Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: PajnKE0nFftDFEpBVV9/r7Yx7lHPFabGUew1FUmJcMk=
Subject key identifier: F0:E0:BF:64:A3:D7:FC:FE:E0:7E:5E:BD:90:83:29:35:9E:04:32:97
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 01984AE5B880061440966F7245ED1C22942A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0A08
Signing time: Sun 27 Jul 2025 08:00:25 +0000
Manifest this update: Sun 27 Jul 2025 08:00:25 +0000
Manifest next update: Mon 28 Jul 2025 08:00:25 +0000
Files and hashes: 1: Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa (hash: rPricXL6DKMNzIm/8wBOd/xDJhVzBjF0FcknH/0CxQI=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: QuYIi4yYkDkUsCRYI/MqYbJm23s5FsVLcrJj8/lHIUs=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b8:80:06:14:40:96:6f:72:45:ed:1c:22:94:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jul 27 08:00:25 2025 GMT
Not After : Jul 28 08:00:25 2025 GMT
Subject: CN=f0e0bf64a3d7fcfee07e5ebd908329359e043297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:61:59:9b:4f:88:1e:ec:ea:83:95:33:d0:
b8:6f:84:3a:3c:8b:2f:42:ce:7b:ee:d2:a9:6c:28:
b1:4e:f6:21:a7:43:02:5d:74:6a:38:d9:ab:ec:dc:
2f:2a:5e:00:4d:5f:27:1c:6a:55:77:af:6a:05:11:
90:98:1d:75:fb:d8:a7:ea:0e:f1:2c:1c:8e:f9:e1:
0d:e7:d2:48:1d:b5:f2:52:d2:74:7a:91:45:39:3f:
24:1d:14:7a:fa:5c:ce:52:f1:e2:20:f1:a2:2e:ee:
89:16:c6:4b:77:75:93:70:ac:1b:21:77:fa:70:14:
c2:ec:51:f8:81:0d:e6:fb:bc:21:7f:49:3d:81:00:
1e:f7:84:0a:bf:40:66:81:45:9d:de:af:66:53:67:
b0:10:bf:0e:0a:ed:3d:4c:1c:1c:c8:9e:0d:f9:66:
61:c6:9e:72:8e:2c:9b:66:db:e6:7f:31:d7:ef:e7:
3f:c7:7b:b1:40:d0:fe:fa:44:f6:54:00:de:85:0c:
c9:49:70:1f:55:04:04:33:13:bd:21:7e:82:dd:d3:
8c:bc:10:fc:94:79:eb:a4:e1:bc:45:06:99:87:c3:
7c:79:70:1a:32:b7:02:a8:d2:90:2c:b5:4d:24:55:
11:05:ce:9d:df:08:41:72:c6:c5:4c:e0:a4:88:3a:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E0:BF:64:A3:D7:FC:FE:E0:7E:5E:BD:90:83:29:35:9E:04:32:97
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:64:9c:ef:99:4b:d5:46:1f:f4:48:f2:95:bb:2f:2b:6c:8a:
4f:21:54:72:e4:11:e0:39:89:c5:ac:04:70:9b:46:4e:5c:68:
f2:5d:2c:c8:f3:eb:be:88:4f:42:99:96:b2:70:90:86:38:05:
1e:f5:c0:28:40:a8:e7:d4:6e:d7:5b:2a:60:a5:54:ca:12:0d:
40:57:fc:e6:c5:50:ff:2f:7e:50:00:2f:e2:78:e4:f9:22:63:
dd:78:11:60:51:0d:eb:14:94:8c:06:7b:15:71:4e:78:f7:b1:
f3:04:f5:8c:c0:48:bd:a0:08:55:ad:10:6c:f4:b1:f9:1d:1b:
98:e5:c0:64:b6:39:7d:09:c7:09:43:50:df:04:32:92:7f:bf:
85:c5:d9:7f:f2:a5:38:a0:f2:d5:b9:b1:a3:40:fb:9a:8a:df:
8a:6b:bb:50:a7:da:ec:52:55:89:94:62:ad:f5:fb:2a:19:a8:
05:6f:f5:74:1c:ef:91:58:28:07:02:07:57:55:c3:d8:a0:e4:
ea:14:d5:aa:ca:77:1d:39:b4:66:56:84:0c:8a:44:c5:5c:61:
b8:02:e1:0f:db:db:25:d0:41:8f:30:f5:cc:db:08:72:85:c6:
a3:d7:86:52:9a:e4:13:9f:12:8d:77:37:c8:1c:b7:75:ac:14:
47:d6:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:08 2025 by rpki-client