Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: t0EDGy7FAH1SvaxlBT3b3KA9DTzeR5+gevzYjkAefxE=
Subject key identifier: 75:7C:83:9E:D7:A8:52:F0:99:1F:BA:B9:11:9A:A2:7A:44:1D:93:F7
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 0199FD6B11E7144D61561DB402010D2737C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: SpsqNCwISL1D7YWDs8MOUK4XUcQ.roa (hash: VKTdP32emCO1Alc2phplZ6z5V0MT3UL3VXfP0BBA76I=)
2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: BjR82labuTITeTmFBvCPFtAC/GfGSrnqfRq6/rpgHQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:11:e7:14:4d:61:56:1d:b4:02:01:0d:27:37:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=757c839ed7a852f0991fbab9119aa27a441d93f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:1a:cf:f6:a4:76:72:7a:9a:25:93:85:d1:
63:27:30:97:8c:0a:83:8e:2e:07:f1:36:45:c3:d4:
a5:43:32:16:7a:a0:e0:b5:43:2c:13:07:6e:f1:22:
a1:9e:10:f8:9b:e9:15:b7:84:f4:bf:1a:61:f9:38:
0f:2e:60:23:f5:31:05:df:1f:a7:54:0b:35:93:5f:
25:aa:de:34:61:4a:35:99:cc:30:4e:ff:ed:a5:82:
91:15:9c:9b:0f:e1:eb:ee:65:b3:d1:b2:88:52:f7:
65:96:16:e5:d9:8e:73:ca:06:81:c3:29:f3:b4:23:
34:29:20:a0:f6:90:5f:1a:71:b8:79:99:8b:04:f9:
37:27:4e:e9:a1:94:bd:63:05:db:5c:66:21:71:2d:
28:7d:fd:a3:f9:78:1f:60:f7:be:8f:19:29:3e:5e:
3c:16:8b:86:1f:06:3e:09:17:e3:63:03:b3:e2:3e:
96:20:db:c5:47:b2:1e:7f:3b:9c:b6:e0:ec:a9:6d:
a4:58:10:83:67:85:c2:77:1c:f3:58:98:15:55:f6:
f1:8b:0b:d7:7a:cd:0f:75:d0:4a:bf:19:2e:f2:5d:
f8:1d:b3:a9:ab:d4:46:a8:ee:b3:ab:80:21:7b:05:
78:1b:b9:ac:81:65:04:76:70:e8:61:16:3f:99:0d:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7C:83:9E:D7:A8:52:F0:99:1F:BA:B9:11:9A:A2:7A:44:1D:93:F7
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:ff:06:69:77:2d:f8:98:64:dc:69:11:9b:1a:dc:f1:91:
8b:5b:b8:b8:54:06:2e:04:dc:bb:80:73:74:d8:6d:a9:ae:c0:
3b:37:08:f3:9d:6e:12:c8:c6:c8:28:b9:bf:ee:5d:23:2c:21:
45:97:5d:ed:d6:1d:93:2d:c2:8c:d3:85:d3:b1:ea:8d:93:3f:
dc:d9:a5:a9:39:22:2c:bf:a6:c5:f1:84:ab:dd:e0:6d:e1:dc:
8e:9a:d3:4f:c4:8e:2e:fe:b6:b4:54:ca:82:a0:8a:a6:89:81:
23:6a:38:3e:b8:09:5e:64:4b:b2:c0:93:86:c7:57:48:71:8f:
8d:77:60:a2:24:fe:7d:0b:bd:5d:78:c7:10:1e:73:7a:6b:16:
7c:10:13:3d:5e:0a:7a:11:98:6e:79:65:2d:ff:e8:75:29:2d:
17:e4:6d:ac:0a:c5:5b:0f:ea:2d:ee:93:44:46:d2:c4:5c:00:
0b:a1:e4:ce:ff:48:a4:b4:85:25:7c:66:59:1e:64:ec:7a:5a:
9c:81:25:87:7f:88:88:08:be:2c:83:39:61:59:1a:54:6a:4b:
31:27:b5:2a:19:24:44:35:35:de:ae:f0:5a:49:9e:c7:84:33:
4a:b3:4e:a4:de:7a:8d:84:c5:e3:87:a8:0f:5e:01:c6:b6:a5:
92:40:9e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:28 2025 by rpki-client