Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: RE7ztuh7UvVTrSAJFdJ6yoG/kh+XS8dp5Nci+oVCDJw=
Subject key identifier: 52:EC:8B:A9:D6:99:B4:AC:9B:21:6E:8C:F1:D3:84:4C:50:C0:11:8E
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 0198D73B8A27E46C262CEE068113EF789F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 0225
Signing time: Sat 23 Aug 2025 14:01:00 +0000
Manifest this update: Sat 23 Aug 2025 14:01:00 +0000
Manifest next update: Sun 24 Aug 2025 14:01:00 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: jJhJRYitXoX8d8di6BCcZkUceBYLoa0cgVedxG9LGnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:8a:27:e4:6c:26:2c:ee:06:81:13:ef:78:9f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Aug 23 14:01:00 2025 GMT
Not After : Aug 24 14:01:00 2025 GMT
Subject: CN=52ec8ba9d699b4ac9b216e8cf1d3844c50c0118e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:24:ba:de:46:ab:29:57:e3:df:8c:5b:85:
73:da:08:13:f9:00:3c:93:22:42:87:bc:a4:92:5c:
08:6a:6b:e6:de:cd:4f:65:25:0c:77:e0:f4:88:d8:
8c:e6:19:2d:71:88:d7:d9:6e:46:dd:4a:3b:61:57:
3e:2d:3a:35:82:44:ff:5e:57:d3:01:e9:bd:36:63:
42:51:0f:17:c8:12:74:f6:91:ca:6f:d0:06:50:b7:
a1:20:15:ca:ea:63:1e:fb:e1:eb:05:cd:a1:9e:ac:
4f:f5:01:b6:30:4f:c9:81:78:66:4e:21:5a:c4:88:
27:cf:a8:be:b1:a4:fa:4f:70:87:46:b8:29:67:eb:
2a:ac:ca:b7:16:bc:f9:34:3e:19:a0:be:de:04:45:
92:95:b6:ff:7b:e7:f3:50:e8:7e:50:80:1c:e0:e6:
79:f3:89:bc:18:13:52:cb:aa:a3:d6:d0:4e:63:9b:
e0:b7:31:36:3c:4b:40:ba:a3:0f:e1:6c:e3:95:fb:
a5:77:9b:4d:2b:50:39:f0:ab:2e:dc:d6:27:50:1b:
19:af:8b:84:e4:bf:37:cc:1f:66:ed:f6:e3:11:b7:
3e:97:7c:66:03:dc:f9:ef:29:23:de:09:35:6a:08:
35:03:3d:6a:a4:e5:cc:17:0d:e7:e1:69:fa:9e:2b:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:8B:A9:D6:99:B4:AC:9B:21:6E:8C:F1:D3:84:4C:50:C0:11:8E
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1c:81:94:d3:77:a4:ee:77:41:e8:97:6a:f4:2b:aa:b6:9e:
68:e1:0d:ef:33:7a:94:91:8a:22:c1:73:a6:10:b0:80:81:53:
c8:d1:e0:c1:ba:79:fb:2a:34:cb:2a:3d:af:17:39:9d:cb:cb:
a0:04:cd:04:0f:39:84:86:91:56:a0:a5:0d:e0:f5:39:7d:47:
b3:c7:cd:47:b1:4d:be:7a:32:fb:26:57:0d:a8:82:1f:f8:37:
28:3f:cc:70:06:f9:80:0b:3a:46:be:4f:43:0b:58:6f:b3:1e:
ca:f8:0c:33:51:f4:cd:93:e9:ff:97:d9:44:37:4f:a7:06:7f:
bd:f7:2d:61:53:f0:da:0d:07:57:84:0f:f5:65:f5:72:a3:98:
e8:b7:f1:d1:18:c9:1c:0e:e3:11:55:e3:24:87:45:18:24:c6:
b2:b4:ac:e2:8e:7a:f9:aa:14:0d:29:f9:8c:e5:5a:0a:54:6e:
a7:7b:c8:60:19:58:78:53:7b:09:4c:62:82:e6:af:83:13:b3:
42:30:f0:23:07:81:37:49:1a:e1:5c:74:f9:78:89:7f:66:b6:
88:6c:26:ba:68:e6:cb:a9:d7:2e:f6:26:7f:83:a1:8b:15:fa:
c1:74:80:61:45:a9:94:ff:cc:9f:a6:a5:7c:63:78:a2:55:b4:
c7:06:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:53:53 2025 by rpki-client