Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: nznhsujWsf7ldze0HimP9/8erSA2LIDccDVTqFpfCAU=
Subject key identifier: 5C:4B:54:39:7A:23:16:15:39:2B:03:AD:35:D3:E0:73:70:34:FF:4E
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 0198744FC508D3570BEB110588BE95EC1B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:00:41 +0000
Manifest this update: Mon 04 Aug 2025 09:00:41 +0000
Manifest next update: Tue 05 Aug 2025 09:00:41 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: H9R2Xh1/l06TGEY4tTCBgGacmrs+W3HobCjHJow2Hjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:c5:08:d3:57:0b:eb:11:05:88:be:95:ec:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Aug 4 09:00:41 2025 GMT
Not After : Aug 5 09:00:41 2025 GMT
Subject: CN=5c4b54397a231615392b03ad35d3e0737034ff4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:90:d9:dc:11:01:59:9b:98:2b:95:8d:7f:
43:5b:ea:28:84:26:5d:9b:7d:b1:7a:f5:2c:16:eb:
22:04:68:b3:a3:02:b4:27:2f:45:de:dc:c8:63:81:
5a:57:cf:7a:d9:1e:54:dc:9c:83:5f:29:32:55:73:
ff:e4:d6:66:81:a2:2f:56:d7:0b:bc:91:ff:8c:a4:
5e:6c:e7:07:2f:e6:53:a5:2b:9a:56:94:8e:4e:93:
2a:b0:d1:c6:03:1e:1e:db:e9:0e:ce:75:31:e8:c3:
5c:55:5e:b1:3d:86:fb:23:4c:07:76:d0:c5:05:ce:
42:dd:ff:b8:76:7a:48:6e:fe:dc:d5:c0:15:9a:13:
80:b8:ab:1d:c5:cc:45:88:c1:1a:a3:66:5e:5b:e3:
44:b5:ff:eb:f1:8d:fe:4d:84:71:dc:45:a0:e6:20:
1c:4b:0a:25:10:fa:92:67:49:08:d3:78:fa:b0:b1:
7b:10:e8:11:a6:f2:08:12:41:e1:5a:48:ae:8a:59:
bc:71:48:25:51:82:1e:2b:1c:89:33:b3:01:4c:58:
36:9d:af:86:78:01:cc:6e:d3:ff:c3:d5:ae:0d:a0:
12:ad:a0:7f:ec:5b:38:17:2c:1b:6e:8a:03:b0:b3:
2e:99:18:6c:ee:70:49:ba:81:32:89:2e:d0:bd:d8:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:54:39:7A:23:16:15:39:2B:03:AD:35:D3:E0:73:70:34:FF:4E
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ab:09:e0:ae:44:72:da:1a:6c:e5:bc:22:37:3a:3c:d0:20:
09:85:4f:48:31:a0:8a:7a:41:37:d9:1d:19:45:7c:6b:ec:fd:
db:3e:41:11:f4:3b:02:d1:8f:25:fd:3e:3a:c2:9d:1a:d3:27:
7e:42:c1:ed:c8:0a:33:61:30:94:0c:dc:69:7f:49:73:4f:13:
a6:80:e9:54:86:ca:ec:b7:dc:19:07:fc:e5:d1:dd:a6:f3:b7:
60:2c:0e:2a:e3:f8:50:03:57:0e:27:00:20:2d:9a:49:c9:54:
62:58:46:2c:a6:a1:45:59:39:e7:17:e0:54:14:4d:cd:a8:df:
eb:ad:de:e5:88:77:8c:e2:2e:74:de:5f:25:6f:10:90:90:b5:
76:2b:7c:ad:be:b0:e5:b9:2b:43:4e:2c:23:9b:90:49:c1:a2:
3a:fd:66:4e:08:fa:ae:42:6e:8b:9d:cb:b3:1a:83:f4:4a:b6:
db:1b:aa:df:8b:03:9c:a2:c3:8c:fc:43:ed:a1:8c:d8:27:d5:
bb:39:1b:7a:69:ab:54:52:21:8f:26:e8:37:f5:f9:9e:ae:b2:
2d:8a:d3:6d:b6:52:5a:1a:5d:ca:54:6a:eb:05:fd:f6:52:66:
1d:24:8e:05:46:e2:4f:55:67:b3:53:58:a8:fa:e0:91:bc:5f:
79:47:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:11 2025 by rpki-client