Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: IHDtXc/FdZPUfcJlGdbbB47ozUGDG9YUyWWAB0Zmnx0=
Subject key identifier: 8F:49:F4:B3:CE:8B:E1:4B:8F:2F:E1:2A:FF:B8:5A:6E:C2:C4:FA:AA
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 019872CF75A15256C27419298FFFDB4EB3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 02:00:55 +0000
Manifest this update: Mon 04 Aug 2025 02:00:55 +0000
Manifest next update: Tue 05 Aug 2025 02:00:55 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: dPe2uq9c/scFSIW3qx1S99eMijxa0gLQQIZOwm4DPQc=)
2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:75:a1:52:56:c2:74:19:29:8f:ff:db:4e:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Aug 4 02:00:55 2025 GMT
Not After : Aug 5 02:00:55 2025 GMT
Subject: CN=8f49f4b3ce8be14b8f2fe12affb85a6ec2c4faaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:9b:6a:94:f4:1f:8b:4c:98:db:0c:d7:44:
1e:d6:7e:fa:95:98:79:2c:3d:72:74:c1:39:a4:90:
48:68:48:45:d2:b2:d5:39:d4:99:19:14:0b:dc:4d:
f0:cc:e9:58:84:86:5b:fd:e2:1c:37:90:14:0c:e0:
61:4e:2f:27:f1:cb:64:46:07:74:8e:90:bf:25:16:
b5:3c:1a:a2:b8:3f:57:eb:e2:e6:f2:10:3f:c2:bb:
1b:5b:b5:44:c1:e7:ab:ad:95:0f:00:1c:b6:be:1f:
06:a4:fe:c5:0b:24:97:39:2b:5c:b8:06:fc:89:81:
2a:60:00:4d:3e:06:4f:ce:da:24:b5:fa:f8:49:84:
53:f3:aa:a6:4d:ba:f3:a9:2e:b5:7c:6c:77:f6:fa:
77:74:3d:d9:3b:3e:fb:bf:5e:88:7d:24:9f:4e:34:
c1:05:bd:05:6c:5b:5b:17:29:1f:1e:ec:eb:7f:cd:
76:af:5a:55:ae:0c:12:43:b7:51:ab:4b:48:43:57:
89:bf:12:c1:79:c0:41:94:71:89:e6:ec:83:53:2b:
1a:0c:8f:11:04:44:d4:3f:97:37:e3:b4:c3:d8:ac:
94:64:ac:b3:63:e5:e8:f0:2c:bf:e5:d4:26:ae:e1:
dd:76:14:08:00:81:e4:0f:84:f8:a0:df:5f:69:46:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:49:F4:B3:CE:8B:E1:4B:8F:2F:E1:2A:FF:B8:5A:6E:C2:C4:FA:AA
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ce:c2:c5:28:2b:1d:34:94:65:0d:e8:61:77:64:ad:ab:a9:
5f:67:63:fb:e2:fd:0f:e6:55:eb:3c:69:d6:f9:59:95:88:26:
6b:7f:e6:1c:c8:43:70:2c:04:eb:58:6a:89:b8:76:89:d5:97:
11:ee:38:e3:f7:ec:07:63:a9:11:e2:03:3c:90:52:ef:b2:50:
fe:22:c1:0e:ac:a4:cc:59:2d:e8:19:ad:96:43:5a:3f:cb:f8:
4b:52:ed:6a:48:ee:da:28:9a:13:8b:74:9e:3b:49:53:97:ec:
49:fc:a0:b8:26:74:fb:4f:e0:38:bb:14:7c:88:67:36:ba:ea:
9a:1b:31:fd:dc:a6:fc:4e:70:76:35:6c:12:08:af:bc:01:09:
61:f6:6b:90:0f:f7:41:c0:b7:b8:38:fb:d9:60:bb:9f:e2:b8:
7b:12:bf:f3:09:2b:cb:b5:2c:58:e2:98:a8:e7:ba:55:2b:5c:
b2:3b:c0:e5:e5:14:1b:a4:a3:ce:46:4c:20:7b:9f:10:14:11:
85:88:f2:e9:93:e4:16:6d:70:90:a9:a0:22:f7:67:cb:f4:f7:
fa:73:ca:87:de:28:ac:00:e2:35:b0:18:b8:93:dc:ba:9d:54:
80:76:25:cd:4d:86:46:90:82:2f:c9:33:d9:74:20:cf:af:e5:
03:cf:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:24 2025 by rpki-client