Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: KWj8nHIGCdxLw59BjHLh5fqp9jgIGu0O31tdzZDtD8Q=
Subject key identifier: 37:8D:E1:5A:14:56:82:3D:58:80:7C:62:62:DC:EE:05:D4:62:75:1B
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 0197C5A5B6E9BAD07ECCBC1FAA26C0CD4E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 15C2
Signing time: Tue 01 Jul 2025 11:01:01 +0000
Manifest this update: Tue 01 Jul 2025 11:01:01 +0000
Manifest next update: Wed 02 Jul 2025 11:01:01 +0000
Files and hashes: 1: SpsqNCwISL1D7YWDs8MOUK4XUcQ.roa (hash: VKTdP32emCO1Alc2phplZ6z5V0MT3UL3VXfP0BBA76I=)
2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: 6kzi2uCH7dXHkPVOigz3pOhtwruo5GGgvtvWUuwQqmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:b6:e9:ba:d0:7e:cc:bc:1f:aa:26:c0:cd:4e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Jul 1 11:01:01 2025 GMT
Not After : Jul 2 11:01:01 2025 GMT
Subject: CN=378de15a1456823d58807c6262dcee05d462751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:02:00:64:6b:fa:7b:3a:c6:d8:a7:5f:db:
fd:ba:26:5d:e1:e7:16:a2:7c:83:ef:84:d5:58:75:
0a:19:a3:66:46:b3:ee:e7:15:0a:04:f8:d7:78:49:
8e:3f:67:fc:63:de:f5:44:6c:cf:24:4e:2c:ce:01:
01:49:5f:a0:fe:13:1a:83:45:80:b4:3f:bf:32:12:
dc:63:be:92:10:7c:04:5d:27:5a:00:53:c8:4e:23:
6f:86:d0:68:7d:c8:9d:44:a0:a5:98:62:08:db:63:
56:90:2a:8a:a5:9f:d9:f5:ba:bc:40:b4:4a:08:3a:
fd:c1:cf:e7:b0:e9:17:1c:fe:f5:11:cb:af:37:3e:
3d:1e:7d:a8:af:64:9c:0e:32:72:dd:bf:30:2f:08:
fa:bc:f4:25:29:00:59:af:4a:fc:06:4f:b8:d4:4b:
0b:33:8d:80:21:60:29:9a:9d:3e:5a:40:d5:51:93:
4b:da:eb:d3:84:fd:73:65:db:4f:35:79:b6:2f:b3:
b6:e4:5f:98:c1:4c:80:20:63:25:c3:e6:27:e8:7d:
8b:5d:57:8e:4b:52:7d:2e:3e:04:ca:02:eb:8e:df:
80:16:e7:6a:f9:91:c6:b7:53:e3:90:1c:5f:3f:be:
58:3f:fa:0c:76:a8:ca:f0:9a:d8:87:ef:11:3c:97:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8D:E1:5A:14:56:82:3D:58:80:7C:62:62:DC:EE:05:D4:62:75:1B
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cb:f9:02:93:a0:6e:51:fe:79:29:8c:e5:08:7f:23:e6:d0:
fa:3d:79:36:52:8a:de:d3:f2:58:51:b1:ec:21:fb:29:cf:89:
17:3a:b8:49:7d:b0:54:f1:55:bd:20:26:87:e8:f7:12:60:3e:
45:03:07:5f:f7:9b:57:06:ca:4b:e5:77:66:26:d5:60:d8:04:
52:ae:c1:8e:b8:c7:4e:24:1b:00:3a:da:36:84:93:1a:ed:98:
1b:89:14:bd:7c:38:28:c6:14:f8:8b:52:c0:0c:79:68:19:f4:
67:e8:c2:ed:e9:91:6d:f0:2c:75:26:e6:76:5d:11:9d:8f:6f:
76:d9:9c:b0:e4:54:49:3d:30:6e:d8:ed:b2:f8:21:10:8f:15:
78:ec:dc:7b:fa:54:07:56:be:c5:48:d1:3d:2d:2c:68:62:76:
a0:47:9b:60:1b:94:bc:30:e1:64:5a:c0:23:43:5e:c9:b0:7f:
d6:e3:ac:4f:3a:cb:25:76:d9:9a:34:cf:bc:0c:f7:ae:6c:35:
60:0b:bd:93:73:08:77:9f:1c:da:4e:54:ba:7b:ed:ed:49:00:
b2:cd:6e:c0:1b:08:30:f2:10:94:63:c7:ed:a3:bf:33:be:c7:
46:fc:c1:64:f7:da:6d:95:b6:a4:c8:bb:79:d4:3c:65:32:4e:
7c:ff:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:21:54 2025 by rpki-client