Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: d3lNrDYVGkXiYYn50cFkg1QkE+yM4PVjOcmc6U7KPh4=
Subject key identifier: 6D:60:DE:36:D0:C3:E6:C3:14:6D:EF:BE:99:26:16:BF:51:0A:8D:24
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 01984A4159543CFE10688F4BFCC8E8A76538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 1616
Signing time: Sun 27 Jul 2025 05:00:53 +0000
Manifest this update: Sun 27 Jul 2025 05:00:53 +0000
Manifest next update: Mon 28 Jul 2025 05:00:53 +0000
Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=)
3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: LEDrvPZ3KgdkLTnvKqtC0yntLE25tkBLEJMKz3OzYCg=)
4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=)
5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=)
6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:59:54:3c:fe:10:68:8f:4b:fc:c8:e8:a7:65:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jul 27 05:00:53 2025 GMT
Not After : Jul 28 05:00:53 2025 GMT
Subject: CN=6d60de36d0c3e6c3146defbe992616bf510a8d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:93:c0:6b:83:f8:46:ec:5b:27:d2:70:a0:
ab:d3:cb:ed:ba:dd:99:37:68:e7:7b:e7:cc:d1:f1:
5d:e5:d7:0a:98:ce:f1:ab:25:9a:fb:01:5a:5c:4f:
85:78:da:a2:9b:e7:7e:10:c9:e7:b1:1f:31:f1:98:
0c:55:b6:b1:ff:d6:64:1d:f6:f4:26:14:c9:cb:83:
bf:cc:27:5f:98:4c:f9:72:42:19:4d:61:15:c5:39:
f5:ff:57:38:fa:6a:6d:69:b7:fc:3e:f7:c8:7f:52:
56:6e:cd:57:a3:af:51:e2:cf:4c:a0:b4:34:e0:92:
f1:14:63:52:f0:2c:52:47:c5:4b:b8:56:94:e9:ae:
e1:ad:74:97:d2:43:b8:91:c5:4b:24:42:c7:20:53:
b9:28:4c:a9:76:c7:98:95:33:48:38:c4:b4:a9:ae:
93:d9:25:b5:91:08:03:1e:81:cf:19:57:c3:b8:09:
21:d1:32:72:ab:c0:9d:01:e6:42:c8:57:b3:b4:e2:
c2:1e:59:6c:51:10:2c:77:37:18:be:fd:98:8b:e8:
82:e7:af:b6:b2:89:6f:b4:e4:a5:3b:23:7a:11:20:
59:22:01:27:dc:27:ef:61:2a:f3:51:bc:c8:63:06:
c9:ad:fb:cd:32:cd:75:6f:1a:4e:7c:41:dc:b2:83:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:DE:36:D0:C3:E6:C3:14:6D:EF:BE:99:26:16:BF:51:0A:8D:24
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:91:64:b6:c5:77:6e:09:f1:a7:82:b4:d4:3a:ba:27:07:d9:
ea:05:a0:4a:b3:bf:67:90:5b:78:aa:68:99:c7:2e:ab:80:c8:
54:ba:12:6a:3b:ec:5f:94:e4:39:d2:94:a2:ed:d9:d0:00:2f:
10:4c:5c:21:a6:d5:bd:04:d9:74:9b:a3:69:59:73:04:57:cf:
9b:04:9e:5c:b5:e4:92:6c:d0:50:41:68:a9:15:8f:27:97:de:
2f:a9:13:3c:bc:b5:55:02:66:0e:ac:fa:fe:38:14:71:dc:51:
44:ac:32:6c:95:f4:67:e8:2e:0a:be:58:a6:92:c7:02:c1:7b:
14:12:56:73:86:00:1f:16:5c:76:ce:4f:2f:a0:f4:b8:82:d2:
6a:6d:89:3b:2b:93:8a:24:69:b4:d3:34:bd:6a:9e:70:6a:49:
48:32:95:d5:82:ab:2a:13:9c:89:77:09:b6:30:be:69:3c:66:
5d:a1:4a:60:e5:f1:6c:70:df:a6:64:e4:86:5e:f1:1c:04:89:
1a:fe:6b:24:5d:b6:04:cc:de:3b:7e:0d:b5:1b:05:18:54:03:
b8:7b:39:56:94:20:4b:b1:b6:89:01:9c:02:2c:5e:78:d2:dc:
f7:84:7d:3d:20:c9:06:3e:78:42:4d:50:23:93:92:77:1f:3e:
69:1d:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:15:04 2025 by rpki-client