Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: LE8sA+YDr3rOV4Rqwl8eSdhABNE9phxCZWvhmDo472I=
Subject key identifier: 53:22:E3:81:A1:28:C5:CA:25:AF:DD:CA:52:6A:09:BE:4C:F6:52:B3
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 0198D472AF7258D935D590E74DAB1110FE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 140C
Signing time: Sat 23 Aug 2025 01:02:22 +0000
Manifest this update: Sat 23 Aug 2025 01:02:22 +0000
Manifest next update: Sun 24 Aug 2025 01:02:22 +0000
Files and hashes: 1: hzoYOWaigOBhVgvLojtyU6Dx7N4.roa (hash: T/q+Lugm+i1exm5XgQ+QByz6sPtwXurIWQU3uySV9uU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: Rt/LNezzp1fB7rKVSTg1nSl12tABo2qfpf+I0sWuMek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:af:72:58:d9:35:d5:90:e7:4d:ab:11:10:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Aug 23 01:02:22 2025 GMT
Not After : Aug 24 01:02:22 2025 GMT
Subject: CN=5322e381a128c5ca25afddca526a09be4cf652b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:c6:9c:b2:2a:c8:b2:a5:bc:77:7b:45:28:
51:0a:0b:f6:65:d2:21:10:41:48:fb:99:57:5b:30:
d2:da:ca:e2:3d:23:8f:f3:bf:f9:64:34:51:a7:db:
4a:71:49:df:9c:0a:1c:2d:27:bd:be:9e:95:43:ab:
13:74:c6:55:89:aa:dd:d8:dd:d6:60:dc:7a:bd:74:
72:4d:c9:d7:4a:f1:b7:e2:e6:61:fe:f4:37:15:8d:
f6:ac:8d:71:61:08:f5:c0:98:71:8c:25:0c:6a:1a:
52:1c:57:cb:46:5e:5a:fc:63:83:28:b4:fa:32:38:
b9:59:8d:5a:8e:3e:e8:11:77:23:01:7f:c9:b2:07:
f5:e1:27:c1:91:6f:e0:0e:69:f8:30:1b:18:ea:cb:
9c:d1:dd:93:a1:16:82:10:cb:d2:b4:75:71:bd:e9:
a7:67:20:5f:5f:43:d7:70:db:95:b5:ec:05:c9:9f:
a0:7f:55:b6:e8:1f:83:00:84:c3:24:19:42:0b:e7:
cc:47:a4:a5:73:51:b2:33:09:c5:0b:51:3a:87:3b:
c5:e4:9e:53:87:98:ba:38:e3:bf:87:b4:28:ab:ec:
eb:8b:48:18:c0:35:47:66:61:c5:96:7c:20:a4:59:
d3:11:ea:c1:b6:cc:f8:76:f2:b5:6b:3c:20:bf:19:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:E3:81:A1:28:C5:CA:25:AF:DD:CA:52:6A:09:BE:4C:F6:52:B3
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a8:4a:87:0a:4c:15:94:f2:2f:67:7c:74:91:46:89:87:0c:
db:d3:e2:4e:88:69:8d:f6:8a:69:cf:cf:fb:63:ec:ab:38:77:
05:19:d5:1c:33:f1:dc:74:c9:ec:ca:ce:97:f3:c9:27:76:6a:
4c:4d:58:b3:c1:01:dc:7f:fb:33:f2:83:e4:79:9e:67:9b:6e:
b1:89:79:b7:a3:e7:7b:2a:9b:98:ef:91:3a:dc:9c:0c:70:83:
79:e0:77:7f:f4:03:82:7a:a9:ea:cd:24:00:1b:10:ed:d0:1a:
9d:f7:e5:0e:73:e6:89:78:3e:86:f8:58:93:c0:90:e5:68:78:
d6:2b:e0:bc:b5:8e:20:4a:6c:c4:0f:1b:0b:ce:f3:ba:5d:19:
8e:b5:0a:e9:83:6d:ab:a4:2d:1b:ca:7d:6a:59:cf:93:13:14:
69:f8:5e:7d:12:54:22:c2:1f:2c:8b:31:27:32:8d:e7:97:fe:
e0:65:a2:b3:c7:e4:8f:e4:5e:7e:99:38:96:70:86:f9:e9:6f:
43:4a:0e:54:38:a5:3f:4d:5f:b0:08:ad:66:78:ce:30:48:10:
99:f2:7a:ba:7c:20:81:79:5c:d0:75:a3:cc:6c:79:f2:fb:46:
99:c2:88:f8:18:96:3a:61:6f:dd:85:c5:71:77:01:6b:cf:e8:
6a:b1:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:00 2025 by rpki-client