Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: AQYayfSwASB5q0HICCQNxrPi35AwreiU/kXF0XfVTHo=
Subject key identifier: E7:71:11:89:5B:E2:B9:AB:35:68:32:03:D8:90:C6:B1:FB:41:6C:69
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 01984A09F9C6C7486418D684D5EE87EE22DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 0697
Signing time: Sun 27 Jul 2025 04:00:24 +0000
Manifest this update: Sun 27 Jul 2025 04:00:24 +0000
Manifest next update: Mon 28 Jul 2025 04:00:24 +0000
Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: sjcVRyvlnXCJU27rSSepMD9IIrCqbBuTl79X2MSYzIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f9:c6:c7:48:64:18:d6:84:d5:ee:87:ee:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Jul 27 04:00:24 2025 GMT
Not After : Jul 28 04:00:24 2025 GMT
Subject: CN=e77111895be2b9ab35683203d890c6b1fb416c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:37:71:ff:87:b8:f6:5b:4a:ea:22:ba:89:
7f:fe:29:4e:14:ed:0f:ff:8e:6d:bf:e6:2f:33:49:
1e:6d:53:60:ad:83:28:7a:09:b0:24:29:62:c6:b8:
8d:a5:6d:de:d6:d6:84:4a:21:39:6c:37:5b:0e:69:
2d:8b:80:35:d3:10:d2:65:74:de:0b:14:8c:b1:8d:
3f:ff:8f:10:4e:d9:9a:ee:b9:aa:1d:08:f0:61:33:
e6:8d:9e:67:8b:5c:97:98:c9:6c:73:c4:a5:5b:72:
5d:ae:d5:b8:5d:52:a4:5a:54:fb:c0:eb:f9:cf:25:
50:7c:0f:3a:22:7e:50:75:e6:a5:7b:3e:94:99:86:
b5:52:5d:df:43:15:b3:16:c4:c8:3a:07:e7:15:4d:
8b:58:2a:45:24:f3:86:9a:97:09:f8:ee:66:3a:dc:
b4:98:b6:13:53:ca:a6:3b:92:2d:cc:ca:f9:ef:13:
6f:0c:17:e8:94:7c:f8:8c:fe:87:26:d9:16:4a:8b:
84:dc:97:66:4a:5e:3c:7d:b0:26:32:ee:de:aa:c8:
c9:e3:2f:d0:b3:a2:87:75:9a:44:f1:19:48:2c:b9:
f5:71:ef:23:1d:1c:fe:38:ed:8c:1d:1c:84:df:66:
12:91:6d:db:5e:24:3e:bd:45:e0:c8:b3:a8:a9:de:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:11:89:5B:E2:B9:AB:35:68:32:03:D8:90:C6:B1:FB:41:6C:69
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ff:3b:47:b0:4b:f0:0b:67:e4:83:f9:72:13:8c:a5:f3:1f:
5c:42:57:ac:1d:31:d6:36:06:7d:c0:10:75:f1:59:ef:38:51:
17:5e:5c:70:e0:1d:00:4c:e5:80:42:7d:91:6b:55:08:c4:76:
61:1e:ce:c6:00:31:45:88:8e:47:98:c2:d3:ea:63:e1:24:a0:
43:f0:60:7c:6e:f0:78:21:13:46:76:3f:c0:5a:58:5d:d7:c0:
b9:b0:62:34:e2:c6:b9:a5:48:7d:e7:1b:95:f4:d2:2c:c4:de:
7c:4e:e1:c4:d4:4a:81:e7:ed:d3:fe:0d:11:8e:73:04:cc:0d:
0c:88:a0:6f:c9:a0:65:18:f2:2b:7a:13:1e:e6:27:62:13:65:
48:0e:a8:f9:99:07:11:ab:67:85:42:33:53:76:e2:02:19:ac:
1d:b2:46:18:34:b2:9b:12:11:3f:2f:9d:b3:ca:30:45:f6:a2:
e1:75:d3:ff:2e:c3:52:93:04:be:94:bd:25:85:03:7f:70:df:
34:17:78:9e:5c:bd:fc:00:86:61:f9:fd:de:06:80:e6:8e:64:
2d:19:93:7b:94:0f:b9:3b:87:7b:5d:f2:53:2a:67:5d:eb:0b:
b5:1b:4d:0a:14:da:94:3b:3d:a2:d9:dc:36:ed:cb:21:09:99:
b2:54:12:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:17:05 2025 by rpki-client