Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
File: sHATRrrVXff13IGLu7z7t9sQcKs.mft (raw, json)
Hash identifier: 4iBFdtpLHiHLOrvgkxnvDrtVbpANlv7AzcdGPPsVySM=
Subject key identifier: E0:65:5F:E5:55:24:2D:30:21:79:64:FF:C2:9D:F3:E3:71:BB:B0:B3
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 019889575375F0CDF38FABABF36ABDE24085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
Manifest number: 07F6
Signing time: Fri 08 Aug 2025 11:00:58 +0000
Manifest this update: Fri 08 Aug 2025 11:00:58 +0000
Manifest next update: Sat 09 Aug 2025 11:00:58 +0000
Files and hashes: 1: 2vj5B04hPRrl36o4PSEreNmSh7Y.roa (hash: IJqTeCNZ6pF/BafJ55wl0YbKPxsnvPNim6xG4D9/f0M=)
2: sHATRrrVXff13IGLu7z7t9sQcKs.crl (hash: 8bsDOQS2Yo2NUXLZYsL5V9ABp3hCTWmm4v8CidqOcbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:53:75:f0:cd:f3:8f:ab:ab:f3:6a:bd:e2:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Aug 8 11:00:58 2025 GMT
Not After : Aug 9 11:00:58 2025 GMT
Subject: CN=e0655fe555242d30217964ffc29df3e371bbb0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:a3:bf:39:52:b9:f7:37:7e:1b:bd:8a:fa:
18:e4:73:aa:65:1a:0f:7b:9f:46:3c:94:e9:c3:7b:
89:ed:4f:9e:98:f8:ed:14:c2:ad:1b:e9:ad:1d:65:
2d:16:f5:d4:20:14:ec:de:78:90:f0:9f:36:28:1c:
e5:56:6a:ac:51:7f:85:76:41:4c:c6:6f:b7:52:85:
1c:d3:7c:fc:a5:48:2b:be:86:f9:97:07:5d:7e:92:
cd:72:77:69:6e:83:99:13:96:de:2d:5c:5e:2d:7b:
5e:37:92:9b:0e:d7:29:ac:d9:83:72:70:8e:b4:7b:
b3:b9:96:f4:32:02:88:d5:66:89:76:c1:d0:b8:f8:
3b:95:cb:e4:f7:02:87:8f:a9:5e:7e:c9:18:56:07:
81:78:e5:55:3e:16:e0:cb:ee:a5:be:a3:d3:9c:eb:
5a:47:f7:72:b0:b5:fe:a8:2c:57:88:20:ac:b8:f4:
39:d4:c3:ba:59:5e:34:09:55:70:e2:5d:d8:5b:28:
4c:f4:f1:76:0e:64:56:ee:25:eb:cf:ae:8d:b5:6e:
c6:ba:28:01:32:fb:99:9c:14:4f:97:cc:52:3b:1a:
5b:33:26:95:ff:e9:67:94:a5:14:46:f2:30:2b:da:
6d:8a:67:ac:2f:14:a1:e8:83:1a:40:e7:b7:88:95:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:5F:E5:55:24:2D:30:21:79:64:FF:C2:9D:F3:E3:71:BB:B0:B3
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:55:98:45:5f:c1:e2:88:79:bd:76:a0:60:07:06:d9:da:2e:
c5:85:4d:d5:c1:ca:35:7a:c2:a0:66:f5:5e:2b:01:69:14:85:
82:af:de:49:47:21:fa:25:f8:bc:c1:36:d9:d7:36:4f:2e:1f:
06:62:0c:71:6d:56:0c:88:bc:0f:f4:26:d5:3e:40:f0:5d:f3:
aa:d4:cd:12:ac:12:ae:be:0d:e4:0d:17:b5:66:c9:39:35:81:
bd:00:5f:9b:92:6d:cd:21:8d:93:3e:e8:fe:d2:c8:bb:92:52:
d9:d1:73:e4:28:83:18:d1:94:5a:0c:3d:8c:25:1c:04:d4:76:
49:d5:12:fa:0c:a3:7b:99:34:40:80:50:3d:b0:31:7f:d7:15:
6b:fc:ac:6b:1d:6f:a7:97:67:dd:4d:27:03:76:a5:b6:59:eb:
ff:cc:69:36:fa:b5:4d:f3:26:ef:43:9f:7f:f1:84:ee:f6:97:
9b:8a:fe:a4:62:3f:47:03:73:e4:7c:69:c3:78:2c:08:ab:75:
c7:c1:ed:6f:f6:67:c0:5e:ec:23:77:6b:a6:d0:af:10:bc:c0:
c2:de:77:21:a9:54:ad:25:62:81:bc:63:2c:99:24:4f:bd:cb:
b9:f9:c1:b5:31:ea:08:aa:9c:18:18:85:71:db:7c:ad:c0:d8:
e5:f8:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:23 2025 by rpki-client