Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: fkJ2FXoQ4Me8CsrSr0M0YNNe8KujLZLFdQNOxwC41OE=
Subject key identifier: FF:E0:AC:66:27:D2:BE:A5:E4:EF:91:D0:2F:96:F2:3D:09:B2:59:47
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 0198CACA344C634C5953E209B7686141BE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 1644
Signing time: Thu 21 Aug 2025 04:01:45 +0000
Manifest this update: Thu 21 Aug 2025 04:01:45 +0000
Manifest next update: Fri 22 Aug 2025 04:01:45 +0000
Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: bkZcBKPy6EKXAjuJwi5Ow/ljdUc5zCO3amvkO6gmD2c=)
2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:34:4c:63:4c:59:53:e2:09:b7:68:61:41:be:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Aug 21 04:01:45 2025 GMT
Not After : Aug 22 04:01:45 2025 GMT
Subject: CN=ffe0ac6627d2bea5e4ef91d02f96f23d09b25947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:49:57:85:70:7c:11:97:3b:65:11:5f:a0:
c3:af:6d:33:2e:09:92:e1:ea:25:1f:99:df:52:6e:
6c:9e:55:da:f6:7a:e2:51:91:4a:9a:58:a9:4b:4a:
77:a1:c1:21:af:3f:ca:7a:eb:69:00:48:42:c5:0e:
05:0f:c4:72:11:c6:8a:4d:66:9f:91:37:68:57:2d:
6f:b3:75:72:f5:4f:76:49:30:4b:d7:99:8b:9c:8c:
f9:9c:5b:af:62:4e:6e:9f:3c:3a:c8:9d:29:8d:36:
7c:0e:bc:3f:eb:dd:5d:70:9e:53:f0:ae:38:f8:b6:
76:3c:70:5b:a9:3a:23:8a:86:1f:db:0b:7a:b3:51:
79:0d:4a:89:56:7a:f0:4f:7b:14:2b:e2:4e:25:41:
13:52:e9:fc:25:93:96:9e:3d:64:f8:9c:bc:2a:59:
9a:7e:5b:e9:e0:45:22:02:6e:cd:b3:c8:92:b1:b4:
92:53:5b:09:b3:68:d5:c7:d9:3e:2b:1e:34:43:6b:
92:45:a7:cb:ff:26:2c:67:49:1a:12:41:d1:50:2e:
e4:d5:db:6e:46:f1:14:72:62:2c:3f:ce:4f:1e:0b:
3e:40:ac:7e:d4:7b:49:5c:90:88:fc:6f:da:39:3c:
33:99:0a:ce:97:80:81:d9:b9:b6:75:48:d5:e8:bc:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E0:AC:66:27:D2:BE:A5:E4:EF:91:D0:2F:96:F2:3D:09:B2:59:47
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8d:61:ea:42:40:5e:e3:71:cc:92:70:c7:5e:d3:92:83:98:
46:b4:ff:e1:f7:11:0d:93:9b:7f:aa:e4:ad:e2:a4:c8:41:cc:
d1:e0:9b:4f:65:67:83:33:ba:9e:2e:f2:26:49:fa:11:25:b4:
31:db:7b:d3:b7:00:74:f3:0e:cc:7d:fa:9e:ca:ad:4c:b5:1b:
01:54:1c:69:b9:88:2a:26:2b:35:63:f8:cc:c7:c0:47:aa:d4:
fc:c7:b9:97:53:01:c6:d8:9f:88:fa:62:11:78:12:d9:52:c8:
c3:2c:f0:b4:5a:06:16:5a:63:b4:bf:1e:25:99:d8:5d:df:70:
48:f3:c8:4a:56:d0:f8:32:98:1d:35:77:74:2b:4a:7c:20:d1:
9c:1d:c6:bf:61:cd:0b:4e:c4:14:b8:47:2a:98:1a:a5:52:ac:
7c:8c:91:a7:13:41:9b:e1:e9:cc:0d:c9:e7:25:c4:a3:f7:42:
b0:39:c3:1d:a4:f0:6e:f3:16:e6:eb:75:21:af:2c:ec:1f:cf:
93:30:77:ea:77:91:52:6d:bd:7d:ad:84:bb:83:6b:b9:d2:9b:
f7:77:6e:1a:1c:e5:13:34:ce:2f:96:4a:62:1e:c8:53:20:fe:
75:db:69:7f:00:02:e2:bb:55:bc:2f:f6:e2:86:d1:ed:18:e2:
92:77:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:13:07 2025 by rpki-client