Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: NW9H+yryZFxcQ0JqK61/v8+dvztr61CTruxpfGD17hE=
Subject key identifier: 77:BC:C3:A2:86:1B:B6:1B:8B:BB:56:22:FB:42:B8:7A:E3:AF:4C:9D
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 0198D5F1511FDCB3D1454DF644F59B7EEA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0A50
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa (hash: rPricXL6DKMNzIm/8wBOd/xDJhVzBjF0FcknH/0CxQI=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: rfCPijZ/5l1p+8YDtu6G0XKH72vdVrgcSPXgcPJDN84=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:51:1f:dc:b3:d1:45:4d:f6:44:f5:9b:7e:ea:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=77bcc3a2861bb61b8bbb5622fb42b87ae3af4c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:a3:d8:5b:23:85:c1:35:6c:fd:ef:0d:43:
f3:b6:0c:2e:45:8a:d7:d9:b9:d2:2d:3b:f5:5b:50:
6b:96:98:2c:8c:c4:0d:df:a5:78:37:00:eb:4b:4f:
d0:af:f4:42:ea:74:82:f1:2f:14:90:fc:ab:c6:0c:
16:5b:21:4b:73:6a:55:ea:ad:bc:cf:83:ac:50:bb:
47:0d:e9:6b:0f:65:83:50:bd:52:ce:18:43:3c:69:
13:cb:95:e2:1e:54:40:bc:09:fc:8d:de:ed:f2:03:
4a:8e:1f:1b:73:a1:74:b4:51:7e:2a:17:f1:6f:fd:
cc:4c:77:cf:99:1f:4f:9b:27:97:0f:89:07:3b:d2:
a2:8d:cd:a7:0e:ac:ae:fc:14:34:ae:3a:fa:72:21:
1a:c1:7a:c4:26:19:1f:fa:5f:a7:53:c2:1b:c6:66:
09:d5:1e:cc:af:d0:b4:72:39:b9:e3:41:85:33:6b:
b1:45:f7:d4:37:06:fb:d3:a7:4e:50:47:0f:bf:46:
d5:7e:08:1c:3d:90:b5:74:9c:3c:16:81:09:87:18:
ab:71:53:ad:31:18:08:1d:e0:fe:ca:b5:3a:8e:f7:
b2:92:ab:14:cd:a9:09:e2:e8:64:41:a5:58:5a:c0:
f8:43:00:ec:d6:15:97:9d:4d:f2:d9:12:1d:44:84:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BC:C3:A2:86:1B:B6:1B:8B:BB:56:22:FB:42:B8:7A:E3:AF:4C:9D
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4d:a1:2e:4a:f6:14:a4:b1:a9:80:4f:eb:f4:29:c1:e6:e0:
14:46:bd:3d:73:f8:1a:50:2b:b1:c4:a3:70:8d:92:38:14:49:
3b:dc:90:51:58:50:a5:e9:95:fd:92:b0:b3:13:da:fb:f2:cf:
97:5c:1c:39:17:ee:8b:bb:7e:cc:51:eb:c7:58:53:9c:79:6b:
ce:88:dd:39:60:2c:d6:3e:87:bc:5f:17:66:10:23:1b:24:c1:
16:0e:19:77:36:6a:2d:a4:80:35:50:cf:52:99:0f:09:27:ed:
27:e7:df:6f:ae:a4:3b:c4:51:33:b1:ab:4b:1f:36:e2:74:a7:
83:63:b8:9b:d2:e4:21:73:21:62:a8:bb:d6:0e:b5:b1:31:04:
76:03:87:b5:8c:df:ee:fe:dd:f3:2b:c5:13:a8:51:99:de:fb:
54:73:25:e2:7d:e4:8c:5f:36:39:ce:a8:70:b3:99:ce:83:8e:
56:32:b1:35:73:87:77:ee:20:3a:f8:30:98:37:57:cc:52:c7:
b1:fc:22:4a:39:0b:51:af:3a:de:af:be:8d:44:6a:6d:9e:e6:
01:bb:ea:f8:54:12:2c:77:88:cb:33:75:14:f1:12:31:74:5d:
ab:38:be:2a:9c:4d:c9:2b:b4:fd:fd:f0:82:95:01:1e:b1:8a:
f7:1b:1b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:10 2025 by rpki-client