Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: xyR4/OAOfaVbD+LMkz7iGxLUzuKU4FIlcjdXFuFpHvI=
Subject key identifier: 8F:B6:6A:F6:3E:1E:1E:7D:4D:BE:72:6D:94:9E:33:DC:5D:21:B8:0B
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 0198D5BBD0A79D6FBCFB610AC82587766577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 0F20
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: CCGl3VB+TeYbmjKYmc8IXBFa7us2BIu9DoXbupWnWX0=)
2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d0:a7:9d:6f:bc:fb:61:0a:c8:25:87:76:65:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=8fb66af63e1e1e7d4dbe726d949e33dc5d21b80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:7e:88:bc:5c:55:1b:52:61:2e:a4:1f:eb:
a5:ea:31:e1:31:a2:33:88:7f:a1:09:af:f4:41:77:
e2:9a:e3:fd:ec:01:9e:fc:2f:c7:fa:c6:f3:2d:5f:
77:56:63:dc:d4:1e:8a:13:68:8a:c9:6c:f0:6b:96:
2a:6b:35:61:84:6b:33:16:5d:8a:d5:1f:2d:36:7a:
10:ec:c8:7f:2b:a5:4b:7d:25:74:e1:5f:48:7a:81:
93:3b:98:90:dc:49:5c:58:b2:cb:40:85:b8:3b:c3:
23:06:e7:68:d6:70:f9:a0:f7:54:1d:50:a2:c0:2f:
21:c6:7b:3a:ca:f3:d9:b7:e6:13:bf:ea:70:68:63:
64:11:78:f8:c6:88:33:7b:77:e5:33:83:3c:ce:55:
90:83:fa:90:e6:4f:cd:ef:49:71:c2:20:4d:05:b7:
03:82:f6:80:aa:14:1c:c6:e2:e2:78:a7:3b:69:d3:
d4:d7:25:c6:0b:da:66:7f:16:dc:d9:a5:61:3e:c3:
b0:25:57:cc:7b:76:a0:81:ca:c4:0c:db:e9:64:95:
a9:40:6a:db:b5:7e:60:82:04:20:8c:72:2b:25:7e:
98:a0:bc:8a:6e:09:5c:4e:36:77:b6:d5:78:5a:33:
a6:25:86:74:ab:f2:b3:d9:8b:bd:33:45:a7:86:1a:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B6:6A:F6:3E:1E:1E:7D:4D:BE:72:6D:94:9E:33:DC:5D:21:B8:0B
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:01:ab:07:f7:61:35:42:c8:14:c3:5a:98:08:1e:d0:2a:77:
7c:22:75:fc:01:a0:5f:3e:ef:5f:b7:ba:ab:0e:ed:11:1a:8d:
eb:ec:d7:49:a0:1b:8a:96:f7:59:84:1d:6f:18:db:73:10:f2:
ae:dc:90:1c:11:07:85:9a:8d:1e:2c:75:bd:17:4f:4f:5e:bd:
d1:7f:e4:0c:e9:39:88:20:59:cf:68:8c:6c:4d:49:65:82:49:
83:55:f7:c3:e2:80:d1:f0:70:9b:b2:8e:df:b8:81:65:a6:10:
28:dc:5e:20:88:50:9c:d9:2b:57:b5:87:f6:05:26:9c:cc:6e:
ba:b0:75:b8:a8:3e:da:66:8f:28:31:52:f5:3f:37:f5:0e:7a:
70:44:b8:6f:c1:d5:4e:60:6c:26:93:95:7f:eb:e7:9c:a1:fc:
dc:e5:c8:49:5c:eb:63:1f:29:0e:d0:64:dc:58:70:0d:5b:51:
2e:10:44:02:35:73:2b:fb:97:29:07:23:47:58:e6:1f:06:ce:
a2:78:79:39:98:ea:a7:a9:46:c5:2f:74:1d:10:31:16:20:39:
00:cc:34:eb:c1:a4:f9:7e:ad:53:93:e4:5f:9a:f2:d7:7d:55:
49:bd:49:8a:7f:11:d0:79:d6:f1:6a:cb:c2:79:79:7f:51:0d:
44:a6:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:01 2025 by rpki-client