Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: V5XQCIMdAgp15zybzMN+kMfWJM+OtQftUu/i5eo401I=
Subject key identifier: BB:AE:03:CC:35:0A:01:D0:99:A6:F5:34:CC:EA:05:60:ED:DE:F2:B0
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 0198D583D873852884FA95EB78023BD0294D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: 3UX6Sgub0xOA0R9U//0rLEa0BLzpdUc7kMfvVeCGtsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d8:73:85:28:84:fa:95:eb:78:02:3b:d0:29:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=bbae03cc350a01d099a6f534ccea0560eddef2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:17:1a:1f:15:d1:7a:d9:b1:25:5e:5a:5e:
a9:97:36:05:e2:23:c3:f9:d7:48:c0:0e:22:99:c2:
68:19:f9:fb:51:c0:b6:0c:5b:a6:1e:3c:29:fe:ba:
99:69:d0:3d:e6:17:fb:cf:9d:9b:06:5a:aa:44:fa:
0b:56:ef:15:ec:5c:21:64:7c:11:2b:62:36:3c:fe:
fb:47:a7:89:bc:a2:8a:63:44:86:fe:de:40:bb:b7:
e4:7e:14:1f:80:eb:21:6c:5a:24:1e:ff:b4:8d:11:
fa:70:b9:23:52:e0:25:d1:9e:50:f8:51:7c:e2:07:
3e:75:15:2a:93:6c:cb:35:06:58:93:48:07:1b:a6:
22:c8:82:80:8c:85:b0:e9:48:59:f4:13:2a:11:67:
66:22:4c:ed:ee:52:ca:32:e9:f6:07:f1:29:83:59:
00:cd:b9:9e:91:36:ee:d8:30:30:bb:55:0d:90:6b:
3c:61:18:47:58:4c:ec:70:88:95:65:d9:98:7a:07:
88:58:f5:92:fd:b7:76:16:68:5f:c8:70:d1:20:76:
13:41:88:7f:f4:84:b7:60:98:6a:a3:a9:bf:22:ce:
77:77:7a:c5:a7:ea:a0:86:5c:3b:d5:38:f0:cb:b4:
89:ee:be:d6:e9:dd:94:44:21:e5:03:5b:c9:6a:0c:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:03:CC:35:0A:01:D0:99:A6:F5:34:CC:EA:05:60:ED:DE:F2:B0
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7a:eb:1b:cd:74:95:71:9e:bf:a9:16:0c:76:4c:e1:53:6e:
7e:cd:dc:a7:e2:6b:f1:08:cd:db:58:8d:b3:13:17:56:40:1c:
16:e6:17:27:d3:f0:9f:81:32:86:bf:90:01:0e:8a:22:86:38:
48:e3:37:25:7b:04:f6:21:3f:90:a0:9f:26:63:0b:2e:62:46:
96:28:c7:87:10:48:68:ee:e7:a5:92:b4:c9:11:d0:a4:b6:3c:
65:9f:6c:dc:60:cf:9e:1b:4b:af:5c:fb:96:b7:07:a7:a3:8c:
e9:d1:5a:c1:06:35:e4:5c:5e:a7:68:99:52:5c:82:fc:b1:17:
46:73:1b:f6:bb:cf:ae:b2:c3:27:68:b5:e0:f7:0b:c1:19:2c:
c9:a5:a2:1d:ef:02:38:26:7b:29:bb:8a:6a:e8:14:07:e3:14:
4b:53:69:9c:db:11:9c:99:a7:59:b1:86:b5:15:ae:6e:82:7f:
41:94:f7:23:14:d8:92:a1:f2:ff:16:62:cc:b3:a5:18:b9:86:
00:5d:4c:f9:1e:fd:e5:c1:81:ad:7e:19:53:97:6f:a3:d3:ba:
50:4d:7e:89:e0:ea:21:8b:d2:9b:79:e2:79:7b:41:f0:b2:89:
ed:b7:0c:53:d8:78:e6:48:ed:bc:6a:cf:f4:65:7d:f2:8c:57:
82:f2:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:57 2025 by rpki-client