Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: +4JXq0WQDvl985F6x39q5aVxNFY2sP6iRKcynxym0Kk=
Subject key identifier: A6:72:A9:57:BF:E2:FD:F1:C2:25:99:F3:08:D6:20:CD:0C:F1:0D:37
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 01983F4F6FB6761F034213A09483CC8B1724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 02:00:27 +0000
Manifest this update: Fri 25 Jul 2025 02:00:27 +0000
Manifest next update: Sat 26 Jul 2025 02:00:27 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: Qv9UGWzlqaopoX+5V0g1ZsueWA8sd/GYE3zY0KiFWDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:4f:6f:b6:76:1f:03:42:13:a0:94:83:cc:8b:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jul 25 02:00:27 2025 GMT
Not After : Jul 26 02:00:27 2025 GMT
Subject: CN=a672a957bfe2fdf1c22599f308d620cd0cf10d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:65:6f:0d:3c:40:ca:6c:e1:f0:f9:ca:a2:
60:b5:ba:16:4a:c4:e1:b8:f0:d5:ac:6c:82:b1:42:
d5:7d:7e:c2:3e:2e:fe:a3:d3:ef:6a:f9:75:6c:6f:
6e:0e:0f:41:fb:c1:77:6d:6b:54:50:c5:22:77:7f:
cf:7d:f3:89:35:5f:b0:5c:71:ab:b3:45:35:91:2c:
6e:c0:e1:d0:56:3c:03:d3:59:9a:09:20:0c:65:61:
27:63:46:51:16:03:68:99:7d:d1:8b:7a:c9:1f:2c:
43:1d:c1:d2:4c:c7:33:2d:b1:f3:7c:d2:86:41:76:
81:9c:cf:f8:f1:28:55:94:37:92:af:7d:53:a3:b6:
4b:e4:ce:7a:b1:c9:a8:af:fb:54:c4:e5:d1:96:a4:
8e:7b:26:9f:8a:f4:9a:82:b6:ea:05:c5:47:97:3c:
56:2e:b3:25:b1:0c:8c:54:39:2f:1f:0d:b7:6b:3f:
e6:5a:b0:12:d6:f0:68:9a:54:85:b4:19:11:01:f9:
b3:b9:5c:00:8f:1f:35:21:06:b7:9f:9a:84:45:6a:
c0:0e:54:bb:f2:9b:a7:21:ef:b1:94:8e:a2:77:fa:
43:7c:85:99:ea:69:cd:68:ba:43:ae:99:01:8e:ff:
93:ca:6b:be:34:d3:db:62:3e:74:2c:14:e6:75:e2:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:A9:57:BF:E2:FD:F1:C2:25:99:F3:08:D6:20:CD:0C:F1:0D:37
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2b:cb:a2:7d:9e:dd:58:27:0d:f6:8d:c4:d3:b2:9f:e4:1b:
74:1d:c9:bc:c2:40:4e:b2:68:42:5f:d7:64:98:97:b0:3a:b8:
91:b6:63:e3:f1:6b:96:ef:31:71:fa:d1:3c:41:62:12:a8:85:
ea:71:2f:b9:e9:4d:f8:82:8c:de:0b:b8:e4:bd:2e:c5:30:a1:
a0:dc:6e:83:3b:4f:08:0b:5c:c7:51:28:1e:16:a2:a8:20:a4:
be:27:49:b0:f1:98:7d:cb:fd:43:d1:e0:0f:be:71:fd:b8:2f:
b3:fe:be:b0:47:94:2a:f4:7a:d1:4b:49:c2:6c:e7:27:11:7d:
3c:3b:82:2a:31:49:5a:2d:4a:36:e7:0c:04:a9:ad:02:4f:47:
38:29:b1:75:0a:49:72:89:08:9a:2e:42:70:7c:45:f3:bb:dc:
74:8e:c3:54:11:40:75:91:e0:24:af:b7:4c:7b:4a:6a:ea:91:
42:ff:02:97:47:72:de:4c:90:83:b4:dd:e4:e9:f5:8b:fe:fe:
b4:fd:64:89:8f:0a:e7:d7:48:bd:10:5f:80:61:1c:4c:20:6b:
ee:0a:8d:ad:fa:18:68:7f:17:00:bf:53:14:ba:b1:6c:0d:99:
0f:24:1c:64:48:c3:89:81:4f:a4:b7:03:3e:dd:c1:ae:98:39:
2a:2c:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:08:17 2025 by rpki-client