
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json)
Hash identifier: wtrlxx5HAnO8yTOzCmgKH+1lSXHNDqPGarqIHMggABM=
Subject key identifier: 6D:F2:C3:CF:4E:59:4A:05:DC:45:48:10:6F:0D:AF:A6:11:97:E7:0F
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial: 019875D0D272042C2823A3F85801E9F77547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
Manifest number: CD
Signing time: Mon 04 Aug 2025 16:01:16 +0000
Manifest this update: Mon 04 Aug 2025 16:01:16 +0000
Manifest next update: Tue 05 Aug 2025 16:01:16 +0000
Files and hashes: 1: I32dN6KwFoewNSfpS4XBjG5myXU.roa (hash: PHYrnIWI7dP/AROY19OnK6Q0ENbOWp8OyZchyzmlbds=)
2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: ZgpDXWhU2mdEo/qKB0T/P8CjNYZB9HaCSPEiVT3S8Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:d2:72:04:2c:28:23:a3:f8:58:01:e9:f7:75:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
Validity
Not Before: Aug 4 16:01:16 2025 GMT
Not After : Aug 5 16:01:16 2025 GMT
Subject: CN=6df2c3cf4e594a05dc4548106f0dafa61197e70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:e5:72:4c:28:41:53:b8:02:5f:24:6e:ab:
9e:af:23:d7:04:aa:f0:0b:0f:58:b3:68:84:2e:f8:
e1:c7:4a:cb:1a:68:ce:d5:e0:32:fe:23:51:85:b1:
ff:58:ee:60:b8:5f:1d:80:63:14:52:0a:1e:12:2e:
b3:78:1f:26:35:df:83:32:27:7b:2d:8f:ca:4d:c9:
66:fb:02:07:ba:f9:37:49:99:d6:8d:95:78:f9:52:
2b:fa:8c:f3:ac:93:2d:5b:2b:68:93:7c:84:55:82:
b8:a4:b0:92:3b:f1:d2:2a:f6:5b:a0:bd:32:27:af:
c5:71:d0:35:56:d5:53:4d:ed:a8:49:24:aa:c8:bf:
2e:26:ca:64:05:e9:84:f7:14:00:0a:b0:18:27:9f:
d4:52:bd:e0:78:fe:66:f7:b4:af:44:d3:b2:e7:4f:
a1:85:c9:6e:90:2a:23:62:4b:62:56:ba:07:49:7e:
c9:c0:33:82:bb:fd:22:36:40:75:ae:9b:6f:79:9f:
d4:7c:5d:69:50:9c:c4:d0:15:9c:0c:dd:3d:59:50:
c6:fb:72:af:2e:65:68:00:f0:93:00:cd:24:72:8a:
2c:3b:37:5c:54:9b:93:81:e1:6d:3a:a3:42:6c:9e:
d4:cc:5e:8f:69:9e:db:06:8d:cd:a0:56:62:ec:82:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F2:C3:CF:4E:59:4A:05:DC:45:48:10:6F:0D:AF:A6:11:97:E7:0F
X509v3 Authority Key Identifier:
keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:28:e2:07:6a:79:29:52:02:b7:9c:b5:fd:8d:71:09:47:fd:
9c:af:d6:1a:98:b5:69:9d:64:c0:cc:4b:1e:75:3c:56:ae:9e:
58:d1:5f:b0:cd:ee:27:5e:22:fb:0c:a6:cb:ff:dd:7d:a0:f2:
b6:94:4d:64:27:a4:63:67:00:c6:71:0c:de:cb:a8:c6:da:89:
ba:8d:ff:39:18:11:ba:ba:2d:ca:33:7c:94:aa:46:b0:1f:1c:
2f:07:b1:f0:f7:43:c4:a5:23:5f:9b:b1:5b:71:6e:9e:e4:22:
db:d8:b7:07:73:ba:da:2f:5c:39:b6:37:77:9e:79:d8:5d:03:
4b:5a:a3:72:1b:00:4c:b7:15:f6:b7:3f:d8:53:79:4d:f9:04:
c3:80:f3:fb:90:a6:29:78:ad:af:a6:5a:85:6e:17:a4:78:56:
85:a7:31:29:45:76:08:fb:13:c8:1a:79:ec:42:88:5b:d8:cd:
14:92:6c:7b:23:83:88:e5:f3:b6:01:05:26:dd:0d:fe:00:d4:
62:5c:b2:1d:ac:db:15:c0:19:27:84:0b:fd:8a:c2:c3:6c:39:
ea:fa:25:13:78:7a:05:5f:38:70:89:d1:77:d9:d9:61:fa:ab:
4c:86:22:7a:8e:39:c8:ef:c0:25:26:cf:b4:8e:8c:61:01:ce:
1b:11:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:20 2025 by rpki-client