Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: QsPQUOJL9f8m7IKeMQR8KOboa9zZC8oT964p81kG8ps=
Subject key identifier: 10:C3:45:24:1B:45:BB:32:98:18:CE:EB:74:1E:14:A8:4A:9A:FF:C2
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019921B21502875AD4E9ECDDE649009D0D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 1527
Signing time: Sun 07 Sep 2025 01:02:22 +0000
Manifest this update: Sun 07 Sep 2025 01:02:22 +0000
Manifest next update: Mon 08 Sep 2025 01:02:22 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: +5iS2RPOR7vC0q5ISjfZjjdoGLUByuQUvBgSl7mV+lk=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:15:02:87:5a:d4:e9:ec:dd:e6:49:00:9d:0d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Sep 7 01:02:22 2025 GMT
Not After : Sep 8 01:02:22 2025 GMT
Subject: CN=10c345241b45bb329818ceeb741e14a84a9affc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:4b:8b:10:09:fd:88:b4:48:3b:36:58:7e:
96:18:4f:0b:88:b4:15:ea:9c:34:48:68:07:f6:db:
74:e2:d9:41:8d:34:62:bf:2f:c4:49:af:07:fe:a2:
67:6c:45:34:d4:f8:4d:8d:34:e6:c1:30:07:0d:33:
cf:e9:98:aa:e8:cf:4c:fa:38:e5:83:2b:a1:48:7a:
4e:76:a7:da:09:af:f7:13:fd:10:cf:2b:25:a9:3d:
c7:f6:92:ee:89:03:76:4c:11:bd:fc:90:91:5e:df:
65:07:fe:48:d4:bb:01:95:2f:37:3a:85:7d:c6:f3:
90:0d:7a:68:19:d3:a3:e5:f0:e8:dd:c8:2c:27:a0:
60:73:c7:14:cb:74:23:14:ae:1e:18:44:49:5a:63:
16:ce:12:cb:07:bd:67:b1:d3:92:a4:aa:fc:7c:68:
14:89:1d:a4:09:f3:30:aa:95:8b:07:11:b8:6e:a2:
20:6f:05:30:9a:ca:15:3f:83:53:bd:6a:4e:84:ed:
6e:7f:61:a9:01:1f:e4:c1:21:7e:4f:78:ae:77:21:
74:2d:e2:da:91:01:3f:ab:59:f7:ee:f6:19:83:7a:
0f:d1:15:ff:7b:3d:38:fe:66:40:34:1b:d3:88:19:
ae:e7:64:bc:44:b5:c0:2a:50:a1:31:f3:23:8e:11:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C3:45:24:1B:45:BB:32:98:18:CE:EB:74:1E:14:A8:4A:9A:FF:C2
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:54:c6:42:3b:48:b2:d1:bf:0d:48:8e:08:3b:e5:95:00:c3:
e1:2c:2a:c7:40:e3:ba:48:ff:c7:38:9d:a6:ab:9d:ae:8f:51:
e7:9f:2a:83:29:30:bc:46:45:18:08:94:ae:ca:9c:4a:37:61:
55:ef:fa:35:89:6d:1b:11:35:2b:85:e4:44:ad:70:14:4d:70:
ca:6d:a5:4b:4e:4e:3c:9d:a9:d0:06:4a:64:48:d6:c5:14:9e:
64:13:c3:8e:23:0d:10:fd:8d:80:72:04:5c:08:a4:69:4c:18:
81:af:68:1b:6f:a5:e7:09:95:2b:6d:87:ea:ab:4e:d3:e4:1b:
27:18:45:33:9e:35:58:e6:f1:78:47:69:72:11:0e:c3:96:1a:
e8:8f:be:33:73:59:2c:38:c2:03:a2:ff:57:26:34:b6:8b:4f:
b1:bc:b6:b3:51:8c:91:32:cf:24:5e:2e:b8:7b:71:a2:01:42:
90:54:c8:ea:82:91:df:5b:c0:a3:04:a6:35:7e:5b:19:83:78:
60:fd:5c:72:00:4d:92:8b:37:93:93:c4:14:16:52:14:80:5c:
61:14:d1:e8:34:52:b8:aa:3a:16:3f:4d:a3:a0:8e:62:b7:48:
46:3a:5d:24:86:93:12:37:04:1c:44:75:7d:e0:9e:7d:cc:94:
d6:c7:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:00 2025 by rpki-client