Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: RaVH/SR2BwjI6uECyiQZY17TU7DuDG+biyYlT56XQLw=
Subject key identifier: 71:E9:95:C9:EE:C9:3A:B2:9A:C4:40:5E:8E:3F:B8:B9:81:65:27:9B
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 0198D6985B30F8013F9CF535DDFF7C412192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0AF9
Signing time: Sat 23 Aug 2025 11:02:45 +0000
Manifest this update: Sat 23 Aug 2025 11:02:45 +0000
Manifest next update: Sun 24 Aug 2025 11:02:45 +0000
Files and hashes: 1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: 3t+CRzxEHrAzYm41lXb+5BkHEbOA41EO0p7bFM3XKa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:5b:30:f8:01:3f:9c:f5:35:dd:ff:7c:41:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Aug 23 11:02:45 2025 GMT
Not After : Aug 24 11:02:45 2025 GMT
Subject: CN=71e995c9eec93ab29ac4405e8e3fb8b98165279b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:a4:31:a1:4b:d2:05:a9:f9:9e:78:61:de:
99:39:99:4c:e8:08:6e:9f:7e:0a:fd:8a:93:04:5e:
a3:ea:41:a2:74:52:f7:d4:08:30:b0:07:4c:e6:79:
96:41:c8:05:84:c5:f9:9f:b6:ed:38:af:eb:e2:a1:
c6:b3:cd:4e:15:0e:e5:eb:ab:19:8c:de:f2:96:fc:
6a:bd:0c:d0:4e:30:99:af:4e:eb:4d:f7:f8:41:eb:
22:4f:08:cd:33:e3:cb:aa:87:9c:8a:92:7c:d6:86:
e3:f4:fc:25:69:94:3b:5c:98:1c:e8:81:4a:54:fa:
74:d8:4a:89:67:a2:40:75:cc:69:78:25:e4:f7:c3:
ea:98:7c:a8:81:c6:49:d7:77:26:79:4e:ac:cb:d4:
a3:3a:86:d2:ca:bf:85:7b:ef:62:22:19:9f:e1:de:
79:e7:ae:31:88:2f:fd:21:13:14:9d:8f:03:19:88:
87:81:0e:1b:34:74:2b:8e:b0:d5:df:26:bc:9a:14:
da:a1:3c:3d:05:96:2f:83:cd:a7:9e:b9:ca:ef:a2:
6d:fd:d7:28:e0:cb:6d:82:01:3b:0f:fd:16:c3:5e:
02:15:8d:96:a2:5b:f7:4d:6f:0f:eb:f8:00:98:07:
45:63:37:79:fc:2b:c1:70:54:8c:7e:12:cc:e5:d4:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E9:95:C9:EE:C9:3A:B2:9A:C4:40:5E:8E:3F:B8:B9:81:65:27:9B
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:37:89:bf:f0:3a:ee:b8:86:13:54:c8:7e:33:2c:4d:cf:2e:
35:e7:34:90:19:b6:c1:52:53:77:09:97:97:4d:c5:73:31:d9:
9f:62:35:80:ea:01:fa:8e:ba:5e:4c:60:1c:d0:e1:c7:1b:cb:
6d:3a:cf:a2:d8:62:01:d3:1f:d1:81:56:45:1a:16:80:49:a2:
dd:3a:f9:4e:e2:f0:0d:df:15:b3:fb:88:ef:78:f4:50:16:81:
9c:f5:54:37:55:d6:02:f6:0e:b1:d6:63:04:d4:b9:3f:a0:73:
41:73:2d:b3:dc:62:a5:a1:85:93:64:28:76:e0:2c:81:f4:11:
a1:07:7d:01:1c:72:02:94:49:e9:cd:18:a8:eb:59:da:e4:30:
1b:88:32:64:91:2b:62:c0:8f:19:8f:2b:14:e4:0e:d7:01:08:
8e:0c:ce:56:83:d9:22:78:d3:3a:e2:b5:20:87:9b:b7:96:10:
dc:93:50:20:64:0c:bb:7d:c1:cb:cf:24:87:63:a1:b3:9f:fa:
7d:bb:a7:3b:61:ed:8d:3f:3e:89:39:31:89:ec:1b:1b:a3:b6:
d9:85:e6:9c:79:11:77:a9:ef:44:a6:0d:cc:c3:51:64:b6:ab:
6d:c6:ca:27:2f:2f:ed:a6:9e:bb:cc:8f:96:fa:ef:eb:b0:8e:
be:ff:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:58 2025 by rpki-client