Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File: s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier: NH6CBpbOXDLpCst7zLB4d/mN4CkKYRoe3bqq6of468I=
Subject key identifier: A3:BB:5F:73:CE:CC:F4:80:B1:6A:C8:EB:A2:4E:15:9D:8A:52:85:02
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01977A54374FF11CE2A72012A0128E2255EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number: 159E
Signing time: Mon 16 Jun 2025 20:00:28 +0000
Manifest this update: Mon 16 Jun 2025 20:00:28 +0000
Manifest next update: Tue 17 Jun 2025 20:00:28 +0000
Files and hashes: 1: 72fMUbgrTDPPo7cUu15VnQvLNWQ.roa (hash: RvxteBLUmDvyXH+S4lsSzz7zQ7LVEwbzwy16GpnGfc8=)
2: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=)
3: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (hash: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=)
4: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=)
5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: G2aRZEN4tqF6B9Aqip+caUW0tciXQvwZCBtV0X/xqp8=)
6: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=)
7: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (hash: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:37:4f:f1:1c:e2:a7:20:12:a0:12:8e:22:55:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jun 16 20:00:28 2025 GMT
Not After : Jun 17 20:00:28 2025 GMT
Subject: CN=a3bb5f73ceccf480b16ac8eba24e159d8a528502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:4f:78:e1:55:92:3d:c4:fa:c3:9d:da:00:
a1:4d:cd:79:d6:a8:fe:fd:70:00:86:13:74:74:b3:
8b:66:2f:84:be:9c:64:49:0c:47:e3:9d:77:79:4b:
40:63:03:49:8d:61:61:4d:2c:c7:50:c4:8d:21:35:
c7:63:ab:2f:e8:71:0d:78:4a:8d:72:f0:bb:ca:d6:
e2:71:a9:7e:af:7f:df:71:4d:18:fc:f9:63:30:b0:
ed:2f:25:c3:9c:4d:4c:70:fb:34:64:ff:20:56:1e:
00:8f:a7:93:27:1a:6d:2d:6e:f0:5a:a6:f7:57:2a:
e8:d1:15:f8:57:a5:eb:8d:c1:57:0f:02:ac:e1:8f:
19:4b:25:b0:55:55:79:e5:57:b8:00:2b:6c:0b:a1:
85:20:b2:c5:d7:f8:de:33:c6:c7:13:51:dd:fb:f9:
3f:7d:b4:bb:36:2f:85:16:8b:c7:0f:26:6c:53:bc:
f0:d6:5f:b7:ba:dd:ef:73:24:57:43:46:2b:c2:c3:
9b:e6:1f:8b:88:ad:d8:75:7c:fd:98:d2:fe:c1:66:
b9:93:50:06:58:17:20:42:44:cc:9b:fd:9f:1d:00:
22:68:93:43:58:a5:e8:44:e3:1d:aa:23:25:64:c4:
98:d1:e7:9e:93:a8:31:7e:9b:ac:2e:fd:f2:26:36:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:5F:73:CE:CC:F4:80:B1:6A:C8:EB:A2:4E:15:9D:8A:52:85:02
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d4:ad:98:6a:12:93:c1:6c:64:58:53:58:32:c0:36:69:49:
94:f1:ab:16:db:5d:fc:11:f4:08:fe:06:90:98:d2:43:7a:94:
1e:44:06:d7:ff:51:f8:91:a9:0f:27:80:cc:7b:1d:bd:1e:34:
91:ff:14:2a:47:66:2d:33:f2:cc:11:a7:4e:2e:c5:c5:d0:1d:
1b:13:57:30:52:d9:a0:0e:89:a4:c5:a3:57:6c:94:d1:64:6d:
fa:66:db:16:b5:19:ae:99:44:37:5a:de:a7:f7:65:63:14:5c:
8c:8f:b3:66:25:35:44:68:a2:04:dc:16:e0:b3:84:77:07:af:
c6:d5:ac:0b:ff:98:77:86:1d:cf:4b:c8:e1:6f:9d:8e:20:57:
5a:d5:d7:6a:b1:e7:31:e7:f6:84:99:f3:e6:80:a3:a3:dd:11:
0a:a9:39:8c:e9:39:ea:50:55:2a:2d:6b:a5:5f:1c:9f:a8:6d:
29:ef:9a:cf:2e:ea:29:d7:e6:bc:31:ae:98:67:df:c6:0b:e4:
d0:3b:62:23:b2:78:52:69:e5:ce:eb:f7:21:a5:67:9c:ea:0d:
e6:e8:3a:56:b5:5c:25:97:c6:c5:b0:6b:06:cb:00:5c:2e:52:
2d:f7:f6:60:f8:fa:47:75:5a:6d:fd:d1:ab:de:ba:57:14:16:
d9:3c:7e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6VDdP8RzipyASoBKOIlXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh
YWUxNGYwHhcNMjUwNjE2MjAwMDI4WhcNMjUwNjE3MjAwMDI4WjAzMTEwLwYDVQQD
EyhhM2JiNWY3M2NlY2NmNDgwYjE2YWM4ZWJhMjRlMTU5ZDhhNTI4NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj5PeOFVkj3E+sOd2gChTc151qj+
/XAAhhN0dLOLZi+EvpxkSQxH4513eUtAYwNJjWFhTSzHUMSNITXHY6sv6HENeEqN
cvC7ytbical+r3/fcU0Y/PljMLDtLyXDnE1McPs0ZP8gVh4Aj6eTJxptLW7wWqb3
Vyro0RX4V6XrjcFXDwKs4Y8ZSyWwVVV55Ve4ACtsC6GFILLF1/jeM8bHE1Hd+/k/
fbS7Ni+FFovHDyZsU7zw1l+3ut3vcyRXQ0YrwsOb5h+LiK3YdXz9mNL+wWa5k1AG
WBcgQkTMm/2fHQAiaJNDWKXoROMdqiMlZMSY0eeek6gxfpusLv3yJjYxCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKO7X3POzPSAsWrI66JOFZ2KUoUCMB8GA1UdIwQY
MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct
ZDRmMTJiMzdhMzE4LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4
LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtStmGoS
k8FsZFhTWDLANmlJlPGrFttd/BH0CP4GkJjSQ3qUHkQG1/9R+JGpDyeAzHsdvR40
kf8UKkdmLTPyzBGnTi7FxdAdGxNXMFLZoA6JpMWjV2yU0WRt+mbbFrUZrplEN1re
p/dlYxRcjI+zZiU1RGiiBNwW4LOEdwevxtWsC/+Yd4Ydz0vI4W+djiBXWtXXarHn
Mef2hJnz5oCjo90RCqk5jOk56lBVKi1rpV8cn6htKe+azy7qKdfmvDGumGffxgvk
0DtiI7J4Umnlzuv3IaVnnOoN5ug6VrVcJZfGxbBrBssAXC5SLff2YPj6R3Vabf3R
q966VxQW2Tx+MQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:12:25 2025 by rpki-client