Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: aRgHfgOS+2rgM+KpviJk94O5NIKrNdwd/fiqbgC9wFg=
Subject key identifier: BB:9E:1B:B2:C0:29:53:44:05:42:DE:45:8E:F6:8B:94:6A:A1:FF:F3
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 0198D404BBE64645347B708D9FCAC4609D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 23:02:16 +0000
Manifest this update: Fri 22 Aug 2025 23:02:16 +0000
Manifest next update: Sat 23 Aug 2025 23:02:16 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: 3WW0MTq26nZQHKtbVtkIirvQBfA1YWIpSFdL1re2zmM=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:bb:e6:46:45:34:7b:70:8d:9f:ca:c4:60:9d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Aug 22 23:02:16 2025 GMT
Not After : Aug 23 23:02:16 2025 GMT
Subject: CN=bb9e1bb2c02953440542de458ef68b946aa1fff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:30:ce:4a:44:12:40:7e:b2:e0:47:72:39:
0c:fa:b6:db:a5:51:0b:ac:1d:9a:bf:26:1b:f6:48:
b5:b4:51:76:ba:28:87:7a:09:a4:99:25:90:f3:bf:
21:81:a5:cc:ae:68:08:c0:93:78:d0:09:ae:6a:0d:
44:a5:fc:52:9f:a9:c0:1b:86:cc:58:1c:24:87:bb:
88:c6:21:62:f0:48:dc:46:f9:68:96:cd:70:2a:ed:
58:fe:93:3f:05:95:8e:17:23:66:99:7b:aa:4b:b9:
e6:de:8f:d7:2d:42:ab:4b:e3:12:3b:34:fa:20:e9:
ef:99:bf:e1:ce:b3:ab:4b:18:08:06:9d:c7:9f:bf:
09:3c:b5:fc:a4:b8:96:46:1c:74:fd:d1:ea:45:4d:
78:e5:a5:55:39:a5:73:8f:c2:f0:4a:22:86:a6:04:
01:fc:e4:b7:6b:ec:f2:eb:a3:20:fa:52:37:b8:e6:
72:5c:d4:6d:48:2d:df:e0:65:90:4c:94:59:7c:0a:
ac:eb:da:dd:9d:a2:ea:5a:d3:ac:d6:66:7c:cf:45:
46:e1:24:14:dd:39:07:be:2e:4d:77:96:a1:78:f8:
b4:72:cb:56:b1:88:01:f1:88:5b:e7:8b:5a:5e:8e:
16:76:50:74:6c:78:fb:ed:c9:dc:7e:09:37:45:54:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9E:1B:B2:C0:29:53:44:05:42:DE:45:8E:F6:8B:94:6A:A1:FF:F3
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4e:07:f7:48:85:7a:ec:c8:b3:40:56:46:e9:70:67:d5:29:
79:03:d6:c1:d9:16:66:78:51:aa:5c:2e:f0:7d:d1:f9:22:c0:
85:00:02:19:d3:de:56:e6:c6:ea:8e:88:00:1d:e1:d2:ce:f2:
a0:0b:3e:9f:3b:55:36:41:bb:c1:15:5a:5d:3c:b8:c8:fc:6e:
d6:6a:83:2a:4b:8d:45:a7:e4:42:d4:23:f5:01:d0:c9:ee:e5:
37:15:d3:70:c3:c9:f2:1e:4c:ad:c0:cb:f1:fd:3d:29:55:ad:
a1:e9:7f:9c:68:0b:47:ae:cb:56:7a:84:97:44:7a:c9:9e:39:
97:71:da:01:2b:ed:cc:f9:4b:47:a7:bc:b6:fa:6d:6a:12:df:
38:20:17:60:09:6e:48:37:44:19:b4:9c:14:23:c0:cb:4d:2f:
f2:60:c4:f4:98:9b:7b:a2:87:57:b2:82:b7:b4:48:5a:89:07:
71:2b:a9:39:c2:5e:e2:a7:63:ad:7e:b9:3b:93:3d:3e:36:44:
b6:43:81:87:b6:50:ea:d3:73:9c:10:bd:0c:9d:e0:c3:33:95:
da:4b:2d:ec:24:41:08:99:9a:ee:da:48:dd:7e:3c:ce:87:d6:
41:3f:16:99:ca:86:0a:9e:bd:b7:8e:96:04:1d:16:95:ac:32:
01:ef:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:03 2025 by rpki-client