Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: eVnf/cPVUDsn6QEWlgQJxC5PzXJPRtbRbFf5fhV6ur0=
Subject key identifier: E0:FD:91:CC:67:78:2C:76:B5:72:BE:9E:54:0D:5F:04:49:35:7C:6F
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 0198D7E19485D1F2CA4D6B4C76CB66B6CCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 17:02:21 +0000
Manifest this update: Sat 23 Aug 2025 17:02:21 +0000
Manifest next update: Sun 24 Aug 2025 17:02:21 +0000
Files and hashes: 1: SpsqNCwISL1D7YWDs8MOUK4XUcQ.roa (hash: VKTdP32emCO1Alc2phplZ6z5V0MT3UL3VXfP0BBA76I=)
2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: zreEpA5WV1VCWEji43lBVEYycDH8Y/dTARkllER7rdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:94:85:d1:f2:ca:4d:6b:4c:76:cb:66:b6:cc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Aug 23 17:02:21 2025 GMT
Not After : Aug 24 17:02:21 2025 GMT
Subject: CN=e0fd91cc67782c76b572be9e540d5f0449357c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:39:e1:4a:24:a5:81:be:ce:12:e6:1a:32:
e7:c6:ad:10:bb:61:88:54:bb:62:71:a4:e3:2a:96:
e2:0c:26:dc:2a:c3:b3:cd:6c:b5:ec:fb:a6:1a:00:
42:56:a4:e5:16:72:ef:56:60:d4:c5:ec:6c:b6:4f:
12:79:d3:d0:af:f4:20:04:4c:9c:d7:41:a5:bf:b4:
d7:3b:cf:d0:5d:ae:80:cf:87:7e:96:01:4a:dc:e6:
c5:f9:0f:69:d0:73:2b:49:0b:0a:09:d3:3c:da:38:
46:a1:4a:c3:5d:7d:50:66:a3:ab:95:91:0e:67:53:
c9:aa:f5:62:1b:92:65:23:04:3c:ad:36:58:e0:cd:
ca:17:11:16:ea:92:8b:8a:9a:ed:93:37:c3:1b:29:
00:a7:67:53:00:db:4c:ae:83:64:5d:45:94:de:a3:
dc:18:4c:41:f8:8b:56:79:4f:c5:cc:f7:fa:e8:a8:
63:76:0a:85:a8:79:0a:86:ac:5f:8c:d6:b4:62:bd:
9b:61:70:ea:5c:a0:e6:c9:2e:e2:16:e0:5f:2f:30:
fa:b3:35:90:e7:ad:e3:58:c7:01:ea:9e:a1:56:c9:
ee:5d:f8:7d:45:02:94:d6:05:47:b1:42:55:f3:08:
5d:35:ca:37:7e:fa:36:f5:08:46:b6:d8:b9:75:39:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FD:91:CC:67:78:2C:76:B5:72:BE:9E:54:0D:5F:04:49:35:7C:6F
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:20:3d:79:f1:a1:13:11:45:a7:95:c8:5d:67:05:7b:65:c1:
cc:78:aa:f1:af:a4:b3:e1:c0:4c:36:1a:eb:ae:f3:f2:ec:e1:
1b:97:a9:8e:4e:44:b4:c9:52:ff:14:c2:92:ab:d3:b1:26:93:
e6:d2:19:fa:f4:41:77:70:02:1c:2d:0b:20:7f:58:0e:fd:b9:
c9:cb:a1:27:37:7d:b2:db:13:77:4f:c7:67:5c:fe:58:d9:d5:
07:2f:64:b1:df:ba:f7:c0:74:f4:14:de:0a:9b:5b:0f:29:e9:
f9:7b:f6:b2:ba:7f:ee:5d:c5:aa:e3:44:2f:65:8d:5b:88:03:
33:53:a7:33:75:fa:04:32:3d:2b:cc:fc:a0:59:0a:9c:9a:21:
04:0b:12:d7:c1:60:19:28:5f:59:75:1d:15:9d:b0:41:43:ae:
57:aa:05:96:e8:32:23:63:89:85:45:b9:53:05:9d:9f:e8:7d:
3b:fb:4e:44:2b:92:ca:55:d9:cc:d3:58:50:a3:45:95:55:63:
b1:b6:09:c6:56:38:2a:41:2c:8d:61:82:f0:8d:25:e7:d4:4b:
9e:0e:4c:d0:dd:7b:f3:db:e9:9a:28:e6:8f:9f:6d:12:9b:57:
af:fd:08:82:d3:97:4b:1a:83:ad:05:07:4b:a8:f3:d9:7a:7d:
c8:65:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:55:40 2025 by rpki-client