Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: 7QPwa4fmTTeqFqxDj8OBjXH+ZBmTCu4f7p1Qre3t7GI=
Subject key identifier: 7B:58:96:FB:52:F0:98:E5:AE:D5:F6:64:53:C3:1C:C0:56:35:76:9B
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 0198D6CCE710F878F4B07EBC50BAC849E15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0F4A
Signing time: Sat 23 Aug 2025 12:00:09 +0000
Manifest this update: Sat 23 Aug 2025 12:00:09 +0000
Manifest next update: Sun 24 Aug 2025 12:00:09 +0000
Files and hashes: 1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: olPLmW//N2bGpVRFwB+6OQsZ3GFyd/i7/R6oPxMuqDQ=)
3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e7:10:f8:78:f4:b0:7e:bc:50:ba:c8:49:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Aug 23 12:00:09 2025 GMT
Not After : Aug 24 12:00:09 2025 GMT
Subject: CN=7b5896fb52f098e5aed5f66453c31cc05635769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:f9:ed:fb:f0:1f:c3:98:ae:76:51:d0:a4:
5a:e6:d1:91:16:28:d5:af:dd:fc:07:97:d0:26:b8:
36:8b:e3:7e:6c:c0:de:1c:af:8e:5b:98:fe:85:24:
41:87:76:65:38:f3:3b:75:ae:22:f7:a4:11:a2:fa:
54:a9:61:e1:6a:5e:2e:5d:b9:a6:75:db:da:4e:bd:
37:99:3b:c3:ea:27:db:d5:15:0e:f8:86:30:ce:7f:
d8:44:c3:85:8a:83:67:3e:b6:2d:3a:c8:1a:8c:ef:
bf:71:d3:0c:89:bb:fa:f0:a6:da:73:27:40:02:47:
11:0c:2e:08:db:db:6c:68:f9:98:5a:5d:c4:7a:60:
67:e1:2c:6a:38:0f:c6:43:89:cc:07:9f:6b:61:87:
bd:d3:15:90:77:22:66:c9:b8:e7:52:a2:94:f5:5b:
25:69:43:1d:29:c7:17:26:17:3d:d8:77:ee:9b:a3:
1b:9d:47:35:c6:3c:71:ef:78:4d:e0:9e:e9:fe:5f:
e6:79:1a:26:dc:c9:d4:d8:f1:52:23:36:27:0b:40:
46:68:5f:22:54:57:43:ad:11:64:26:ba:b5:bd:0b:
d2:df:3a:d0:80:54:da:1d:51:9b:15:f2:37:74:bb:
87:59:c6:26:79:76:06:38:2d:3e:f8:ba:13:55:0c:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:58:96:FB:52:F0:98:E5:AE:D5:F6:64:53:C3:1C:C0:56:35:76:9B
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:32:22:36:19:a1:c6:ea:a6:61:c0:bf:b3:ae:28:31:e3:
3b:2e:a3:78:e3:6e:c0:92:d7:50:f9:c6:0e:4c:e7:1c:0a:5a:
b8:9c:67:c4:59:58:16:42:d7:85:72:d8:be:69:c2:ea:54:fc:
74:b0:6f:24:df:99:24:45:8a:f9:a5:35:de:78:a2:dd:7c:ed:
ce:8b:99:38:f9:4d:c0:32:40:ce:e9:72:6d:99:6d:35:a7:6c:
ea:9e:c1:ef:67:af:58:d3:b0:12:82:ac:cf:f4:4d:78:49:f3:
c6:71:4b:95:32:d6:4b:01:63:09:ae:8b:a1:19:9f:d1:eb:08:
53:40:c1:7a:18:45:1f:97:2c:d1:56:7f:74:55:bd:42:8f:2d:
4b:49:e1:4e:9f:34:de:12:69:57:ef:ce:0e:d1:ae:48:e4:1b:
2a:ec:eb:65:8c:92:de:5a:41:f8:f2:13:56:e9:a6:bd:6f:d4:
06:0d:2b:25:f5:94:c1:c9:b8:0f:5f:9f:45:45:91:cb:64:ed:
f0:6b:38:46:88:4f:13:1b:42:e7:f9:3a:ed:ab:58:09:f0:f9:
81:31:ff:eb:45:e8:32:d0:06:e8:f8:e2:74:55:ec:cb:11:6c:
74:ed:d0:a5:d6:47:74:fc:bc:d4:a4:b4:99:0e:e5:dc:56:51:
0f:83:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:37 2025 by rpki-client