Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: NBKOxNwkjbCjX7UegY+J3YzxIjierKClHl1X2rZW1Lc=
Subject key identifier: EA:91:0D:04:23:27:9E:2D:20:E9:B1:1C:F4:14:EA:1A:A0:C1:DA:16
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 019845F5FE7D5BB7F22FF695E05B3C368BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 09:00:06 +0000
Manifest this update: Sat 26 Jul 2025 09:00:06 +0000
Manifest next update: Sun 27 Jul 2025 09:00:06 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: 71nKhGV+d+UZ0YgwVnd+c5GAgmHAQRbZZq/MHF66IqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f5:fe:7d:5b:b7:f2:2f:f6:95:e0:5b:3c:36:8b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Jul 26 09:00:06 2025 GMT
Not After : Jul 27 09:00:06 2025 GMT
Subject: CN=ea910d0423279e2d20e9b11cf414ea1aa0c1da16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:c9:52:85:48:b8:c0:8b:f7:57:84:c0:a7:
cd:ce:31:e1:29:cf:d1:a8:e2:b5:11:ee:e4:22:e6:
36:0d:50:e4:26:0f:db:a0:52:7a:e4:cf:f2:cb:a6:
9d:8e:8a:fc:01:04:f2:85:43:97:be:67:81:f1:f9:
a5:e0:c7:8d:20:6f:59:fe:e9:da:a5:dc:51:5e:d2:
35:0d:22:21:74:ca:4b:9b:90:6c:2a:81:65:4c:f6:
f8:8a:91:a4:43:43:aa:c3:8e:f5:9b:69:93:02:84:
a4:c6:dd:26:f7:2c:28:2e:ad:8f:3e:10:62:04:06:
11:ee:b7:bf:38:4a:a0:6b:c6:92:fb:18:e1:24:a5:
6f:68:83:ab:5c:26:ef:cb:5b:21:14:96:05:0a:49:
10:f1:05:0d:20:21:8d:21:95:64:ce:2f:f0:64:2e:
fb:20:45:b7:15:75:7d:e3:1e:fa:4e:69:8d:2d:b0:
79:d8:a5:d0:da:36:71:a4:14:24:a6:1d:e2:52:38:
a2:1a:4b:92:28:19:af:ce:55:68:22:89:2a:9a:2f:
8d:86:c4:36:80:7f:8d:e3:ae:a8:05:21:71:19:b0:
0f:72:60:92:a5:34:6a:c9:52:a6:05:a9:eb:2f:08:
a1:b8:05:9c:8a:8a:fb:32:3e:1e:ae:32:47:7c:8c:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:0D:04:23:27:9E:2D:20:E9:B1:1C:F4:14:EA:1A:A0:C1:DA:16
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:37:5b:4d:75:3e:43:3a:90:37:6c:b6:89:d9:f1:61:1c:9e:
9e:e6:4c:c9:53:4c:1f:bd:28:94:de:1b:a1:10:76:94:87:61:
0d:2c:9e:96:4b:57:a5:96:1b:2f:ee:94:04:74:31:c3:e8:24:
ce:60:ff:d7:de:48:45:58:f1:15:0e:74:a3:62:54:92:22:b3:
fb:34:d5:cc:4b:c4:98:63:94:55:28:58:52:bc:45:f7:f6:da:
23:97:5f:9e:13:1b:13:87:e6:4d:68:db:a0:4e:a8:33:df:0b:
92:cb:07:f1:39:f7:a6:8e:c8:29:b8:57:c1:dc:d0:b4:08:9d:
4e:96:7e:7b:ff:10:1f:b1:f5:c1:72:9e:7a:d2:76:9c:ff:46:
c0:2e:77:b8:21:0b:b0:86:0a:73:2a:f7:57:cc:b6:e8:2a:08:
31:83:66:ef:44:8f:12:e6:b3:55:ed:86:7d:b1:47:46:d1:65:
38:0b:50:b4:e8:db:07:a3:8c:40:7f:96:d3:65:63:22:16:0c:
35:f3:e8:bb:03:26:62:f9:df:ff:1d:45:e9:fc:6a:c4:e0:08:
58:4d:f4:dd:7b:f9:23:b3:c5:82:e2:0b:d7:ee:3c:cf:ce:0b:
9d:da:65:fa:ee:a3:1b:41:66:93:ab:9f:0c:74:79:f0:66:bc:
86:18:0f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:08:57 2025 by rpki-client