Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: 8Q/vs3HWRGwmrC2hU3tctoKHw7MoTUnFbhK9ua3sJxA=
Subject key identifier: 64:7C:AF:69:D2:F2:C8:89:5F:7C:76:43:7E:01:F4:83:D6:F7:BC:B7
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019848F7154379E857025CDF92B0A08816E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:08 +0000
Manifest this update: Sat 26 Jul 2025 23:00:08 +0000
Manifest next update: Sun 27 Jul 2025 23:00:08 +0000
Files and hashes: 1: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (hash: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=)
2: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: Mgg2TZlsMTEksV3JREfCSV4x+DnzcYZS5wuauPPAzBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:15:43:79:e8:57:02:5c:df:92:b0:a0:88:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Jul 26 23:00:08 2025 GMT
Not After : Jul 27 23:00:08 2025 GMT
Subject: CN=647caf69d2f2c8895f7c76437e01f483d6f7bcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:93:d3:22:c9:f2:4b:65:11:58:5a:88:c9:
4c:0c:82:ba:54:1f:93:37:c4:17:ed:5a:0f:c4:80:
df:6f:fb:77:13:ca:83:29:62:02:ed:0c:28:b6:b1:
86:3c:f6:2e:16:1c:7a:5b:66:db:b1:84:50:7b:e7:
d8:38:c3:f0:2e:56:95:2e:26:70:8f:fe:6b:0f:8d:
38:6c:96:91:9c:35:68:f1:81:4a:1f:e9:77:5f:9e:
40:82:08:64:01:eb:64:d9:74:a3:a8:4c:85:a9:01:
71:dd:b2:d1:16:98:e6:6d:8c:e5:bb:69:0b:75:54:
e0:2f:d2:be:ed:bb:2f:74:74:61:97:d2:b3:96:15:
e9:a1:3d:71:36:39:43:89:6e:94:fc:0f:c5:c5:ee:
60:d3:e0:b6:f7:4e:40:c3:4e:9a:bf:11:29:5d:5d:
1d:36:02:ad:bf:8a:25:45:f4:cf:29:f6:d1:37:54:
3c:6e:a8:b8:fc:4d:64:a5:b3:1f:ac:52:4f:52:16:
28:cd:35:9a:df:28:60:50:e0:59:71:0e:0c:cc:32:
c4:36:94:f5:aa:7d:8e:82:ce:93:22:25:d9:d4:33:
ff:36:5d:8a:24:d9:3e:93:62:27:d6:b0:88:38:c5:
53:15:79:37:56:e4:ff:1e:09:96:08:2d:9f:b4:6d:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7C:AF:69:D2:F2:C8:89:5F:7C:76:43:7E:01:F4:83:D6:F7:BC:B7
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b5:39:37:4c:7f:24:7a:51:b1:3b:30:92:ae:6d:cf:74:cb:
2b:7b:b3:cf:e6:0d:09:c8:7a:8a:2f:88:83:35:29:3a:85:d8:
d1:7e:d3:5e:a9:d3:85:fa:23:c2:20:89:3e:e1:84:f9:f0:2e:
b5:ee:11:e1:11:b2:a4:9c:af:94:39:da:7d:64:f9:1b:3c:71:
8a:99:75:f6:b7:7f:85:fe:b1:43:20:f0:6f:94:e6:88:08:91:
bd:ee:92:7e:8d:d1:80:52:61:8b:8f:71:b8:53:80:9e:e0:d4:
74:92:b2:77:d6:9e:53:3f:bd:c3:80:c0:73:4a:9f:10:c7:49:
85:8b:e1:01:39:50:1e:6c:36:72:7f:75:c5:0f:c3:03:77:34:
51:27:75:72:14:96:94:ea:9d:02:55:f3:a2:ee:8e:3f:b2:87:
bb:82:70:1a:2a:85:e7:12:b9:84:31:ab:cf:4c:38:01:b5:98:
35:64:cf:36:c0:83:79:8e:2f:a6:6c:cf:8f:26:51:02:d8:08:
60:f9:70:10:16:fe:9d:71:74:f5:cb:b1:8d:7d:aa:b5:5e:53:
3a:b7:9a:2c:41:dc:0b:70:9a:bc:8d:32:43:07:70:f1:19:48:
9f:2a:a2:c7:d7:b9:6e:26:9d:73:a8:96:6e:f0:22:a9:0a:a1:
06:6a:b8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:48:16 2025 by rpki-client