Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: wd1If0blOjcacGbcVSbpW7iUHHt7yxe45yviM4S4eUQ=
Subject key identifier: 1D:6D:DA:8E:3D:E2:00:32:40:0E:44:FA:20:A2:A6:3E:CD:B2:69:F6
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 01987306D8EA9DC61D6EE0169D909CC9E734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 03:01:25 +0000
Manifest this update: Mon 04 Aug 2025 03:01:25 +0000
Manifest next update: Tue 05 Aug 2025 03:01:25 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: 573j7hsNksW9ZcPiapTgByTFkPDS6EkKXQUWDLsfZmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:d8:ea:9d:c6:1d:6e:e0:16:9d:90:9c:c9:e7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Aug 4 03:01:25 2025 GMT
Not After : Aug 5 03:01:25 2025 GMT
Subject: CN=1d6dda8e3de20032400e44fa20a2a63ecdb269f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:1f:36:5c:f8:c5:ce:38:6e:20:34:3e:b2:
16:30:d5:b6:f0:36:62:68:19:41:45:7b:2a:8f:ad:
6f:20:7f:50:4e:0b:58:84:ec:e1:e4:65:f0:82:3a:
43:c1:29:a4:10:ec:e1:d4:9e:ac:93:bd:62:95:6b:
d7:dc:f9:a3:9a:e5:1b:52:9e:b9:89:fa:21:c8:9a:
ef:83:18:f3:cb:5c:b4:8d:7e:c1:b9:f0:c0:8a:7d:
04:59:52:67:83:3e:50:ba:da:c4:8c:34:18:81:70:
0c:16:9e:0f:23:0d:22:25:68:30:4d:cf:cc:bb:2b:
09:45:d8:af:c7:df:48:f5:63:b0:50:3e:59:74:88:
69:00:90:b1:c5:4f:de:38:9a:14:43:c5:44:e2:6e:
d0:a0:23:ff:d4:cc:c7:b8:17:b1:e8:5c:23:ff:85:
a2:d6:9a:f0:6a:a4:29:e3:33:a0:eb:f3:83:c6:9f:
1c:b9:25:b7:12:97:5f:21:c2:fa:57:06:65:df:ef:
8c:3a:c4:30:f9:07:da:f0:af:25:29:ed:c0:59:3f:
1a:1d:1e:02:35:2d:9f:f3:52:88:00:39:17:e3:e1:
bf:13:c6:03:77:55:1c:06:cd:e6:7b:f6:91:6c:c4:
73:54:3d:02:2c:98:b1:97:52:0d:f3:b6:b1:c3:48:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:DA:8E:3D:E2:00:32:40:0E:44:FA:20:A2:A6:3E:CD:B2:69:F6
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2e:fb:ba:3e:cf:3a:e9:de:1e:fd:2a:b7:81:69:a8:d9:74:
e3:38:b4:b5:37:82:03:d7:8f:4a:79:21:f5:b8:2a:e5:40:67:
8e:b2:81:55:24:e8:fe:bd:7a:09:66:0e:fb:f2:9d:26:56:09:
e7:1d:1b:8f:b8:8d:4c:a7:5b:a0:ba:85:d2:62:65:93:22:b8:
f8:a0:f3:44:fa:66:b0:16:60:52:40:9d:2b:73:52:0b:dc:a4:
98:1a:5c:a3:62:8b:eb:38:1b:09:da:2d:fc:1b:97:5e:43:ea:
71:5f:78:cc:8e:c5:1a:d4:ed:59:6c:46:a2:bf:27:10:55:dc:
35:0c:c6:5a:13:08:f5:c2:18:fa:0d:33:20:b2:92:fd:16:48:
ca:76:3e:54:49:b3:cf:4f:89:d5:29:d0:a4:23:f5:51:9b:cf:
8d:1f:38:4b:81:4a:84:b4:0d:40:90:71:53:8b:a1:3e:cc:b1:
49:07:3d:76:41:a8:14:56:a9:59:c8:c2:a8:27:c3:1d:d4:a7:
33:70:ea:9d:0d:33:c9:8a:44:1d:83:f4:0f:12:e7:f5:39:84:
6d:c6:9f:b2:6d:de:44:1d:d4:c7:05:2d:f0:ea:8f:f6:2f:1e:
b8:27:f7:56:ea:af:49:8b:02:a9:a4:5b:40:7f:05:6c:8d:36:
fe:6c:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:46 2025 by rpki-client