Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: Qlt8AX64ayu+SGvS3+BF/8HyvQJUPb10tWAco/Nq1xk=
Subject key identifier: D6:F9:9E:25:2F:59:30:19:3C:F1:12:79:35:89:92:6C:22:53:7E:88
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 01988A69F1DAF6BE12CD9C5D16A1065AFA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 16:00:55 +0000
Manifest this update: Fri 08 Aug 2025 16:00:55 +0000
Manifest next update: Sat 09 Aug 2025 16:00:55 +0000
Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: wK0QAgU69gom1qwvA1rAkHENqGYVVBrp21uLtoO7fSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:f1:da:f6:be:12:cd:9c:5d:16:a1:06:5a:fa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Aug 8 16:00:55 2025 GMT
Not After : Aug 9 16:00:55 2025 GMT
Subject: CN=d6f99e252f5930193cf112793589926c22537e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:e1:5f:11:5d:d4:7a:6c:0f:92:5b:00:c4:
9a:a1:c4:a6:cd:5f:57:0a:14:cc:11:c0:e4:6d:69:
c9:ab:46:d7:ea:e6:92:fe:7d:c1:7d:5d:44:c4:22:
98:8d:cd:26:d3:c5:83:56:d7:00:ed:38:cf:52:2d:
e0:74:a0:a8:fe:05:c0:d6:87:01:2a:18:39:37:76:
dd:64:99:f7:b6:a2:c2:8a:c2:8e:6b:5f:db:30:5d:
ef:44:0e:1c:cd:5b:ef:9a:07:0b:ef:27:35:90:21:
71:5c:03:67:11:70:d8:3d:3d:20:f2:f5:1b:15:3b:
cc:f0:9d:21:5c:17:6f:b8:f7:3b:3e:ac:da:4f:c1:
0e:86:6c:0e:aa:bd:65:99:48:c2:2b:fc:bf:ff:fd:
e4:8a:b0:28:21:23:9b:fa:8f:69:28:b9:42:8b:08:
b4:c6:eb:f6:fc:d2:54:f5:3f:18:d0:5b:00:ef:8e:
60:29:f4:40:4a:dd:c9:46:c6:ea:e4:dc:83:21:15:
f2:31:7d:84:cc:5b:b8:a8:2a:a7:2d:f8:37:fb:49:
bb:12:24:ef:c7:a1:0b:52:37:c3:7c:5d:3a:36:e2:
49:a8:95:db:99:72:90:b9:c8:ea:6e:a0:d9:f1:92:
c2:7d:63:e5:78:76:0f:a9:b7:79:5b:59:29:71:de:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F9:9E:25:2F:59:30:19:3C:F1:12:79:35:89:92:6C:22:53:7E:88
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:88:26:97:d3:48:de:e9:5a:c0:af:cd:ca:ea:ff:e2:ff:c8:
21:1e:7a:38:08:e4:d6:cc:f8:ac:ae:77:dd:67:6f:a5:dc:cf:
b1:c4:25:27:01:d4:48:fd:f0:a2:28:b7:23:ff:80:1c:4c:62:
58:f6:a5:f6:ea:ab:b7:be:81:c9:87:6c:ba:eb:40:4c:93:61:
5e:14:f4:f0:10:46:92:1f:75:65:66:0b:34:f7:b3:bf:9d:f9:
81:b4:c4:e9:fd:20:79:85:2e:c2:52:b1:da:b8:3e:f7:10:95:
28:b4:03:2c:cb:1e:b7:af:4c:39:49:fc:bb:ab:ca:ad:bf:08:
49:71:43:f6:41:69:84:30:36:62:35:20:82:5a:0b:75:49:ba:
8a:46:75:09:c0:da:c1:8b:ff:48:7e:85:f4:a1:0b:fd:55:34:
9a:b4:12:fb:4e:c1:8c:c8:db:c3:10:c7:8b:64:91:9e:b8:4d:
68:f8:99:0c:90:68:68:3b:c0:7c:13:e9:57:30:83:f4:6a:b3:
25:71:e8:6a:c6:87:ad:a1:d5:6c:41:8f:f7:9b:e9:65:63:56:
de:7b:14:88:31:e4:6f:bc:98:ac:d4:92:24:f8:a7:e6:34:d3:
d4:76:77:86:2a:fa:56:65:5e:12:d8:33:e0:25:ba:db:ec:f6:
54:9b:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:50 2025 by rpki-client