
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: z2Yd1SiN2Hk23BrpyscCmgHo2uEAbe1ZCxBqigXOvXs=
Subject key identifier: 22:B1:37:62:19:EE:7C:24:22:D6:93:7E:8E:8A:52:99:B1:EF:31:7F
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 0198D6612A67B20416323489F567CD25A7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 03A8
Signing time: Sat 23 Aug 2025 10:02:28 +0000
Manifest this update: Sat 23 Aug 2025 10:02:28 +0000
Manifest next update: Sun 24 Aug 2025 10:02:28 +0000
Files and hashes: 1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: jiRZUcreRzOCZtFoKQDpENoA4PlOzNH112pOBehyPoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2a:67:b2:04:16:32:34:89:f5:67:cd:25:a7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Aug 23 10:02:28 2025 GMT
Not After : Aug 24 10:02:28 2025 GMT
Subject: CN=22b1376219ee7c2422d6937e8e8a5299b1ef317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:4e:69:1e:af:54:c9:ab:65:29:d3:d1:93:
bd:7a:1d:ae:6e:30:b2:59:31:95:b1:43:14:a3:66:
8d:77:40:42:ca:d9:70:2a:f2:ad:b5:a8:75:29:4b:
89:c2:67:f7:09:4f:de:d5:3e:11:cd:5e:c8:2a:6e:
06:69:5a:61:61:39:51:99:57:52:d6:99:36:40:b7:
33:0f:de:78:01:26:dd:26:06:b3:68:af:ff:8e:b3:
4b:64:b9:2c:81:79:5e:76:e7:77:71:53:20:a6:15:
8b:ea:e8:76:84:dd:ec:22:3e:5d:7a:e2:60:3d:4a:
00:96:75:69:03:21:c2:ca:ef:b1:1a:d2:89:68:b9:
8c:2f:40:a5:29:b5:2d:fb:fd:50:1d:85:b6:cb:69:
24:a3:60:4c:e3:c8:16:6d:9f:a5:85:da:10:38:cd:
24:64:90:bf:db:97:7e:6e:13:be:23:de:1d:2e:6b:
b7:ba:e6:a2:c4:06:0b:2f:57:57:de:2b:ed:76:c4:
fd:49:79:2e:cd:89:5e:44:a1:11:f3:89:ba:c7:7f:
6f:0e:b3:b7:b2:67:1f:c1:d5:df:13:53:6a:99:06:
98:20:19:19:32:a4:1c:29:fb:5d:61:7c:b6:44:60:
cd:bc:4f:b2:ea:9e:6f:6d:c7:ae:dc:60:7b:ee:a0:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:37:62:19:EE:7C:24:22:D6:93:7E:8E:8A:52:99:B1:EF:31:7F
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:51:84:a9:bd:7c:06:79:7f:0f:50:08:26:14:16:dd:f1:1c:
55:c7:c3:32:b6:d4:eb:24:fb:8d:92:35:49:85:74:2e:d4:50:
b1:f7:4e:ab:1b:3c:3c:6b:3b:9f:fb:ee:24:bd:d3:a7:5b:93:
bf:e0:9a:27:d9:44:09:b8:ac:bb:7b:6d:27:94:a6:6c:33:13:
75:26:9f:6b:14:ec:05:3c:63:f7:0e:a3:98:31:38:cb:1f:75:
95:b0:29:9c:a4:e0:f0:dd:90:73:27:d2:59:fa:c7:88:58:ef:
57:f6:40:60:64:7d:4a:0f:56:a9:19:38:5f:b6:b8:be:0c:16:
ff:d3:7d:02:a7:03:21:da:34:50:b3:46:ec:c4:dc:67:b4:62:
4c:79:7c:f4:44:30:de:6e:32:2a:6c:80:86:4c:c8:4a:48:97:
e8:4e:a6:8d:8e:a3:da:65:6a:96:04:61:26:b9:3f:45:6f:a0:
e1:9a:67:60:a7:9e:ef:ba:6c:58:3f:6d:6b:d3:72:c0:86:be:
57:c7:6d:ef:18:0a:a0:75:dc:96:d2:e6:33:ef:95:99:57:05:
38:a2:0d:5a:83:e3:1b:5b:f9:d9:a3:ac:e9:66:d4:74:ed:37:
8c:5b:76:6e:20:39:9d:bb:f8:3b:4f:5f:7c:87:72:87:aa:89:
5b:d3:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:35 2025 by rpki-client