Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier: miCygI3qyDWvS7MK12HmdC7P1tyIaK2P56KFrFfYJWg=
Subject key identifier: 41:5C:D6:3D:E9:AE:2F:E3:1A:BD:4D:58:C0:BD:2D:8F:94:51:1E:37
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 0198895710BBA94295EBA3683639C7140D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number: 0272
Signing time: Fri 08 Aug 2025 11:00:41 +0000
Manifest this update: Fri 08 Aug 2025 11:00:41 +0000
Manifest next update: Sat 09 Aug 2025 11:00:41 +0000
Files and hashes: 1: 57xao0M2AdqrH2enoUGayVFXdGY.roa (hash: aul3XKpu3FPCVY/zVFWyx2xUMjYZdpyFV6zqK4hIpg4=)
2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: mG7K+6TeYyNPLOOeWi3cOUTyMlemiVhuV78HsHvZg/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:10:bb:a9:42:95:eb:a3:68:36:39:c7:14:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: Aug 8 11:00:41 2025 GMT
Not After : Aug 9 11:00:41 2025 GMT
Subject: CN=415cd63de9ae2fe31abd4d58c0bd2d8f94511e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:1a:9b:6b:c9:92:10:ae:62:62:1b:13:e7:
26:cc:17:e3:a8:5a:37:c5:c0:42:47:23:2d:c4:ba:
d8:be:1d:05:f6:f1:c4:f3:2a:e4:dd:57:6f:6f:4c:
94:36:f2:5e:4d:6a:30:a9:f1:56:c0:63:8d:e1:7b:
45:68:98:8d:8a:9f:2d:cd:10:83:45:d3:3b:38:ed:
17:7e:69:fd:47:e4:e4:d2:88:c8:4e:cc:63:92:5d:
65:ad:09:06:b1:e9:f9:a0:1b:51:14:95:4f:bd:78:
8e:e0:1b:8e:e0:ff:09:87:9a:e9:19:df:07:73:7d:
04:d4:1c:1c:86:87:cd:8b:4a:65:67:cb:03:58:c9:
76:f3:2f:dd:12:6f:e6:ec:2c:72:12:ee:51:09:e5:
23:af:73:25:c1:ea:05:7d:4d:d0:c7:de:d8:ea:eb:
f6:ed:70:ed:c1:74:26:fb:20:7c:e7:c3:55:ad:39:
b9:37:53:74:8e:d3:ec:cb:41:50:88:d5:87:46:0c:
64:0f:87:e8:ce:4e:a0:d3:6c:c4:3f:8a:aa:dd:ae:
91:46:cb:be:af:d5:c5:3e:6a:e4:e9:93:d7:43:20:
31:59:ee:fa:3e:0f:2d:69:15:e4:ed:db:39:ef:3f:
d1:ad:79:85:0c:a0:f8:62:c6:81:22:df:3b:9b:04:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5C:D6:3D:E9:AE:2F:E3:1A:BD:4D:58:C0:BD:2D:8F:94:51:1E:37
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:3f:b6:20:52:37:77:15:6b:c1:f3:48:69:13:3d:00:97:
03:f0:0b:0b:a3:0c:21:3a:98:06:f6:17:98:20:39:20:29:d4:
a6:8e:f2:9d:da:f0:27:29:82:ba:0e:d2:9b:bb:e8:b0:92:e5:
26:ec:c2:eb:a7:f8:63:3f:f6:f9:ce:36:f3:ac:86:82:54:1e:
97:a6:75:14:d3:53:93:e2:ab:ff:e2:a1:52:26:aa:d4:2a:7d:
03:0a:93:12:47:68:db:1a:60:63:8b:e9:53:b4:56:f9:de:6a:
23:2d:08:d8:00:68:cf:1b:81:e6:f5:f6:b3:a7:fa:9e:01:f8:
84:38:bc:bb:17:e2:03:60:d0:3d:4a:25:86:a7:0b:97:6a:af:
f1:ef:ff:2e:71:74:6e:5f:28:04:c3:fe:b7:c1:bf:4e:30:0d:
59:4d:61:13:d4:a1:58:52:99:07:42:b4:9a:85:e7:86:aa:b0:
70:34:0a:c8:16:c3:de:fe:7b:cc:bd:ad:5f:b3:7f:e4:2c:dc:
7d:f0:d6:f4:b4:76:a4:18:c0:4d:97:4a:6a:58:85:69:1a:a8:
57:e0:9c:fb:44:af:55:bd:0a:ea:01:5c:8e:20:dd:3a:e5:b3:
af:6f:2c:11:b6:be:fa:52:2c:e1:9e:5a:ae:ae:0d:51:c2:88:
e1:72:95:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:02 2025 by rpki-client