Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: Cd6JvxH/D9rKh+naR7fYgPgmHRnX+BIalU/B2rId+pk=
Subject key identifier: 39:E3:0D:08:68:08:48:F9:D0:0D:6A:F1:89:DC:2D:02:D6:34:71:2C
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 019896A4B710A1C0AB42424BF252D7F15299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 01:00:33 +0000
Manifest this update: Mon 11 Aug 2025 01:00:33 +0000
Manifest next update: Tue 12 Aug 2025 01:00:33 +0000
Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: g6Psi2QGjhVVo5LbHS5IuWVNyPDaxEoDSTc9rU4Brts=)
2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:b7:10:a1:c0:ab:42:42:4b:f2:52:d7:f1:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Aug 11 01:00:33 2025 GMT
Not After : Aug 12 01:00:33 2025 GMT
Subject: CN=39e30d08680848f9d00d6af189dc2d02d634712c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:29:29:61:f0:5c:01:93:9f:54:64:71:72:ce:
99:cd:06:bf:b7:7d:8a:79:3e:5d:51:14:c8:1c:25:
2d:a1:7b:a9:35:cc:c9:b0:16:bf:18:53:99:bd:2d:
43:7c:45:e3:c4:8b:3b:81:04:30:2f:fb:44:69:20:
01:8c:5d:16:cf:4d:12:ec:ff:4b:77:aa:7b:f0:25:
36:28:c9:98:ef:78:c9:57:d1:4a:88:dc:cb:49:73:
dd:97:32:88:9e:dd:94:12:e9:d8:40:18:d6:fd:ef:
0e:6a:3d:0e:da:41:f2:8c:4d:87:d5:53:dd:62:18:
dc:10:7c:f9:4c:ce:01:ba:41:ca:71:90:d6:af:e5:
df:c8:c1:3f:b6:0b:c0:94:90:f4:a5:be:6f:d0:b1:
5b:28:80:90:c7:5e:d0:fb:c2:85:69:bb:7c:45:af:
72:2c:37:6c:7b:94:15:db:47:67:e7:a3:f6:4c:80:
90:f6:39:40:ea:d8:7b:97:e2:14:cf:f6:e6:17:86:
bd:5f:77:71:db:29:85:fe:58:6f:f4:25:a6:ad:65:
c5:d6:d5:35:f9:66:56:df:1c:93:d6:b9:1e:d6:b2:
09:8d:0b:ce:9a:cc:07:f3:43:e2:64:a8:da:64:c4:
57:d5:04:39:c4:80:dd:01:b4:1c:da:d0:7d:c8:0a:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:0D:08:68:08:48:F9:D0:0D:6A:F1:89:DC:2D:02:D6:34:71:2C
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:31:cd:93:0a:03:b6:ef:5c:53:ad:69:8a:d0:54:ac:90:cf:
12:13:d6:18:7c:6a:d5:23:00:ef:53:c8:7f:d9:8b:4f:40:99:
b8:2b:c9:8b:cd:de:44:eb:e8:a0:4d:52:b6:0f:b8:8e:36:db:
f6:f2:9a:5f:0d:ea:70:14:0e:87:25:17:f0:d6:e4:9c:b4:4f:
75:90:1c:9f:2d:ad:5d:48:2b:d7:a3:bd:d7:f9:c5:a2:ef:d9:
b6:15:f1:9d:5b:ff:66:73:b5:87:e9:6b:79:cf:e4:bc:2d:1b:
af:9f:92:f0:60:0b:d1:ab:c6:08:b0:7c:b8:9a:f6:0d:df:48:
d9:6c:42:8c:0b:03:6a:e6:db:b6:45:3c:15:84:79:49:3e:02:
f4:e5:f7:c4:e7:cf:04:5e:51:2d:80:b0:b8:21:74:35:f8:7c:
b0:db:f3:b7:06:19:e1:8c:bc:81:d6:f9:66:68:0c:d0:55:90:
6c:54:76:c2:3a:c6:20:0e:2b:b9:ca:1d:15:f8:80:f2:f2:04:
f6:16:c3:f4:87:e8:68:a7:5f:9a:12:13:59:d2:8a:38:6f:13:
9b:39:92:75:6a:57:b0:69:ef:fc:29:72:75:f4:79:4f:08:8e:
2e:72:09:df:c3:56:aa:95:3b:b6:15:34:83:7c:11:8f:6e:05:
34:c3:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:30 2025 by rpki-client