Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier: O4L5zKS883kuBPhu/F1rBvHr33nZE/dmyiPoD+2koO0=
Subject key identifier: D0:2B:6A:0C:B5:BF:F0:74:18:5D:84:BE:86:6C:85:19:4E:31:81:51
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 0198D697F495DAF1B2D346E349E7DFFACC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number: 029A
Signing time: Sat 23 Aug 2025 11:02:19 +0000
Manifest this update: Sat 23 Aug 2025 11:02:19 +0000
Manifest next update: Sun 24 Aug 2025 11:02:19 +0000
Files and hashes: 1: 57xao0M2AdqrH2enoUGayVFXdGY.roa (hash: aul3XKpu3FPCVY/zVFWyx2xUMjYZdpyFV6zqK4hIpg4=)
2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: 4tUTKKLaG1/qhTCge1uDmRodowNzXX0LQQeTzy+jMWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f4:95:da:f1:b2:d3:46:e3:49:e7:df:fa:cc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: Aug 23 11:02:19 2025 GMT
Not After : Aug 24 11:02:19 2025 GMT
Subject: CN=d02b6a0cb5bff074185d84be866c85194e318151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:dd:30:93:95:1f:8c:52:08:f0:0d:3d:28:
43:b1:0f:fc:e8:71:0b:40:cb:d6:c2:92:ff:b8:17:
22:8d:f4:a3:7e:f5:27:53:d3:33:cf:29:83:7f:ce:
7a:cb:b4:e0:1f:3c:cc:75:d3:26:50:a1:1f:ec:d5:
7e:12:5f:a0:fa:aa:6c:b1:4d:88:60:48:76:fd:27:
9c:a8:0a:57:8c:ed:e5:de:10:73:1b:69:80:8e:5a:
8f:e2:c2:89:2d:f9:d7:8c:c2:15:05:15:98:ee:98:
8d:2c:f6:77:6e:f1:ee:aa:2d:80:f1:e2:f6:63:fa:
c3:e7:d7:2e:15:65:d1:d9:85:f4:c5:5e:25:da:17:
c6:65:23:a8:6c:15:2f:2b:7d:d1:8e:4d:35:fa:dd:
ea:14:c4:05:9a:7c:00:44:94:d9:b8:5a:f3:cd:e8:
4c:c4:6b:0c:c4:55:c4:af:4c:3f:eb:94:b7:7f:df:
61:ee:4c:65:bb:d1:c5:c0:f2:4a:d6:e1:38:27:3a:
e4:6e:d5:36:b3:4f:76:b3:a3:47:a3:32:f0:0f:32:
27:b9:11:0c:a0:57:68:84:7d:2a:bc:32:67:f1:a7:
27:67:41:82:c2:ac:33:0d:48:c6:fa:7c:fe:28:c6:
da:1e:42:cb:29:10:e6:fa:1b:5b:52:d5:4e:24:82:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2B:6A:0C:B5:BF:F0:74:18:5D:84:BE:86:6C:85:19:4E:31:81:51
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c8:9e:a5:af:b7:2e:51:bc:61:2f:a2:1a:f7:4f:b2:27:2e:
a6:ea:61:5f:11:39:32:e6:27:63:0d:11:b3:d4:77:bb:85:29:
3d:8f:f6:d8:61:41:13:71:0b:27:09:df:10:5c:01:e4:1e:e3:
17:9a:6d:7c:90:a8:87:63:7d:66:45:2f:b9:f2:f4:a9:02:9c:
8b:79:ac:dc:65:32:81:ff:32:6f:c7:69:2c:bd:06:2d:7c:ee:
76:08:94:fa:fa:b0:df:20:f5:7f:d6:43:1e:23:d8:a1:77:7c:
78:c5:8b:1b:d0:7e:c0:17:4d:6c:0e:ec:64:4e:e8:f3:90:30:
d0:ad:fa:9e:1b:7b:64:b1:52:ef:50:21:31:6a:e0:f1:96:48:
12:13:ca:dc:d8:21:d6:23:7a:ca:13:f6:a7:54:42:f8:a1:fe:
83:d7:44:91:fb:05:e0:8d:58:3e:70:64:d3:41:1a:93:9e:16:
6a:57:0f:14:a4:45:3f:8e:61:c5:8a:0a:d2:7b:8a:b0:2a:f1:
bb:ce:9b:6e:02:40:d2:0e:d0:9e:c1:7e:cd:f2:f1:f3:2c:63:
7a:bb:ab:15:57:6d:73:34:a5:35:54:75:66:cc:cf:c6:5e:dd:
06:f2:cb:b2:91:93:af:17:98:46:60:46:b7:16:2e:cf:ec:25:
99:7c:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:52 2025 by rpki-client