Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: 7e5ZPg18JhIL8vD0AbUDoNx1WM/mlReAxpyEH1vlDrs=
Subject key identifier: 2B:A7:80:0B:06:CC:AA:21:B9:98:63:4A:18:95:F4:E8:4C:15:1B:F1
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 01984E5474C56EDB2C6AF657B6FFBD68B38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0E53
Signing time: Mon 28 Jul 2025 00:00:14 +0000
Manifest this update: Mon 28 Jul 2025 00:00:14 +0000
Manifest next update: Tue 29 Jul 2025 00:00:14 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: ueTzNZWHCr7MEpsEuAOL8wbTa/QicJAJd4xyL++kdw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:74:c5:6e:db:2c:6a:f6:57:b6:ff:bd:68:b3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jul 28 00:00:14 2025 GMT
Not After : Jul 29 00:00:14 2025 GMT
Subject: CN=2ba7800b06ccaa21b998634a1895f4e84c151bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:dd:43:38:00:84:1d:9f:22:f6:49:2c:ca:
c4:29:0e:70:81:e1:07:19:ff:d4:ac:93:bb:99:99:
fa:7c:92:4d:54:74:cd:07:14:d2:21:26:94:c9:45:
70:e9:f4:04:0e:df:5d:5a:93:63:89:f2:79:19:9f:
e2:10:a2:a6:50:1b:b0:ef:b8:7d:7d:0e:0a:c6:54:
27:b9:1c:b0:9c:b2:ca:fb:84:0e:39:52:34:3e:ce:
48:ad:40:b5:89:07:e2:be:c1:84:2f:30:57:40:f3:
63:99:94:5f:3b:5c:32:a2:04:0e:0c:59:97:d0:79:
c3:af:be:a8:5a:67:91:96:fb:b1:c1:7b:57:48:25:
0f:e4:1a:6f:e4:d1:94:93:41:ca:06:96:f8:0c:67:
c9:9d:39:11:0c:db:93:1d:4b:9b:d0:fb:9c:1e:8e:
9c:0a:ba:67:9c:45:ba:36:07:21:c1:7b:63:a4:c6:
3e:39:9e:84:2f:ea:04:b0:81:c9:84:53:f3:e4:52:
46:2b:aa:0a:16:90:ac:a4:ca:40:2b:13:1a:8f:d4:
47:e8:c6:4f:d9:bc:06:98:f6:55:48:3a:d0:40:5f:
1c:84:47:f4:11:6e:f7:5c:4b:cf:28:b7:52:60:04:
7d:34:f6:46:16:fa:b6:a4:63:2c:37:01:6c:2f:1b:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:80:0B:06:CC:AA:21:B9:98:63:4A:18:95:F4:E8:4C:15:1B:F1
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:d1:ee:58:07:d1:01:31:45:3a:4d:ea:07:a1:e5:fd:21:
77:9d:f9:8a:e6:49:a5:2f:ba:7b:5d:ee:96:22:18:86:fc:73:
04:ba:09:91:48:37:3c:9b:9b:de:43:c2:89:ce:40:e7:17:89:
55:cf:11:f7:36:ab:ce:f1:bc:bd:66:24:b4:0a:40:5c:0a:56:
12:cb:ad:67:c5:cc:b8:a3:c4:46:52:55:d1:e1:a7:64:59:55:
ab:e2:78:1a:27:eb:04:80:35:f8:e8:3a:d2:9e:b7:af:6a:c2:
7b:ca:dc:9c:19:83:32:4a:f3:21:0d:1e:37:62:61:58:f3:43:
ec:1c:5c:af:1c:62:2b:83:74:39:0b:c5:62:78:5a:35:95:62:
cf:5b:1f:b2:02:d7:2f:14:f9:ba:2f:f5:50:bc:72:ac:95:e0:
2f:9e:36:c2:25:e6:b6:57:48:48:7c:05:3a:ab:94:d1:d1:90:
72:74:01:c8:3e:04:46:72:65:1f:cb:92:cf:a2:72:d1:df:b3:
e7:aa:59:7c:d6:48:3d:e4:d6:76:6f:58:c7:84:e6:bd:3d:53:
13:2d:b1:c8:3c:c7:44:a8:37:a4:ad:bc:a6:1e:5a:3a:d8:c1:
8f:9d:1b:c8:5e:60:04:bf:e4:a0:92:59:9b:40:02:a4:de:07:
9f:2c:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 04:23:18 2025 by rpki-client