Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: w0nSzh3Ed+2St5gavM5AWUb2ar/Qbb18b4pr+LDoXLA=
Subject key identifier: D3:02:CD:29:21:85:56:17:E5:83:7C:3C:05:AF:65:79:C3:DD:D8:8E
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 01987E662CB9F3585134AA7CA391D191F817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 1631
Signing time: Wed 06 Aug 2025 08:01:21 +0000
Manifest this update: Wed 06 Aug 2025 08:01:21 +0000
Manifest next update: Thu 07 Aug 2025 08:01:21 +0000
Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=)
3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: hzgN1yMUCChTBWUIxHq+gFDGBGci6cpcmtONGqv1fiI=)
4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=)
5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=)
6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:2c:b9:f3:58:51:34:aa:7c:a3:91:d1:91:f8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Aug 6 08:01:21 2025 GMT
Not After : Aug 7 08:01:21 2025 GMT
Subject: CN=d302cd2921855617e5837c3c05af6579c3ddd88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:f2:d7:e9:00:0c:93:83:9f:95:68:2c:ae:
d1:c7:ea:8b:d4:b3:ae:17:77:51:ed:5e:7a:c5:73:
32:07:07:e2:48:14:ec:c6:53:d4:d8:46:3d:ce:3c:
c1:1a:49:88:d5:68:75:5d:92:1e:53:33:c2:fa:71:
e4:21:4d:57:32:ec:a4:ea:09:86:24:f9:18:94:41:
b6:1b:d0:3a:82:98:df:ab:04:9f:05:e2:48:94:9f:
c8:3c:e2:f4:0e:2d:55:f0:e9:77:6c:0a:96:25:d2:
51:94:47:5c:7e:79:0f:01:91:7a:cb:e1:31:54:36:
9b:a4:64:f1:14:66:2c:dd:1f:ef:12:8e:1d:1e:95:
35:6c:a0:bb:4e:7d:de:47:f3:3e:68:0a:07:fd:b5:
60:aa:30:ac:69:29:29:c8:d1:4e:90:d2:e4:43:7c:
74:04:da:0d:e2:b7:56:91:21:27:fa:35:02:72:2e:
72:24:24:72:7e:0a:af:c1:2d:47:18:5f:d5:8b:64:
c1:18:e0:de:c8:9f:27:62:5a:88:25:a3:4f:73:56:
1e:52:15:5b:ef:77:eb:7f:6a:9d:81:0f:a4:f3:97:
19:4d:38:6f:55:68:29:96:cc:08:ae:80:dd:02:c8:
9a:22:b3:6d:de:89:2b:25:2f:10:34:4f:69:75:bc:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:02:CD:29:21:85:56:17:E5:83:7C:3C:05:AF:65:79:C3:DD:D8:8E
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:ed:a5:b4:6f:66:c7:a0:7f:dc:88:b5:b0:23:20:bf:1d:
eb:d6:f1:fb:19:77:f1:64:b2:ff:05:32:f4:e2:dc:76:e9:9e:
63:c2:e0:95:b2:9b:2c:23:b3:27:fd:5c:1e:c6:8b:f9:7b:79:
2a:af:48:5b:66:40:a4:b0:43:b0:fd:68:0a:83:88:75:9a:86:
54:c0:3b:6b:9a:c4:2a:d6:44:55:b5:42:89:ee:bf:1e:ad:10:
41:c8:82:8b:42:5f:d4:ab:12:65:d3:dd:96:54:5a:72:2e:59:
b7:77:e6:8e:78:23:7a:4a:50:13:5f:f4:9a:8f:a5:25:0f:16:
4f:64:95:13:a4:1c:1d:dd:c8:c2:bc:31:f2:e8:3b:7d:a3:2d:
57:8c:d8:7c:f1:1a:87:b8:84:f3:3d:89:b7:91:09:f9:7c:bc:
de:96:b1:e6:73:e2:43:84:8e:13:da:e5:e5:e0:a9:d8:b3:18:
75:5d:b0:6f:2e:10:60:de:9c:82:94:5d:9a:d8:22:83:62:c4:
0b:6c:ac:41:d3:bb:dc:9c:02:0b:0d:45:a4:5d:aa:79:9c:46:
a7:48:4c:14:9f:87:2f:c1:6d:98:fc:94:14:1f:de:a4:f1:92:
d3:0d:d2:2b:33:77:c0:66:02:01:c7:fd:3b:93:c9:e9:35:d4:
65:7b:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:19:39 2025 by rpki-client