Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: XYPyo8XP0Twva4sHsfUtIG1l4lEh2oPBNBhYl3OegIo=
Subject key identifier: 58:53:C6:B9:46:5F:7D:9B:9D:9B:8B:43:7B:30:B0:02:12:62:52:54
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 0198D515E8A858B69D256A03E90F27DEFF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 03F7
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: XrDua1zQDMJqH5iHPu8EHl3EkL4.roa (hash: aKzITCv/TlQWw5VPQA7t2SoPcL6SaZJgOSPmbHxDp7w=)
2: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: mlUBtL6lHzUn83ZCD20ofm1xVi0pbQlNuBizn8CeQ0A=)
3: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e8:a8:58:b6:9d:25:6a:03:e9:0f:27:de:ff:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=5853c6b9465f7d9b9d9b8b437b30b00212625254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:ac:7d:04:52:f1:4b:59:4f:97:f4:b1:7e:
e9:d5:fd:10:b5:2f:46:68:51:c6:f8:e1:d7:ba:c2:
1e:fa:3b:77:08:99:cb:3d:65:d7:77:8c:b0:2c:7b:
3d:86:d4:2a:4b:bd:50:9b:d9:4a:c0:16:f1:2b:f2:
d1:8b:f3:3d:09:f8:9a:c5:22:63:ca:a3:03:28:3c:
f7:cf:c7:96:42:2d:29:7d:8a:79:f1:11:49:80:bc:
9d:1a:13:62:7f:91:58:f4:62:34:2b:54:04:3a:4a:
e6:91:1e:08:c1:e0:bd:98:7f:2b:df:52:47:c9:70:
e0:93:f3:98:05:9f:48:f5:fa:1e:d7:61:81:7a:52:
fc:fb:d6:26:6b:60:83:53:81:2b:da:5f:d4:08:fc:
36:dd:dc:ba:45:04:b4:d8:19:e7:ff:88:d1:0d:51:
cc:28:89:04:8f:c8:d6:b1:fc:55:f6:90:53:5b:c1:
0b:1e:35:ea:fa:82:b2:b5:26:50:45:96:7e:e6:9c:
3f:6b:f5:ff:df:07:af:ff:08:56:ae:34:b5:27:d8:
5c:8d:8c:29:de:91:32:6f:ef:35:24:f8:23:df:5a:
53:8e:4d:cb:55:8b:fa:b6:63:8b:00:d9:e7:5a:6e:
79:6e:84:5a:cb:a5:b4:a4:39:e7:2f:39:73:0e:e8:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:53:C6:B9:46:5F:7D:9B:9D:9B:8B:43:7B:30:B0:02:12:62:52:54
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e2:8d:c7:7f:21:66:fc:a2:73:60:ec:10:b6:d4:01:c2:6a:
83:3d:1a:72:2b:eb:bf:79:ce:c4:27:73:08:7c:5c:1b:14:ce:
10:a9:6b:32:4a:31:97:84:b0:49:1b:74:62:49:77:c5:d8:53:
b4:79:a6:bd:39:b4:33:c8:89:59:c1:7c:0c:75:83:8d:33:4e:
d3:9c:58:24:26:75:9b:f7:f1:75:97:1f:30:e9:4e:df:99:36:
28:82:f8:e3:8e:7a:10:23:83:4b:a7:48:ea:8e:c6:6a:d8:67:
c1:5a:5d:cb:26:90:cb:10:cf:05:27:28:64:71:30:2b:f6:cc:
46:2d:23:f2:ee:b5:f5:39:e4:d8:7d:21:82:c7:75:00:38:b6:
01:b7:1d:af:79:19:eb:16:f1:14:6c:10:87:e0:20:6b:71:40:
d7:53:33:8a:aa:96:0d:18:a5:02:76:ea:38:06:c1:d6:ed:06:
68:5b:1c:8e:5d:2d:15:81:fd:08:37:be:b4:86:b6:13:d5:bf:
a9:bc:3f:5b:90:ec:73:59:91:0e:f3:25:38:f0:50:f8:4a:55:
ff:c9:6c:b2:c5:a2:58:39:e6:c0:95:d5:5c:e8:81:e3:dc:df:
17:56:59:83:cc:f7:7f:52:10:8f:db:70:d6:a6:cf:a9:a9:4c:
04:a8:34:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:44 2025 by rpki-client