Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier: schfOXazK9UiPCcOSch+oGmZWumkCBm9geUey2MM7qM=
Subject key identifier: 0D:E5:62:D9:0A:85:32:90:1A:CD:2A:48:51:77:D4:43:63:B6:6E:55
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 019848C09A2F682DEDCFDA2812A4B48D1767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 22:00:38 +0000
Manifest this update: Sat 26 Jul 2025 22:00:38 +0000
Manifest next update: Sun 27 Jul 2025 22:00:38 +0000
Files and hashes: 1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: tVplhmEqrd+tRPI0xF0D6BZzSkwecS6/O8y4hkclSHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:9a:2f:68:2d:ed:cf:da:28:12:a4:b4:8d:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Jul 26 22:00:38 2025 GMT
Not After : Jul 27 22:00:38 2025 GMT
Subject: CN=0de562d90a8532901acd2a485177d44363b66e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:f4:c8:52:ef:df:43:a6:ac:e8:20:5a:43:
95:2d:22:cd:45:0b:7e:18:80:a2:04:ab:93:5e:44:
f5:51:cb:68:8e:da:2b:5c:d3:f3:d5:7b:dc:e3:2d:
59:9c:f3:57:82:8f:7c:b7:4e:48:46:9a:74:a9:39:
1a:a7:71:87:cc:02:e8:38:65:a7:68:ee:1b:f2:9a:
19:3c:b1:9d:70:5a:a1:a8:e4:e5:b5:80:14:89:56:
03:d3:6d:a9:0f:95:d4:f2:d2:56:e0:95:c9:1a:19:
de:b4:66:bc:96:b4:ff:e8:9b:e1:4a:f4:d4:b5:f0:
96:10:7c:32:c2:a9:bf:96:78:d4:30:cd:65:ac:08:
2a:8f:74:14:c0:0d:74:ca:3f:60:00:1b:75:cd:db:
9f:8c:91:57:dd:09:a9:d6:e1:ad:5f:18:cc:53:59:
2c:c0:c3:cc:48:11:ff:dc:2c:a0:16:21:51:df:d4:
44:7e:16:d9:80:8f:ad:fa:2e:00:30:45:30:d2:c0:
9b:4c:eb:5e:81:25:ec:96:e8:63:98:20:2c:e9:72:
59:8b:c8:e6:65:76:a2:51:4e:e3:d3:40:0e:81:e6:
21:c6:99:4c:a3:ba:60:fe:e6:6f:75:51:b6:e9:26:
b1:06:2d:54:7a:61:6e:fd:33:d6:74:c9:85:bc:ec:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:62:D9:0A:85:32:90:1A:CD:2A:48:51:77:D4:43:63:B6:6E:55
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e5:e4:47:72:cb:f6:b6:67:c7:fe:4f:7e:19:22:30:61:1d:
2b:22:1d:70:5e:35:02:58:59:b8:7d:00:f1:46:98:39:5f:52:
4d:a6:41:a1:58:c0:b6:af:e1:42:fe:49:8f:23:37:42:c4:9a:
1f:be:a1:45:00:f7:da:6f:f6:0e:16:48:31:5e:9e:a9:8c:46:
ff:6a:62:49:5f:53:fb:e0:87:79:13:ef:8d:df:7b:4d:7d:67:
a0:29:47:5b:c8:78:62:03:d9:a8:94:00:1f:f7:fc:0c:39:aa:
43:0a:c2:94:00:df:aa:f1:c1:0b:ad:74:38:36:ab:09:c2:58:
a5:44:27:a3:6f:c5:3c:b0:fe:8e:03:ea:f9:9a:d9:84:7f:bc:
03:35:18:92:89:57:49:eb:f7:81:bb:53:51:ff:b2:7a:4e:59:
0a:fd:da:29:10:3c:79:84:bd:9b:eb:c2:95:c6:75:60:ec:55:
01:1a:58:75:ac:e0:67:16:34:b7:e0:5a:f5:d0:6e:84:66:32:
29:c2:b0:d4:c8:ac:b6:da:d0:53:07:46:8a:d7:54:3f:d7:ae:
fb:6f:8a:7c:ee:06:f7:de:d7:be:af:33:3c:3d:ce:06:36:6c:
ce:fb:59:e0:2b:d7:f0:e9:34:05:ac:4f:52:f3:4f:e3:d0:2b:
80:a6:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:06:45 2025 by rpki-client