Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: 9tmVxhxZJyhI1oNBKK1BhPVACRwDgIJWQRNIpNKh9Y8=
Subject key identifier: 33:B1:B1:BF:64:F8:5B:2E:CE:FB:BE:50:06:C6:DA:83:A0:14:A0:FB
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 01993F84072B6096B5B5F2ED71034528CB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 1695
Signing time: Fri 12 Sep 2025 20:00:41 +0000
Manifest this update: Fri 12 Sep 2025 20:00:41 +0000
Manifest next update: Sat 13 Sep 2025 20:00:41 +0000
Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=)
3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: xysrb/+OUfJRoYaFzj0/B2IXh1F+FkgzVVqnlHxEClU=)
4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=)
5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=)
6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 15:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3f:84:07:2b:60:96:b5:b5:f2:ed:71:03:45:28:cb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Sep 12 20:00:41 2025 GMT
Not After : Sep 13 20:00:41 2025 GMT
Subject: CN=33b1b1bf64f85b2ecefbbe5006c6da83a014a0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:b4:75:2f:82:26:70:7d:9c:1c:db:54:c1:
20:31:29:43:7f:8d:2a:a2:b7:4d:85:34:a7:75:64:
d9:0b:c9:19:c1:a0:ea:de:c9:da:87:9d:a5:df:52:
1d:07:e8:ca:fc:7c:e8:53:38:71:9a:07:c2:b0:4d:
99:e8:ca:bb:a9:4b:1e:fc:73:e2:14:83:73:18:0f:
2b:87:26:21:4f:82:1b:e6:bb:b7:e3:80:33:8f:47:
04:f4:ea:00:c5:e7:8d:1f:27:c6:8b:73:22:8d:41:
c1:3a:5e:05:fa:06:81:77:42:9c:32:8f:3d:cb:15:
5b:84:5b:84:b8:d7:0c:ee:bd:df:14:e4:b7:04:56:
0a:d0:34:a3:3e:52:f9:43:58:0d:f9:c5:9e:bb:5d:
89:8d:ad:7d:0c:a2:57:e2:0a:23:0e:73:db:81:0a:
a4:67:b8:0d:0e:40:44:e6:3d:fd:88:53:d7:d3:fd:
02:71:1e:03:49:3c:28:66:3e:93:db:1d:b8:1b:47:
0c:7d:a3:45:4c:47:5b:e4:92:fa:04:b1:c4:ed:b6:
0d:29:b3:fd:bb:41:82:47:ce:90:01:12:c3:33:06:
30:22:cd:e6:42:1e:94:86:33:5f:39:b8:21:4f:40:
41:e2:74:39:6a:a8:76:25:a6:5f:fb:67:9c:8c:b7:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:B1:BF:64:F8:5B:2E:CE:FB:BE:50:06:C6:DA:83:A0:14:A0:FB
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f7:cc:1f:98:42:a7:99:7b:ac:50:9d:c8:86:80:5a:00:57:
e2:ff:91:06:a6:19:61:92:3f:54:a4:2c:06:88:5a:ac:5f:c5:
54:2c:e0:42:e7:d3:ea:71:0f:05:40:98:6b:49:60:eb:5a:ed:
e0:69:93:f6:e4:bc:f4:17:33:99:d8:e0:eb:67:06:10:ca:c7:
a7:24:ce:11:76:a2:68:2a:92:27:3c:ed:31:3b:db:58:ef:2e:
8b:64:08:e5:7b:18:c2:01:6f:68:0e:6e:39:28:e0:c2:9b:d4:
07:ba:ce:be:aa:70:2a:50:34:43:66:e6:57:90:51:6a:ca:fd:
1c:7f:30:fa:d4:dd:9a:e3:ce:a1:3f:c1:29:b9:fe:b2:45:0e:
99:51:d0:c7:5f:c7:97:ac:f2:a8:58:53:59:2e:64:fb:59:98:
31:62:42:2f:ae:a1:8d:8a:7e:32:f0:3c:51:68:29:bb:3f:7e:
b8:8f:e5:57:a9:ec:ed:a8:3b:9d:cf:3d:49:03:91:e7:42:a3:
24:1d:d9:28:92:7c:ae:65:ad:ff:57:da:9e:bb:32:35:6b:d0:
d7:8d:67:02:9d:11:48:6e:11:42:ad:3c:d7:9e:6d:0e:b7:02:
7a:dd:ed:68:eb:a1:a5:19:9c:a6:8c:75:91:7f:3b:eb:0d:ce:
08:bf:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 23:15:23 2025 by rpki-client