Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File: s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier: 9EqoU65fHBQxpyu5Jm1tfeZ3MwE+97cVmRgtorDIVyA=
Subject key identifier: C9:B2:CF:BE:C6:C2:45:97:12:6C:82:A2:94:45:32:25:FB:C2:9A:0A
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 0198D439B897879CD7EF0E5BC3ABF55BF44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 00:00:09 +0000
Manifest this update: Sat 23 Aug 2025 00:00:09 +0000
Manifest next update: Sun 24 Aug 2025 00:00:09 +0000
Files and hashes: 1: CWFEcKSRZBYlT2vWWkV5nYcBlHI.roa (hash: nc++n41sb/ngoYKjInAuk6Rbh3YfF9Q+XH3kpi1+H74=)
2: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=)
3: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (hash: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=)
4: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=)
5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: a+IYUyBlRAGbuYZ/LlExhjc0jLW0oVB0Gkdmij2u3kM=)
6: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=)
7: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (hash: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:b8:97:87:9c:d7:ef:0e:5b:c3:ab:f5:5b:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Aug 23 00:00:09 2025 GMT
Not After : Aug 24 00:00:09 2025 GMT
Subject: CN=c9b2cfbec6c24597126c82a294453225fbc29a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:a1:f3:eb:49:4a:1c:fb:bb:6d:40:32:59:
1a:1d:04:ab:72:6b:ed:ad:13:6c:b2:65:70:b9:ef:
9e:0e:ef:f6:30:e5:d4:56:35:97:ca:3d:18:f4:9c:
8d:5c:cb:a3:0d:8d:e2:cf:5a:1e:dd:ed:75:81:c6:
1b:9a:20:c9:db:5f:89:3e:2f:2a:42:3a:45:df:dc:
0a:41:b4:30:18:d8:a1:20:fc:4d:b2:e9:3f:d5:e2:
17:82:e2:fe:b0:82:1a:4e:5a:b2:17:4c:d0:aa:7d:
83:31:a6:3f:15:af:ca:7c:d5:79:15:84:2b:a9:81:
51:5f:2b:7f:7c:2e:85:a0:35:4e:3a:25:78:aa:db:
c9:03:0f:bc:2f:c7:12:4f:b7:9c:42:f5:4a:43:2e:
04:65:cb:cd:99:09:e4:dd:a0:a4:72:a5:67:54:1a:
8a:d8:87:64:51:e4:39:b8:1a:c6:44:0f:7c:7a:03:
34:aa:5b:bb:63:2c:2f:13:41:e8:d9:ff:11:41:68:
eb:9d:df:80:c9:60:d3:22:01:be:ab:09:85:53:22:
5d:fa:85:b7:6f:65:2e:1d:78:96:31:58:64:fb:ee:
a3:37:02:21:8b:f7:5c:ab:80:5a:d2:6a:71:c3:1f:
c1:06:e9:7e:2a:52:42:b9:3b:6d:56:69:df:8e:f3:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B2:CF:BE:C6:C2:45:97:12:6C:82:A2:94:45:32:25:FB:C2:9A:0A
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a1:25:c1:2d:82:00:0f:be:4d:c6:92:68:96:bb:1a:bf:4e:
f0:4b:1a:c6:87:23:95:bb:47:9e:ec:28:05:5c:42:13:2d:79:
cc:76:9e:6a:cd:52:05:ce:a7:15:99:ed:09:81:e9:46:ba:38:
c1:8a:c8:3b:0d:0a:da:55:88:b7:52:60:80:3f:78:58:e0:1e:
9b:e3:d2:74:46:74:d5:74:31:db:22:ad:73:be:47:d0:15:16:
7f:a8:8c:2b:08:5f:41:1b:2d:06:63:d3:ba:6e:10:6a:e8:27:
8a:33:ea:29:5c:ec:77:f0:01:26:1b:44:52:3b:ec:8e:c6:3e:
74:55:37:f7:18:78:5b:73:49:d0:b0:78:30:92:af:5a:a7:64:
e8:92:51:2f:fc:98:ed:a0:83:79:58:2f:98:f3:eb:4c:9e:49:
22:71:f4:25:7b:ba:19:26:70:4c:c6:7c:37:6e:26:f4:2c:d3:
e7:a9:8f:1d:5d:c4:62:db:b7:5c:a2:77:72:cd:fb:05:8c:74:
18:6a:47:7b:eb:1b:21:2c:a9:d7:27:48:1b:a5:dc:ab:a6:e9:
60:2c:52:ba:5f:6d:c6:9b:ee:d0:bf:7c:09:e4:27:a2:18:8f:
ba:16:ec:70:c0:30:1c:b6:69:9d:9e:c7:63:f2:17:28:3f:18:
c1:01:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:14 2025 by rpki-client