Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: vQgHaLzEFbumBcnZQLIuH1i4h1m9us1LgmlHrWdpbKQ=
Subject key identifier: 61:F3:6C:79:66:AA:91:AB:C5:9D:2E:E3:5A:AD:BA:69:F5:CD:2C:76
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 01984AE5A2DDAB4AAC4E2F5AE994259BA195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: B7
Signing time: Sun 27 Jul 2025 08:00:20 +0000
Manifest this update: Sun 27 Jul 2025 08:00:20 +0000
Manifest next update: Mon 28 Jul 2025 08:00:20 +0000
Files and hashes: 1: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: l1Lwo8CFQv16SKt7XMb+4GJrZ1nfyE41gO9SjJHUlaU=)
2: y_jzZWxrMh2AT3qjdH5sDFcbnso.roa (hash: UBOvdV+QBpMo/gPKyJWNtGffNnN28PAA/OvI521Vudc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:a2:dd:ab:4a:ac:4e:2f:5a:e9:94:25:9b:a1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Jul 27 08:00:20 2025 GMT
Not After : Jul 28 08:00:20 2025 GMT
Subject: CN=61f36c7966aa91abc59d2ee35aadba69f5cd2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:ab:77:78:87:50:ce:87:8f:cd:d2:e0:d7:
35:69:99:62:ae:1a:fe:2e:91:35:f9:2e:e8:39:9d:
26:4d:14:fe:ff:a1:04:9e:64:88:2e:7a:34:ad:26:
73:ca:6d:b3:78:6b:17:9d:24:36:bf:27:9f:8a:8a:
2d:75:e4:38:dc:37:6c:7c:41:da:b9:4d:82:5f:5a:
8a:7c:6e:6b:75:16:fd:29:e9:3b:cf:77:2e:fb:12:
d7:80:be:cf:96:9e:a1:53:04:d3:28:3b:80:cd:0d:
fa:3f:0f:99:03:94:94:4c:99:dd:a7:b6:76:5e:f4:
b3:37:66:eb:d6:39:44:73:ab:8c:24:a8:75:ef:d4:
9e:e9:8e:c9:dd:ed:7e:0a:27:cd:b9:e0:fe:ea:96:
eb:74:f6:94:6e:67:e5:79:84:cc:4c:59:e3:ee:83:
08:41:08:61:47:22:4a:fc:17:35:99:05:90:4e:e5:
da:c1:e2:da:5c:66:1c:e8:fd:b5:42:ed:c3:56:cb:
da:09:0b:cf:27:a6:da:48:ef:79:11:22:d5:c0:f7:
2b:b5:90:80:e6:f6:05:06:a4:ef:fd:1e:95:9b:dd:
5d:62:1c:f2:0e:06:8f:9d:bd:66:75:25:87:28:31:
ad:ec:f0:6d:e2:be:f7:1c:2d:5f:f5:e7:4d:1b:fc:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F3:6C:79:66:AA:91:AB:C5:9D:2E:E3:5A:AD:BA:69:F5:CD:2C:76
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:d8:34:f1:ba:59:f9:cc:a3:c0:94:01:13:d7:7d:b2:02:
30:e6:e8:ca:04:f0:f5:bf:f1:3e:2a:a3:a1:29:26:c9:f9:4f:
da:16:61:72:b3:f9:77:1e:ff:c6:b4:5b:0b:f4:13:34:90:43:
89:c6:ea:bb:a4:84:87:8c:9b:cb:5c:93:fa:f2:de:bc:a2:73:
52:a8:78:a4:44:0f:f9:e0:d0:6b:02:8b:7c:e9:b8:5c:0e:1a:
c4:5a:c6:e8:e2:03:ec:9c:fe:51:98:e1:52:51:01:9d:b9:67:
01:47:d0:0a:fb:4d:c2:56:3b:45:34:4f:76:d3:08:59:aa:50:
ac:82:ab:0d:e8:06:30:ce:df:79:62:30:b1:3a:61:e5:8f:08:
90:35:ba:ed:29:de:07:d6:16:b5:d3:f1:6d:4f:8f:28:b8:2c:
b5:00:6a:38:3e:d2:da:3b:88:ee:2e:a9:9f:de:da:63:16:b6:
a8:a9:4e:d0:ef:73:ea:a0:1c:c3:57:79:e0:c4:72:b9:71:95:
02:28:2a:1f:63:eb:d3:ca:03:76:e1:61:33:f0:2c:22:76:1a:
2f:5d:42:b9:cc:6b:3e:98:6e:1d:65:69:0e:5f:25:9e:c9:4d:
3c:8f:13:26:9a:f6:a9:46:e2:d1:6e:08:70:c4:01:1a:8b:b4:
9f:76:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:09:19 2025 by rpki-client