Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: 6ZpDFuXO9zbFacItCfo55DEq9a7VIZigGw1Fc6+2pIU=
Subject key identifier: 7F:6D:1F:A4:A9:3E:26:F1:8F:F7:C8:9E:17:73:F1:7B:46:AE:49:E6
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019885B18F46127BCE54A1A8B36C167F515D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0EB5
Signing time: Thu 07 Aug 2025 18:01:02 +0000
Manifest this update: Thu 07 Aug 2025 18:01:02 +0000
Manifest next update: Fri 08 Aug 2025 18:01:02 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: 2YlWytFC/eOg6ROQvBswXu3KBDL5RL5E460JiNXUd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:8f:46:12:7b:ce:54:a1:a8:b3:6c:16:7f:51:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Aug 7 18:01:02 2025 GMT
Not After : Aug 8 18:01:02 2025 GMT
Subject: CN=7f6d1fa4a93e26f18ff7c89e1773f17b46ae49e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:84:74:61:48:46:d7:f0:fa:99:80:6e:b4:
e2:2d:ce:26:fb:99:24:7a:77:8c:08:dd:9c:1b:4d:
6b:67:c9:b4:29:78:07:aa:07:5f:13:43:db:8b:e7:
8c:11:48:8b:80:ed:b4:19:47:64:ff:34:5c:78:4c:
ab:4f:51:92:72:b0:e6:7e:c9:7d:9d:fb:9e:43:10:
3c:4d:2e:1d:55:8a:be:4b:bd:7c:3c:9b:ab:ba:2e:
ea:85:fc:75:5d:85:1f:47:02:39:22:19:96:c4:fb:
b2:71:1b:b3:3b:dd:2c:7e:b3:23:8a:0a:7d:45:d2:
a4:c2:05:87:38:f9:c9:78:ab:31:f0:92:69:59:cc:
18:bb:11:95:a3:a2:41:04:aa:65:14:86:06:36:8f:
e9:96:68:bd:bd:de:75:94:e7:91:37:9b:1c:c4:7f:
fe:22:29:65:bc:44:48:ed:57:31:7a:5a:27:7a:6d:
4b:c9:4f:db:ca:6b:36:50:3c:e9:c4:7c:95:ca:dd:
24:45:be:6f:50:ce:14:c6:b8:18:26:ff:7d:7e:9b:
91:65:cc:ee:12:b0:bd:9c:5a:a8:8a:b0:2d:eb:c0:
88:1e:a4:62:e2:3b:78:ec:7e:cf:88:a7:c8:ad:06:
5b:7f:61:af:ac:c8:2b:ad:86:ed:d3:7e:15:46:13:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6D:1F:A4:A9:3E:26:F1:8F:F7:C8:9E:17:73:F1:7B:46:AE:49:E6
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7f:62:aa:d0:67:23:08:64:e9:9e:9b:ca:63:17:92:ce:76:
30:aa:32:68:97:16:0e:ae:31:52:0f:f6:d7:70:b3:1e:02:2d:
dc:a3:f3:3e:fe:4e:0c:36:d2:2a:e8:37:00:e4:6b:46:7a:20:
9e:a8:02:bc:d6:bf:6a:f9:c3:fb:91:89:64:04:b8:58:d2:af:
d1:e8:76:ed:1c:8f:28:37:e8:d8:a2:41:58:58:6d:be:ad:50:
f4:df:ff:30:49:64:9c:c3:62:c8:b3:0f:09:63:a2:67:9e:ad:
91:6a:42:91:0b:fe:f0:bf:7e:f1:7b:1c:f0:7f:2b:8c:1a:74:
9c:7b:e1:23:b3:d5:da:35:27:54:dd:92:40:10:85:ad:8d:87:
e1:94:74:2e:fb:22:87:21:be:b1:b8:e3:d6:c4:c8:c7:2b:c7:
2e:53:a0:de:43:14:e2:8c:1a:60:cb:45:70:ad:4e:63:c8:4d:
4a:24:21:4c:e2:3c:fe:45:56:2f:fe:28:90:e9:12:e7:8a:2f:
01:d1:2f:43:34:53:60:3a:a5:86:34:d3:8b:3c:5c:e8:aa:2e:
be:06:77:bf:62:23:24:e1:25:6f:95:d3:1f:89:5c:dc:68:a5:
6b:8c:4c:b4:c8:22:1a:ad:65:db:99:fa:1c:05:c2:8c:a5:b2:
dc:28:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:41 2025 by rpki-client