Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File: sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier: +AHTzE0isgpY25eZSFPo90FUMSzfjmbt/7PpwGBDKgM=
Subject key identifier: 71:8C:00:35:EF:A0:B7:3B:E4:D3:85:C9:E4:08:21:CA:03:77:BB:6F
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 0198496627D3CBE852FBECC4648475984351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number: 03EC
Signing time: Sun 27 Jul 2025 01:01:28 +0000
Manifest this update: Sun 27 Jul 2025 01:01:28 +0000
Manifest next update: Mon 28 Jul 2025 01:01:28 +0000
Files and hashes: 1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=)
2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: PsT+m1gaxXn54UYO1e25mqP0oDGG3Uf75cnftnHU1t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:27:d3:cb:e8:52:fb:ec:c4:64:84:75:98:43:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: Jul 27 01:01:28 2025 GMT
Not After : Jul 28 01:01:28 2025 GMT
Subject: CN=718c0035efa0b73be4d385c9e40821ca0377bb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:f7:50:d5:bc:df:87:f1:da:93:47:da:99:
ac:b2:e1:f4:67:6b:6a:1a:78:1f:91:33:21:5d:22:
26:52:1f:ea:e1:92:1a:2f:6b:36:4d:8d:f8:76:55:
b0:78:46:bd:0d:fe:d3:63:16:3c:a6:f8:4b:ea:17:
de:2a:45:15:19:bc:b8:81:7d:3f:15:8e:5e:fe:a8:
7e:32:0b:27:4b:e5:b2:2a:33:cb:7f:16:dd:d6:b4:
5d:53:1d:c9:3c:b0:25:15:9b:4c:64:5c:f8:1c:69:
de:db:75:74:3e:57:79:da:4c:20:c9:e5:82:eb:2a:
c5:67:91:5c:bf:4f:97:48:7c:0e:96:8d:86:d5:ae:
7c:ad:ff:37:b7:e6:6d:94:e3:9f:72:47:d6:59:c2:
e7:28:bd:fe:49:bd:8f:82:02:e4:af:84:0b:96:00:
a1:b6:d9:b7:8e:27:d2:f5:e9:35:66:d3:5b:fd:13:
0f:4e:d3:1f:06:33:dd:8b:42:cc:d3:ed:a2:2b:5e:
fc:5b:6b:a8:7b:10:8b:63:25:40:56:30:b3:7e:e5:
3d:81:3f:cd:1a:0b:3d:65:a1:75:a2:50:ad:44:a6:
91:fa:00:a3:7c:9d:5d:d1:f5:17:e9:71:97:39:15:
14:62:69:6e:c2:f1:88:3d:16:67:c1:2c:c7:63:c9:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8C:00:35:EF:A0:B7:3B:E4:D3:85:C9:E4:08:21:CA:03:77:BB:6F
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:70:21:25:a1:03:74:5b:7f:a0:1d:d4:02:b2:e8:68:d5:04:
15:20:7b:d5:e2:a0:ce:35:89:97:49:a9:f6:8e:53:fa:b7:3b:
ad:f0:bf:16:06:e8:54:17:aa:77:98:d1:a4:6b:59:bd:52:ed:
31:10:36:15:3a:a4:f2:aa:32:86:ca:e1:8a:4e:ed:5e:22:de:
a4:82:dc:4e:29:8a:39:d1:3c:71:51:c8:66:eb:8f:9b:63:88:
67:79:32:12:27:ef:af:b3:fc:75:a0:b1:de:a5:ab:b6:ef:23:
52:3e:22:88:ec:2d:48:aa:d3:4d:2b:7d:d1:4e:18:24:31:0b:
ea:c8:c9:cf:7e:c4:24:f6:2e:14:95:c0:84:4a:b7:c5:23:2f:
44:75:e7:3e:42:4a:ba:26:a8:f8:76:61:75:7f:62:15:88:e2:
09:1f:7d:6c:73:29:cc:5b:55:77:a9:a0:94:02:6c:03:8b:63:
3f:bb:ea:be:fd:ae:92:d2:30:31:63:32:4a:93:a6:5a:25:f6:
a9:8d:3f:a8:8e:de:5b:df:8f:12:bc:f9:96:4d:b7:3a:aa:f1:
cf:87:c1:a9:43:c5:3d:a5:40:17:92:9d:77:f0:44:44:b3:f8:
5c:38:4a:34:9c:f2:98:12:05:0c:d8:ef:21:44:e6:e9:0c:8b:
5c:16:b1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:38 2025 by rpki-client