Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier: ZP4gVX+jGGVqk0fiMcA0Q5XHRyIRKS3hJkq0XBlpO3c=
Subject key identifier: 3F:06:00:73:66:F1:A0:72:D4:EC:62:07:25:F3:47:A5:BB:31:6B:7A
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 01984889A62C01C298396BAAF5709900CDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 21:00:37 +0000
Manifest this update: Sat 26 Jul 2025 21:00:37 +0000
Manifest next update: Sun 27 Jul 2025 21:00:37 +0000
Files and hashes: 1: 4RKif-sVDnQcBzYwPxTkoab85KM.roa (hash: SrOlgyMeJ89vYHgpHfX8GmpEUx/qSwc8CkZHX0V14Kg=)
2: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: DoEOR02Ss8xrBjiwPwBu6qYZF/gCcxewddyEXOw4RXE=)
3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:a6:2c:01:c2:98:39:6b:aa:f5:70:99:00:cd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Jul 26 21:00:37 2025 GMT
Not After : Jul 27 21:00:37 2025 GMT
Subject: CN=3f06007366f1a072d4ec620725f347a5bb316b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:c8:a3:30:8f:4e:a7:50:b8:56:15:c0:66:
37:1f:d6:ef:bb:bf:6f:4b:00:83:d6:b1:f7:7c:e1:
12:dd:f6:e9:46:5d:6f:1a:be:eb:86:a8:fb:c6:54:
66:f7:8e:c4:06:a6:a2:1c:75:ed:5d:2f:8b:39:22:
e8:04:71:d3:45:17:e6:3e:2e:a8:65:26:57:93:fe:
74:3f:c0:ce:5f:f9:fd:05:60:b8:e5:05:85:19:da:
bd:d7:07:04:2b:fa:0c:3a:3b:fd:d6:03:bc:e5:c3:
65:cd:9f:d6:4f:0e:8d:f7:bb:90:d9:4d:15:8f:cd:
f2:b3:84:f0:e7:36:8f:8a:9b:e7:da:f6:2f:ec:a1:
ba:d4:1c:b6:95:93:bd:7d:21:32:38:c2:e3:99:0f:
63:10:ac:dc:7e:0e:6f:63:35:c2:00:b7:f0:52:75:
f4:94:69:5f:7b:6d:91:00:0d:65:f2:19:cd:74:d3:
fc:87:0b:4d:fc:57:97:b0:0b:c3:fe:af:28:0f:f5:
09:83:ca:a0:ef:f2:f8:7e:fb:ee:2b:bc:48:c3:ea:
6c:38:3e:00:19:55:80:fd:48:f9:3d:22:09:3c:f4:
e8:d6:a9:b8:1a:5d:a6:17:65:2d:ec:f7:f8:2e:ec:
c2:a7:3d:a6:19:1e:0d:07:06:95:9c:42:05:35:61:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:00:73:66:F1:A0:72:D4:EC:62:07:25:F3:47:A5:BB:31:6B:7A
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:78:0e:b8:18:c4:2e:3a:c5:79:6a:6e:42:b1:40:12:30:b2:
4c:8a:30:92:c5:00:64:e2:2c:93:6d:82:05:67:d1:77:0c:12:
22:da:93:4f:a3:21:e0:fd:6e:3c:81:7d:59:ae:03:5e:28:29:
aa:40:43:6c:4a:56:39:b8:6f:63:01:05:bb:5b:c4:3e:63:6c:
d1:e0:71:96:48:b0:ae:1f:01:a7:cc:86:fb:c8:d0:05:23:6e:
16:06:b6:47:c1:e5:2a:50:10:4f:9a:8c:c6:70:fe:e8:e8:67:
cb:cc:b0:a1:97:f3:66:bb:f1:33:6f:31:22:3a:61:a9:f2:00:
59:f7:2e:3a:a6:df:6e:aa:8c:c9:5d:50:47:55:b2:a2:9a:2c:
43:74:7b:14:da:be:2d:b1:1d:56:25:e3:10:fb:4e:b0:f0:a1:
5f:53:d5:df:0d:c5:a5:b8:05:d3:50:2d:59:55:9d:89:37:ac:
9b:1b:59:2e:6b:98:c9:35:b0:2b:2b:6e:ac:67:bd:30:3e:f7:
fe:76:91:1f:ea:b2:58:e0:ac:25:d9:78:c7:b8:dc:0b:68:ce:
d0:e8:9d:54:82:60:96:2a:e9:43:46:57:45:e2:66:9d:69:f3:
92:d4:f9:1d:58:b6:aa:72:99:f1:67:71:13:2f:ad:95:67:b3:
cf:f6:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:21:35 2025 by rpki-client