Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: TUf1dehrjiT+6mu4qT4xgbE00pmaEPjXlFjpxTRO+wo=
Subject key identifier: 86:79:EA:18:5A:C5:51:04:77:D4:10:DF:36:BD:8B:C7:3C:50:46:2B
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019939159A2F3C01FC1A02F160E50D375B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0B2C
Signing time: Thu 11 Sep 2025 14:02:20 +0000
Manifest this update: Thu 11 Sep 2025 14:02:20 +0000
Manifest next update: Fri 12 Sep 2025 14:02:20 +0000
Files and hashes: 1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: VJoSMEHHuARs6r/LijUvmimeFme5AS86XRpAe+3VFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:9a:2f:3c:01:fc:1a:02:f1:60:e5:0d:37:5b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Sep 11 14:02:20 2025 GMT
Not After : Sep 12 14:02:20 2025 GMT
Subject: CN=8679ea185ac5510477d410df36bd8bc73c50462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:34:75:34:ef:77:ff:ff:e4:01:47:c0:08:
57:8e:4a:6b:4e:ac:ef:17:3a:1f:aa:ed:d1:8e:a1:
e2:0f:c1:4a:b1:24:ab:3e:4f:84:63:3c:18:c3:eb:
a9:40:73:91:19:d6:87:85:f8:5d:62:9f:fc:ed:56:
b5:7b:c6:5b:24:2e:97:ba:c6:f1:bd:89:cd:3c:fe:
16:bf:e0:3f:4c:cc:0d:dd:2b:f5:0f:0c:33:3a:40:
72:3c:3a:f4:7f:72:74:c4:7f:31:5a:c8:3f:b5:30:
65:83:4f:15:4d:8d:c5:b5:93:bd:f3:15:20:32:79:
1f:ba:ee:ec:a5:20:9a:30:0e:7a:48:b1:cf:76:98:
dd:47:71:1e:89:4c:b6:73:7e:93:ac:df:0f:7b:0d:
de:b7:4e:1d:a5:52:e2:08:fa:ba:e5:49:20:ec:5a:
5f:98:81:da:68:59:bd:13:03:23:d6:12:1a:51:ec:
15:78:69:3a:84:d1:2c:3a:84:ed:ba:d9:c8:2c:a6:
f3:72:a4:af:46:69:82:3a:22:a9:4d:8d:43:1a:6a:
b1:07:20:f1:50:76:7d:35:32:d9:a3:53:ed:23:4c:
8c:1d:58:40:69:0f:57:44:cf:22:06:cf:1d:cb:35:
7e:10:65:6e:1f:04:bb:ad:e6:e4:2d:88:31:b1:ae:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:79:EA:18:5A:C5:51:04:77:D4:10:DF:36:BD:8B:C7:3C:50:46:2B
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:17:2d:76:4a:de:aa:80:f0:32:26:dd:22:25:f6:c8:45:
00:6e:e7:67:91:d2:af:f3:dd:4f:0c:1e:30:6c:00:57:cb:7a:
c7:6b:4d:29:e3:50:f8:8a:5d:7f:63:fb:99:7e:3d:45:e0:a2:
2a:0c:9c:a3:44:83:67:ac:b7:90:36:c7:eb:85:bb:3d:e3:01:
56:dd:87:5d:5e:4f:87:01:48:ef:5c:3e:d9:45:1a:e3:09:8c:
ab:49:9c:b5:f3:96:3d:98:50:c9:33:b6:b8:f5:34:de:2e:6c:
bc:66:c3:68:74:42:9c:b6:b2:79:54:52:dc:73:f0:88:fc:bb:
1a:9c:c3:54:3e:33:d8:48:2f:54:f4:3a:28:d4:e9:0c:a6:5b:
eb:47:9e:77:72:d8:48:73:93:f8:36:84:38:3e:ba:76:1b:08:
67:90:a2:cb:ac:6d:e2:96:cd:43:f8:4f:35:ed:81:18:53:34:
16:e3:31:cb:77:06:4e:5d:09:14:bb:4d:39:a7:64:bf:2d:06:
bb:84:c7:68:d0:8f:b8:5f:11:c6:92:ac:cb:e2:40:96:07:15:
d8:ca:44:58:fe:62:8c:b2:2d:36:bb:0b:87:aa:2e:f2:ab:4b:
43:e4:60:99:61:41:22:25:48:ac:87:f9:f4:46:77:8d:1a:33:
57:d9:30:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:29:47 2025 by rpki-client