
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: 6FIkwTuTTTOZ7GmVvpyEK9sqFTZFwuBYdizsrhg+OjQ=
Subject key identifier: 44:C4:C8:2C:90:F1:F3:3A:46:04:7B:8E:85:69:7E:0C:BC:3F:B9:DC
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 0199FBEB01B283D571947A6CC31BC1EC7D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 14A5
Signing time: Sun 19 Oct 2025 10:01:46 +0000
Manifest this update: Sun 19 Oct 2025 10:01:46 +0000
Manifest next update: Mon 20 Oct 2025 10:01:46 +0000
Files and hashes: 1: hzoYOWaigOBhVgvLojtyU6Dx7N4.roa (hash: T/q+Lugm+i1exm5XgQ+QByz6sPtwXurIWQU3uySV9uU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: RtoTFE7u8/QAWzs/Vb4NKYDrhx3qNXKnsmbqwB8I900=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:01:b2:83:d5:71:94:7a:6c:c3:1b:c1:ec:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Oct 19 10:01:46 2025 GMT
Not After : Oct 20 10:01:46 2025 GMT
Subject: CN=44c4c82c90f1f33a46047b8e85697e0cbc3fb9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:63:11:3e:5c:77:77:81:c9:cd:98:96:c3:f0:
d8:f0:a7:f3:5d:0f:93:69:49:07:0f:d6:a4:e5:b5:
39:3e:31:01:9e:de:92:70:06:06:c1:18:38:69:e8:
6c:ee:a5:fc:2f:42:30:88:94:c5:c5:a9:fa:31:e4:
1e:86:0c:31:0c:01:1e:d0:68:ad:7e:72:9f:b6:3e:
fa:d5:9b:1b:16:96:7e:05:af:8b:0b:12:d0:38:cf:
e7:a5:a3:96:67:79:a3:8a:d5:0b:f7:11:70:8c:6d:
2f:f8:b3:82:cf:05:9f:35:84:aa:9a:71:2b:01:2f:
a7:ad:a9:96:f4:81:df:ce:2c:79:80:27:06:23:bf:
cd:d7:1e:85:94:76:23:19:69:b3:ce:58:6f:0a:1d:
7b:ef:66:49:25:8b:58:c5:3f:63:90:5c:2c:cf:b8:
7e:d1:ac:a1:6c:cd:83:6f:33:75:19:05:06:52:f4:
bc:0e:06:72:c8:6e:84:80:f1:de:df:22:08:25:ab:
14:9f:eb:0f:f3:40:0c:b1:18:32:a3:6f:71:ff:f9:
6c:a2:58:aa:bc:59:7b:60:4a:3d:32:cc:26:fd:b7:
8e:d2:2d:fc:3e:c9:f2:be:da:31:2e:a7:f7:4b:ea:
cf:6d:ab:57:1c:e3:70:6e:e2:e7:1b:61:c1:35:d2:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C4:C8:2C:90:F1:F3:3A:46:04:7B:8E:85:69:7E:0C:BC:3F:B9:DC
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:cb:c0:f2:03:99:57:39:eb:2b:16:db:56:3a:df:13:1b:
04:63:fa:64:ab:6c:89:38:e2:f4:c5:dc:bb:6b:8a:2c:ea:e9:
7a:6e:7a:be:63:93:87:cf:40:d6:88:28:6b:17:84:a2:58:b0:
03:a0:df:73:04:73:a8:29:6d:5a:41:6d:f0:c5:3a:77:a6:f7:
b1:6a:f0:fc:86:bd:17:ae:53:35:4d:8d:f9:f5:b8:3b:6b:64:
8b:f0:ec:ca:6c:a0:3d:e0:9a:61:39:35:50:7c:1e:0b:9b:0b:
7b:ca:e4:38:9c:84:49:f2:f2:9f:b1:87:56:80:c3:98:6f:4e:
75:54:f9:27:30:61:b1:61:62:87:4b:82:4f:7b:ed:5c:50:0a:
ce:ca:fd:fa:0c:a5:28:c9:99:b9:e9:0c:2e:b6:c9:36:6a:d9:
1e:88:c5:8d:5b:82:93:f1:84:ec:e6:e2:5a:1f:b8:5a:63:c1:
81:4f:a0:62:4d:fc:6a:28:57:5f:ed:08:56:c9:35:c6:10:4c:
d1:e0:d8:87:20:50:b7:be:e5:3c:94:4b:36:21:b4:85:bb:31:
91:1f:e1:c1:53:e5:45:40:be:57:18:32:e4:f3:0c:15:07:9a:
59:e5:e7:87:1f:8f:d4:4d:e5:b1:94:86:6d:95:2e:68:c2:4a:
49:65:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:24 2025 by rpki-client