Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: Lq1DFk2Bbcbfzm7ECdnWS9yhpC+hE3C9ShsPvuSAJMQ=
Subject key identifier: A1:8E:DC:69:84:9D:05:83:5E:5D:3A:AD:06:89:E6:88:94:60:87:44
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 01984AE5ADAA8EDEC50E76E2A030FBEFC19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 08:00:22 +0000
Manifest this update: Sun 27 Jul 2025 08:00:22 +0000
Manifest next update: Mon 28 Jul 2025 08:00:22 +0000
Files and hashes: 1: SpsqNCwISL1D7YWDs8MOUK4XUcQ.roa (hash: VKTdP32emCO1Alc2phplZ6z5V0MT3UL3VXfP0BBA76I=)
2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: Y2PvjZ7JAmIXc8ugq2pFyyR7Ch79cztUYwxwIV19JiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ad:aa:8e:de:c5:0e:76:e2:a0:30:fb:ef:c1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Jul 27 08:00:22 2025 GMT
Not After : Jul 28 08:00:22 2025 GMT
Subject: CN=a18edc69849d05835e5d3aad0689e68894608744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:6d:55:f1:cf:85:fd:ca:b0:17:60:45:fc:
fa:ec:bf:ff:3c:5b:52:18:aa:4b:27:90:24:62:2b:
38:31:a2:fc:df:74:ca:fb:7e:e1:e4:55:1c:58:57:
fb:00:61:4a:5a:4d:4d:0d:4e:de:63:3a:c5:2e:32:
12:f6:85:2c:ec:dc:49:b4:5a:dd:f6:3e:2b:d4:82:
e8:a1:32:dc:e7:7d:a4:11:2d:95:65:ef:db:a1:2e:
fc:f6:4e:c1:53:29:b1:79:9f:68:5e:a5:2e:63:54:
f4:8d:4b:3e:f2:61:6a:b9:fd:c2:60:a7:53:63:21:
69:d1:97:24:55:3d:11:b6:38:a5:7e:7d:9b:d2:0a:
5a:81:20:ba:d8:5d:53:7f:6a:5c:61:cb:4c:7c:2e:
14:14:11:8b:90:c3:54:a9:b5:d1:b6:f6:d1:16:68:
6f:c2:dc:18:29:b6:b7:cc:78:3e:5c:46:7b:46:df:
7a:63:7b:e5:2e:c3:bc:76:c1:11:68:e6:1f:a5:f5:
be:a8:a7:06:be:c0:b1:d9:ac:74:ae:af:ec:f0:05:
dd:26:16:bd:9c:c2:4b:46:67:bd:69:e4:6e:24:eb:
c4:78:be:95:0c:fd:0f:ea:36:e0:8d:c0:7a:6a:a1:
b8:18:31:3b:12:9c:c4:4c:2a:77:73:22:f7:c7:ee:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8E:DC:69:84:9D:05:83:5E:5D:3A:AD:06:89:E6:88:94:60:87:44
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e2:b7:26:ac:fa:fd:58:fa:ff:74:be:b5:c0:7f:69:e0:e1:
17:8a:de:c0:19:99:ea:24:5a:ae:13:7e:b9:ef:b0:fe:96:30:
ee:bc:93:ed:52:34:83:64:d8:45:fb:c7:97:57:52:a7:58:87:
45:ab:1e:26:04:c5:12:ac:c9:e8:44:b2:c8:76:c7:90:1a:6e:
e0:19:a0:b9:e0:8c:ca:d7:98:40:3f:30:2f:c2:60:32:56:d2:
bb:90:17:c9:6e:30:3a:2f:d6:00:cb:46:b9:f0:73:bf:2c:1b:
89:7a:6a:3a:d8:86:22:5a:8a:72:97:90:09:24:62:21:90:47:
53:d7:14:96:ee:f2:b5:a2:2d:32:09:2d:b5:d4:c4:f2:a7:ce:
79:25:21:42:34:ec:e5:6b:cd:f5:01:8e:34:92:fa:0c:0e:2e:
c0:7f:68:35:55:c0:36:f6:65:38:de:45:3e:90:9b:cd:9e:55:
c9:f4:23:4e:6f:e9:61:ff:d8:61:f5:c5:74:09:1b:25:41:2c:
69:80:24:ad:6f:37:85:14:1c:2b:af:ad:67:6b:d6:d1:90:c2:
28:45:3e:97:e8:30:b0:d3:fc:b2:a6:30:a0:50:1d:3c:a7:b5:
12:ed:14:a0:ef:d1:e9:23:c1:c2:ec:eb:cd:8f:c8:6b:79:a3:
b1:85:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:56 2025 by rpki-client