
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: LXzjP8Ztl9Xs7+65AGO4dsK6MnfIvc/8yZjqSbTVa74=
Subject key identifier: 81:3F:26:82:82:3E:72:EF:73:0C:D4:5D:26:23:87:1C:47:90:20:8D
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 0199620FEFE0E6FD13E6A168785DF83DFC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 1691
Signing time: Fri 19 Sep 2025 13:00:35 +0000
Manifest this update: Fri 19 Sep 2025 13:00:35 +0000
Manifest next update: Sat 20 Sep 2025 13:00:35 +0000
Files and hashes: 1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: VOgVIZ9dR9dUiSHFxue+lIwlG+b7mgH+nS/FnNE+9Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:0f:ef:e0:e6:fd:13:e6:a1:68:78:5d:f8:3d:fc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Sep 19 13:00:35 2025 GMT
Not After : Sep 20 13:00:35 2025 GMT
Subject: CN=813f2682823e72ef730cd45d2623871c4790208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:6d:5c:cd:cc:1f:f2:8b:2c:10:aa:a1:d1:
ba:b1:97:76:10:f0:0d:f2:83:0d:eb:d5:07:1a:2d:
7f:2d:2b:38:10:b7:63:30:d1:56:a1:7b:32:19:59:
47:63:c5:bc:92:69:e4:f1:e9:d4:60:29:2e:b4:77:
a4:58:f4:eb:f2:c3:cd:02:92:6c:88:cc:f4:99:e8:
f3:76:df:a6:10:05:7e:01:6f:d7:a6:d7:5a:5d:17:
a3:72:48:07:c4:de:be:9b:81:6c:0a:23:2a:24:90:
28:9a:7f:09:5f:ac:ac:35:4e:37:9e:26:d6:8a:00:
7e:7f:9c:7f:cd:52:f4:82:62:fa:b0:8d:52:2f:87:
e4:7c:0c:5d:46:b5:ea:39:7d:75:ec:b6:45:b2:a4:
6b:a4:cb:b0:74:79:82:8b:51:c0:71:fd:bb:dc:6b:
42:58:21:fa:4c:45:3b:27:0d:35:d3:7b:f1:a6:f3:
36:7c:15:88:f6:30:82:69:99:5a:8b:71:9f:dd:0c:
9b:e4:b4:07:55:91:bd:e8:9e:d8:6e:0f:43:43:9c:
65:68:e8:1b:46:0c:a1:cc:8d:55:6f:5e:c0:c7:21:
d0:3a:22:49:45:75:bb:f6:ff:76:30:76:ca:a9:99:
f3:fe:1f:4e:06:9f:ed:f8:67:20:19:94:c2:f6:3f:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:26:82:82:3E:72:EF:73:0C:D4:5D:26:23:87:1C:47:90:20:8D
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:50:40:a0:52:97:87:43:ff:cb:b2:b1:c4:cb:b4:17:2f:
37:d3:83:51:22:21:c1:91:37:fb:93:a1:9b:f6:03:3b:7e:f8:
1f:61:7f:2f:14:9e:75:13:64:d0:76:ec:3a:36:cd:9b:a2:12:
f0:d5:4f:b7:4e:c4:47:e4:0f:2d:b7:02:0f:fa:62:2f:00:b1:
9f:7c:2e:21:c9:6b:13:3b:9f:3f:8d:18:59:90:28:63:0f:36:
dc:88:99:b9:17:e4:43:84:e8:51:d2:5b:fd:20:9f:1a:9f:f7:
2b:07:a1:61:f2:97:68:18:68:1c:19:91:63:8f:b1:1d:fe:af:
e6:db:c3:f2:f3:91:36:d9:86:f6:ed:87:42:23:69:c7:ab:db:
60:07:b8:fe:44:f8:b1:7e:d3:b4:e5:66:71:84:51:de:f9:28:
c4:52:46:b8:26:25:e0:98:80:df:20:93:7a:0e:dc:5e:5a:59:
de:26:1d:28:08:cb:84:b4:78:2f:81:a1:49:b3:27:2d:27:ed:
eb:a0:2c:1e:86:c0:57:7b:d5:99:cb:bb:b1:c0:95:ae:9f:61:
f6:f7:aa:0f:e6:0c:7b:95:4e:ed:f4:75:1d:b1:c5:1a:30:77:
2e:00:ac:5e:21:d3:71:fe:18:5a:c5:29:8f:0e:45:c1:9b:13:
ad:36:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:52:57 2025 by rpki-client