
8e:4a:a9:77:dd:5d:df:22:44:c3:fe:36:2f:13:ae:
30:5a:fe:46:68:a5:8c:e1:dc:77:34:80:eb:11:ad:
4f:f2:30:85:ed:93:ff:01:f4:61:9c:2e:eb:14:7f:
56:0b:ad:9f:1a:de:26:3d:c1:8e:c4:82:24:15:1f:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4D:48:91:31:12:E5:BC:DC:27:42:DC:18:5E:AD:49:D0:B3:07:4D
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a6:02:52:f7:2c:8d:8f:62:8f:59:f3:db:fd:f1:af:01:7b:
b1:25:6a:2a:54:35:61:86:2d:d7:15:c4:1a:1a:4d:1d:2d:2f:
46:59:e3:64:44:45:29:ca:2d:2b:4c:e0:98:9b:84:db:84:30:
a4:28:ea:d0:47:92:74:4f:5d:6b:32:a2:19:99:8a:fe:a7:8e:
1c:07:82:e7:2e:97:fe:94:13:e6:d2:d6:c0:83:95:81:7f:64:
93:79:dc:2a:04:d4:ca:d9:37:8f:19:7c:66:ff:87:d9:80:09:
29:d4:a2:8a:60:7b:37:42:c7:d6:8e:cc:94:cc:b1:95:f3:03:
2a:3d:5b:0f:f5:aa:20:08:ab:0a:33:88:52:18:ca:00:b8:18:
ea:cd:bf:23:ea:d5:ea:0f:99:a1:a3:f5:37:a8:6b:e7:4b:3b:
46:96:cf:16:e7:05:2a:71:f8:0e:cf:04:13:d7:f9:44:d1:58:
e6:36:0b:44:fa:b0:72:b9:3f:4f:68:ad:4f:2b:b1:b2:52:9d:
f6:2c:c8:61:ef:80:47:40:50:23:ef:95:d0:28:09:7e:76:23:
95:63:df:e4:93:aa:85:f3:57:d2:4f:76:85:32:da:56:fa:94:
d9:d4:dc:be:d2:ae:63:e6:65:fb:e6:14:b8:99:b6:5e:68:d0:
0d:35:86:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:26 2025 by rpki-client