Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File: r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier: s4UAPZArK2y/OS62869rCcdHhzqTxHFyCIs7warLzeU=
Subject key identifier: 8A:93:DE:9F:28:5A:85:40:04:8A:3D:10:60:29:80:B7:45:89:84:84
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 0198458957246595FEC380C24996EF04DE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:01:25 +0000
Manifest this update: Sat 26 Jul 2025 07:01:25 +0000
Manifest next update: Sun 27 Jul 2025 07:01:25 +0000
Files and hashes: 1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=)
2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: jtHc6QYr06BpUXocACNNH4wthwye32MRTnnDN+eW8e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:57:24:65:95:fe:c3:80:c2:49:96:ef:04:de:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Jul 26 07:01:25 2025 GMT
Not After : Jul 27 07:01:25 2025 GMT
Subject: CN=8a93de9f285a8540048a3d10602980b745898484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:0b:28:67:52:bb:52:69:f7:94:32:1f:72:
18:3b:0d:a0:7f:c0:dd:b8:4e:20:6d:55:7c:3a:97:
e2:23:18:bd:bd:3c:c6:c3:f2:3c:c4:e8:b4:34:e0:
2c:b7:21:eb:2b:f0:d0:60:36:96:01:1c:92:85:37:
63:bd:ea:67:1e:f1:94:47:b1:c6:3e:c8:dd:44:ae:
59:14:7b:04:69:ce:0f:cb:3b:d5:a9:d9:e8:67:75:
52:25:a6:70:87:ff:eb:7a:d8:9c:78:84:be:c0:a4:
81:0f:6e:da:18:cc:79:0a:94:12:25:8a:36:f5:b6:
e4:e0:e3:1b:3f:b8:e6:a5:f2:c6:24:d6:21:9b:57:
30:86:6c:71:b2:4d:3e:25:cc:4f:46:d6:a8:d4:7f:
25:71:d8:d9:b2:1e:c4:cf:36:fe:13:f5:e5:0d:05:
7c:88:7e:f0:f1:09:fa:6a:ce:b7:a6:37:2f:51:8e:
6a:e2:da:59:5a:af:c8:dc:73:aa:d8:be:b1:04:16:
74:da:47:d4:2e:89:73:51:61:d3:91:0a:94:92:fd:
53:3b:b0:7a:22:49:1b:14:71:04:48:b9:83:eb:17:
ba:91:4f:68:5f:55:1a:2d:6b:b1:a0:89:95:3d:8b:
fd:0a:48:40:7f:58:99:c0:60:22:f8:86:47:2f:d7:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:93:DE:9F:28:5A:85:40:04:8A:3D:10:60:29:80:B7:45:89:84:84
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:80:c2:2a:8e:9c:a6:63:d5:df:cc:e8:46:53:53:53:f0:e8:
b8:b2:d1:a8:e5:fe:97:7c:fe:2e:82:d2:94:7f:f0:ca:8b:5a:
6e:3d:b9:ec:68:ef:9f:c5:80:e0:d2:81:f3:24:be:48:ae:bf:
6c:6e:b6:97:04:17:c2:e4:86:47:9e:eb:f7:df:20:f4:34:47:
f2:4f:83:dd:2b:73:a0:f9:ee:dd:17:d1:33:cd:47:c4:32:63:
32:65:ac:4c:79:a5:1e:aa:38:2a:14:da:94:8b:ca:55:46:1c:
04:6b:84:15:a3:dc:ba:51:de:ac:3f:24:42:70:5e:25:f4:d3:
1d:61:eb:b4:25:48:61:f4:10:53:1e:3d:83:27:63:51:1f:85:
4e:d6:85:af:e3:2c:5e:51:ed:bc:7f:bc:fa:30:1b:e4:00:41:
07:92:bd:7b:3b:97:a1:23:c3:2e:9a:b8:fb:9f:05:2b:b2:0b:
98:44:6c:41:59:17:74:99:c6:00:0b:51:a8:51:52:20:69:cc:
d4:a2:61:0e:f2:7b:51:35:76:04:f4:c0:a0:5e:a8:49:57:2e:
1d:7f:06:5a:68:bd:e8:e4:58:05:21:3e:ca:6c:3c:5d:9d:ec:
b4:82:3a:2e:f5:91:cf:e7:4e:64:2a:a2:7b:75:d8:26:79:2b:
91:c9:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:37 2025 by rpki-client