Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File: s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier: eyuosnBwEOPqG/c/yuYd58mnqUmi+INan4k/BQtfZTQ=
Subject key identifier: 7E:7A:8E:52:0A:B6:79:A0:8B:04:5B:FE:A9:81:4E:C2:A5:99:19:99
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial: 01987DC09C4F01429393D5817784929055D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 05:00:31 +0000
Manifest this update: Wed 06 Aug 2025 05:00:31 +0000
Manifest next update: Thu 07 Aug 2025 05:00:31 +0000
Files and hashes: 1: mD7Z7YeNOfK8jp-WeYlQt4uS5Qk.roa (hash: foJEvw+8/1mri1uVePD4Fo8lgGoj9wOcsREdvsruLoI=)
2: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: agBn5IqrMRQzrEUdWhrjvcZVfJQw2iirDZnEGeAKa+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:9c:4f:01:42:93:93:d5:81:77:84:92:90:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Validity
Not Before: Aug 6 05:00:31 2025 GMT
Not After : Aug 7 05:00:31 2025 GMT
Subject: CN=7e7a8e520ab679a08b045bfea9814ec2a5991999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:74:9c:5d:0a:82:7a:8c:d7:c8:1d:8f:33:
85:f4:18:ca:76:69:6d:05:18:47:56:a2:33:67:e0:
8e:a2:c0:04:cc:8a:bc:99:13:e2:3e:b4:9f:d5:10:
c2:7d:3e:2b:77:41:bc:31:33:a0:9c:3d:3f:b4:8b:
2a:e3:63:5d:83:07:ce:0d:94:4e:72:bf:83:92:48:
33:d4:45:2b:7d:98:2b:29:14:6a:06:31:d6:40:b6:
3e:ed:2e:d3:13:07:36:f4:08:4a:dc:b5:29:ac:2c:
3d:17:3e:9a:03:8a:23:52:ee:d3:a4:73:ae:b5:90:
6f:b7:2c:02:b8:fd:1a:6d:05:bf:30:ec:32:ce:dc:
05:d5:d2:de:7e:bb:46:00:4c:df:08:1b:78:99:51:
7f:27:b2:8e:06:c3:d4:1f:9d:96:a2:c0:07:1f:9a:
18:77:fb:e8:45:3c:fe:ff:9e:22:50:64:5d:65:e3:
27:41:e6:3b:ae:6e:5c:f2:1a:90:b8:7b:9e:5d:65:
c9:4f:e9:47:bd:db:d2:f9:62:50:84:f0:23:ab:87:
8d:d3:e8:69:b6:28:88:91:97:95:9a:7d:28:d7:ec:
0f:13:5d:bf:83:ce:82:0c:4a:2c:89:5e:90:07:85:
ac:f1:0f:0d:a4:cd:94:44:de:4d:b3:6f:67:7a:72:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:8E:52:0A:B6:79:A0:8B:04:5B:FE:A9:81:4E:C2:A5:99:19:99
X509v3 Authority Key Identifier:
keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f2:f6:af:c6:1a:b8:51:a6:da:70:c3:6f:c6:b0:b4:c0:5c:
1a:f6:58:c5:13:68:1c:f7:58:64:ee:69:d1:72:44:14:ed:d2:
59:6e:ed:75:95:de:48:55:55:f2:c7:a5:75:a9:08:e1:d5:10:
42:d1:60:8b:16:90:c9:57:94:17:95:d3:16:d7:21:99:b3:7f:
87:b2:ee:18:ba:3e:82:e6:ab:47:67:a1:40:65:e1:ca:1c:bf:
76:16:86:64:f9:2d:32:dc:74:6e:cf:67:0e:59:44:df:46:ee:
e1:eb:e8:50:5b:7a:e1:ab:27:a0:da:06:bb:31:22:1e:67:09:
10:e2:22:07:ea:7c:f4:dc:08:66:63:d4:9a:f8:7d:f5:64:eb:
90:3e:2b:5c:05:55:e4:53:a8:e6:12:36:8a:de:7c:27:d7:f7:
bf:69:7b:55:c5:5a:bc:dd:b0:0a:22:79:8f:28:47:f1:c9:1b:
68:c5:5d:11:bb:4d:a9:1f:58:49:ec:4b:43:40:13:93:fb:0a:
e0:ba:c1:62:4d:64:41:1a:b3:25:67:a7:8c:01:14:4e:68:94:
ad:a0:ae:7a:fc:8f:9b:0b:fc:80:e2:a1:39:1e:96:40:80:17:
51:70:94:f7:a0:5f:61:ea:a3:a3:e8:e6:36:43:ad:bd:71:f7:
c0:09:42:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:17 2025 by rpki-client