Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: gl3jBBj8FKPn0jeZiQxpaupEKhsaB/T3isftFGtURi8=
Subject key identifier: 98:78:BA:9D:4D:67:FD:0D:E2:80:C6:96:D3:1E:3E:F5:E6:AB:3E:CF
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019833B922CC95545D5FB8EDD992E2849F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 15F6
Signing time: Tue 22 Jul 2025 20:00:27 +0000
Manifest this update: Tue 22 Jul 2025 20:00:27 +0000
Manifest next update: Wed 23 Jul 2025 20:00:27 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: 8PcYVagxwu//sbbmsml4EsBOJBiqtzXeWXvzPNUVibo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:b9:22:cc:95:54:5d:5f:b8:ed:d9:92:e2:84:9f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jul 22 20:00:27 2025 GMT
Not After : Jul 23 20:00:27 2025 GMT
Subject: CN=9878ba9d4d67fd0de280c696d31e3ef5e6ab3ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:f6:da:ff:0c:94:e4:69:9c:cc:fb:6e:d3:
59:1e:31:18:a0:da:ca:e8:ff:19:dc:f9:d9:e0:c4:
87:7f:5a:e1:3f:e8:a2:e5:d7:53:68:74:1e:db:ce:
95:33:1b:4c:83:96:bb:ab:bf:36:02:a2:14:7d:6c:
6d:95:5a:9f:86:87:a5:89:72:b9:34:94:fd:57:fc:
6e:e4:ad:82:9e:44:04:d3:82:5a:ac:54:a6:aa:64:
ab:5e:85:1a:65:cf:07:70:dc:05:5e:bb:bf:ba:24:
92:73:c7:fa:27:ca:7a:1d:85:48:a2:fb:94:f1:6f:
5c:c6:98:b8:d5:e0:3e:0f:36:a8:8d:15:7f:ee:f8:
c6:75:33:b8:01:2c:00:df:62:cd:5e:42:fc:3b:99:
7f:77:cc:a8:24:cf:55:b0:ac:bd:a0:fa:31:98:65:
c7:d8:fb:b2:af:84:71:3b:64:a0:59:e9:16:f5:09:
8e:de:e6:63:49:9e:8c:bc:71:03:a7:38:cb:2b:1e:
49:76:e3:bc:f3:6a:f4:dd:5a:bc:d0:b2:db:f5:31:
d0:01:cb:7a:e9:90:81:c7:26:ed:bc:b6:65:4a:c9:
0b:c0:44:30:50:11:3f:76:c8:86:2e:77:bb:0d:7e:
fe:e9:a3:1f:94:30:e5:47:b3:86:27:34:9e:5a:c3:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:BA:9D:4D:67:FD:0D:E2:80:C6:96:D3:1E:3E:F5:E6:AB:3E:CF
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:d4:9b:de:3e:a2:1b:3f:b8:71:db:8e:0a:fa:08:81:7e:
1f:73:b7:ef:c8:45:a5:8f:6c:63:3d:23:c6:88:3b:de:99:7a:
2f:3c:33:40:48:be:10:a4:73:89:bc:9b:e1:80:56:93:6a:cb:
29:a6:df:f7:80:36:ea:c4:ed:24:c4:c7:de:ad:e9:32:ea:69:
06:71:35:ac:25:61:a0:c8:93:25:f2:05:c8:5d:44:d1:59:f0:
46:19:b4:5a:44:1e:1e:c1:0f:62:0b:93:4c:94:5f:9a:e0:23:
1d:d8:20:d7:ae:d6:19:33:42:45:59:09:a5:ee:1b:30:4a:bf:
a4:cd:9f:53:77:61:c3:ba:6d:c8:e4:f7:d1:cb:7b:27:b7:65:
16:d1:eb:91:0a:3a:61:29:68:e5:f3:90:63:f8:21:85:c1:84:
29:4e:1b:e7:1c:36:71:0a:f0:4f:f3:0b:3a:03:20:0d:bc:0b:
54:e1:0f:14:4d:46:57:07:27:51:53:7a:2e:35:0c:22:d4:3b:
83:e3:a3:f3:14:17:51:a1:60:fc:fc:de:9b:ff:33:b1:df:12:
93:c2:01:d5:5e:fa:08:5c:00:5f:7c:d0:71:5a:71:44:44:a7:
c4:05:66:2c:9a:3b:42:14:e6:74:20:9a:b2:61:89:a1:a3:fc:
c0:f9:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:22:55 2025 by rpki-client