Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: 93q0T/ZeXOi14osCT/pyNyRaGUlZ41K5FLFKRdE0ygQ=
Subject key identifier: 8F:67:47:C6:BB:EA:97:74:1E:32:9B:1A:62:61:A6:CC:C3:93:B4:38
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 0197CE3AC7070B1834A627F22ED2116297C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0EC1
Signing time: Thu 03 Jul 2025 03:00:47 +0000
Manifest this update: Thu 03 Jul 2025 03:00:47 +0000
Manifest next update: Fri 04 Jul 2025 03:00:47 +0000
Files and hashes: 1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: v1BezF4RlhgI9UdDiljRAAJdySXHgCPlaQpUmwRNNnk=)
3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3a:c7:07:0b:18:34:a6:27:f2:2e:d2:11:62:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jul 3 03:00:47 2025 GMT
Not After : Jul 4 03:00:47 2025 GMT
Subject: CN=8f6747c6bbea97741e329b1a6261a6ccc393b438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:fb:0d:23:3c:71:50:c8:da:3f:69:cb:d6:
29:75:b8:43:42:ca:37:1e:6b:59:9a:a1:eb:b1:a0:
4c:dd:72:37:15:34:d2:7f:64:61:18:5c:03:a2:f4:
ab:af:5d:57:fe:1e:a3:b5:e2:a8:70:64:00:a7:cf:
ca:d6:db:3b:82:c7:24:f4:84:92:fc:36:35:88:93:
5a:a7:83:1d:3f:77:62:22:45:e0:be:a9:7f:f0:2f:
45:72:44:df:4b:09:40:6c:5c:79:47:5b:ca:24:41:
21:17:df:b7:53:7b:a0:b2:60:2f:9c:e7:4b:80:5b:
57:2a:53:44:a8:8b:16:4a:2c:5a:89:ea:29:ec:70:
27:3f:48:dc:8a:94:ab:31:ac:88:b1:51:43:99:6d:
62:ba:ee:2e:64:d8:99:ea:07:a1:18:75:bf:7a:5f:
1f:bb:8a:d4:ac:ed:ec:03:23:1a:2b:8a:d1:1b:b6:
8b:b1:a6:52:9d:f0:26:29:a3:4f:10:54:db:11:51:
b6:5d:55:89:c1:a8:2f:a1:86:7a:87:40:7f:40:c6:
7b:26:c0:7a:82:94:d3:80:b4:36:ad:03:3f:40:ad:
cb:09:21:8a:e9:d9:e5:be:3b:e5:86:38:e3:60:7c:
19:b4:84:b4:ed:34:d4:fa:5f:7c:98:58:a4:1e:30:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:47:C6:BB:EA:97:74:1E:32:9B:1A:62:61:A6:CC:C3:93:B4:38
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bb:65:50:1e:a6:4d:1d:5e:6d:24:5a:e8:9e:5b:0c:9f:ea:
bd:48:f3:dc:47:b6:3f:bf:41:9b:26:1d:07:e8:2c:73:a0:d7:
70:dd:95:38:37:5e:15:92:34:58:fc:74:6f:af:d1:bf:b8:20:
0e:0c:57:e1:82:3c:5f:29:6d:79:1b:0e:ab:85:7f:7d:9e:37:
f1:83:05:14:c0:57:43:ae:7e:15:fe:e6:f3:ca:d2:64:46:a9:
53:cb:bc:ac:42:41:f1:72:ca:6b:fb:82:70:1e:51:16:a8:62:
c1:fb:3d:6c:41:9e:e7:0f:3a:e1:cf:fd:ae:60:6b:ab:37:c1:
e9:78:1e:95:11:d1:86:27:cf:cd:9b:82:1e:6e:b2:78:d5:2c:
63:11:b3:1d:16:5b:7c:ec:e8:a6:4c:c0:3d:c9:b5:f1:e0:af:
f8:9d:3e:30:c3:f6:0e:29:91:50:f9:a1:1c:bc:26:5f:a5:b5:
fe:49:7f:e6:e4:c3:b1:ac:d9:ea:72:ee:74:04:4d:b7:f5:74:
f8:ee:e6:8f:2a:42:ed:a5:f7:40:57:f1:6d:f8:09:84:15:12:
ef:b0:bd:43:6f:15:9e:81:92:58:0b:e8:27:f7:e0:aa:eb:f1:
bd:1c:25:b1:c6:14:8d:43:96:06:99:5d:cc:7c:54:45:97:0b:
e8:9f:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:12:45 2025 by rpki-client