Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier: 1r4ON6Lpy2v6w7vBD/SX1C7IihqIxOWbXBasQwpJw/o=
Subject key identifier: 65:13:A9:E3:2A:D7:7D:91:E7:F6:8F:26:70:49:EB:10:74:D2:3F:34
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial: 01989E5FC0AA6F2A55C010219FB937D6D297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number: 15BF
Signing time: Tue 12 Aug 2025 13:02:11 +0000
Manifest this update: Tue 12 Aug 2025 13:02:11 +0000
Manifest next update: Wed 13 Aug 2025 13:02:11 +0000
Files and hashes: 1: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (hash: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=)
2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: /BGG09WoxT+I57Cw9fi8T/3PWywAR0smEbynGggqWZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:c0:aa:6f:2a:55:c0:10:21:9f:b9:37:d6:d2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
Validity
Not Before: Aug 12 13:02:11 2025 GMT
Not After : Aug 13 13:02:11 2025 GMT
Subject: CN=6513a9e32ad77d91e7f68f267049eb1074d23f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:51:2c:3f:2a:ad:09:f5:66:74:94:41:40:a5:
82:4d:7a:66:50:23:bf:f4:d9:06:4e:cc:72:fc:08:
fd:f4:d4:6e:5b:f3:ab:50:c1:c0:11:20:3b:b1:e7:
47:8d:30:eb:78:ea:06:40:ef:a3:f2:19:72:4a:1f:
bc:39:d3:76:35:42:3f:05:f1:d2:fd:5a:10:bb:2a:
d1:be:d6:df:23:b7:36:d0:8c:45:73:2f:f5:1a:80:
b5:d9:81:bb:d7:2a:c5:89:70:79:85:df:e8:ca:2b:
ff:4c:6f:20:2a:24:fa:0d:66:8c:b4:0a:85:cb:19:
6f:23:f6:e1:5f:de:b0:fb:54:32:cf:11:32:7f:2d:
eb:9c:6b:05:21:a9:cf:cf:3e:e9:31:ce:f4:aa:5e:
53:79:f3:2b:5f:9b:e6:79:61:59:9b:1e:c4:00:7d:
56:34:f5:7c:0d:16:67:75:76:7e:23:1c:3c:70:1a:
e3:0d:dd:a0:20:43:6b:e7:e6:e4:98:65:c3:43:2c:
1d:fa:05:9f:8a:7f:b6:91:c4:5f:6b:ab:8b:21:c9:
9a:9a:2b:a1:5a:f7:24:fc:d2:57:34:cb:83:b7:d1:
9c:ad:a4:2f:85:09:a0:72:b0:ad:d7:5e:40:67:59:
68:2f:49:7d:ae:45:4a:cd:a2:d0:3e:22:9b:04:96:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:A9:E3:2A:D7:7D:91:E7:F6:8F:26:70:49:EB:10:74:D2:3F:34
X509v3 Authority Key Identifier:
keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b6:78:b8:d0:7a:ea:d3:bb:93:fd:51:6a:d1:4a:99:24:22:
75:25:6c:f1:8d:4d:6c:db:21:ba:ed:6b:e6:06:3a:7c:eb:53:
dc:78:3b:77:64:b6:b6:e5:03:db:c2:2d:c4:d6:f0:ab:39:97:
c2:8c:4e:6b:6e:c0:4c:26:57:df:2d:59:26:26:31:5f:76:ba:
d9:20:6f:22:5d:4c:3d:a0:0d:1c:cd:9c:c5:c8:57:d7:2b:52:
c1:88:88:8c:e9:d0:57:79:07:7f:49:6d:c2:42:9f:60:6a:e1:
39:20:8a:5e:80:c8:0d:b3:d0:d7:7a:ff:ae:a6:90:ad:4b:10:
a5:93:bf:f6:d8:63:09:2e:8b:58:86:74:38:ba:51:c6:84:f2:
5a:8d:f9:37:b3:89:29:0f:ea:65:36:09:a1:c9:d5:48:b8:2c:
66:5d:3e:b8:65:22:fb:14:d9:c1:7f:3b:ab:a1:a9:c2:aa:72:
1c:e8:ef:9e:e6:a6:da:20:dd:a5:fb:9e:c7:bc:0c:bb:b0:66:
3d:da:7f:6a:14:d1:47:6e:bc:26:6a:a0:e4:5f:73:ca:1f:b2:
52:2e:f3:2d:92:23:d4:c5:b2:a6:8d:d1:57:95:62:9d:47:ac:
55:85:5f:fd:b4:e7:d2:5d:0f:15:5c:b7:34:0c:0d:38:1f:63:
bb:fa:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:59:48 2025 by rpki-client