Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: 5QjgY2N6/SHk1c95W9x7HscHSaVL4jnLc/ygZ/U/pio=
Subject key identifier: 94:20:6D:DC:3F:9B:C2:79:39:B8:B6:EC:F2:DC:E5:3A:DE:47:5E:8D
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 0198D54E6A78A28A23B9FA473350B3072CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 165E
Signing time: Sat 23 Aug 2025 05:02:22 +0000
Manifest this update: Sat 23 Aug 2025 05:02:22 +0000
Manifest next update: Sun 24 Aug 2025 05:02:22 +0000
Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=)
3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: FAsQ/H9lcogXgNzPE8ecvkj4OIgo2CboWg+dhbHWC64=)
4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=)
5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=)
6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6a:78:a2:8a:23:b9:fa:47:33:50:b3:07:2c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Aug 23 05:02:22 2025 GMT
Not After : Aug 24 05:02:22 2025 GMT
Subject: CN=94206ddc3f9bc27939b8b6ecf2dce53ade475e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:1b:dd:2e:f4:71:41:b4:88:53:28:47:87:
a4:02:2a:e5:b3:85:5b:a9:22:ad:bb:6a:f1:3c:db:
a7:3f:cd:58:19:3e:fc:a3:94:74:55:1d:b1:b4:3e:
c3:e3:52:c0:3c:4c:9d:e9:98:17:3d:26:e3:2c:96:
7b:ee:ed:62:cc:fa:de:73:77:cf:f7:4a:88:f3:24:
64:9f:83:ba:b9:39:77:ab:a6:81:13:7a:ed:0a:43:
d0:a2:d9:d8:37:1b:57:dc:5b:e1:76:d2:29:7c:35:
09:2f:9a:cd:2f:36:65:f7:16:a8:96:28:b4:94:40:
f3:95:50:f5:48:a6:02:ed:67:28:bc:52:1a:53:29:
99:b3:9c:67:f0:e6:1b:17:f5:c4:e4:d1:2f:3d:d0:
bf:99:99:1a:87:24:8b:38:3d:bf:65:e5:a3:f3:3e:
22:b3:72:e2:46:de:54:29:39:90:4b:58:67:0b:29:
e9:79:23:10:3b:9f:56:56:33:46:43:d8:1e:e1:0c:
5a:eb:bf:83:22:e0:7b:38:84:a0:fa:ab:6d:37:66:
fc:c1:47:80:30:e9:7a:5b:e5:0b:ca:47:61:d5:cc:
7b:36:1c:1e:56:9e:01:0d:e9:8d:7c:d6:81:b4:0a:
2a:29:4c:34:fd:77:e9:af:71:72:02:03:7b:e0:da:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:6D:DC:3F:9B:C2:79:39:B8:B6:EC:F2:DC:E5:3A:DE:47:5E:8D
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c5:b8:a5:fb:a2:a7:97:26:c1:e3:aa:c2:d7:d7:57:62:14:
61:52:30:a7:95:e7:7b:70:e7:1a:8b:3e:e3:bd:ca:2c:c6:16:
09:c7:b4:6a:6e:a8:42:c4:3f:72:70:ba:e9:97:8e:09:5f:18:
2e:e0:f9:33:1e:31:0b:ce:41:6d:fd:6a:15:1d:08:b7:d1:0a:
34:8c:c9:f5:20:63:b7:72:f7:46:83:c4:a4:6e:d7:d7:ee:d3:
e7:7c:db:f4:f1:ab:5e:21:22:43:f5:88:a4:f6:8c:7a:25:70:
7e:6c:5e:0f:d6:88:ac:fb:67:ae:87:7c:76:64:82:c6:ed:7c:
9b:45:b3:33:38:df:f9:7d:be:5f:c9:f6:56:3f:d6:53:ba:5e:
72:2f:0f:77:2f:c5:88:db:b9:f3:5e:df:32:ba:05:aa:cb:6e:
88:33:03:48:37:0e:57:b7:c5:8b:57:a8:30:9f:1e:e5:9d:97:
ba:fe:bf:0d:32:14:e6:cc:fb:67:e4:fb:47:c5:77:ba:e3:8b:
78:70:79:57:4a:4f:16:09:59:1f:0f:f5:0a:f0:1b:06:6f:49:
55:d0:a2:5f:77:c9:11:e3:41:a3:57:0d:c0:f1:5a:fe:8b:7e:
9d:3b:9d:c7:34:e2:43:6d:2f:11:be:90:10:84:ec:57:40:18:
23:77:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:12 2025 by rpki-client