Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: TBVeKiWhB5E3eb820j08mzGjoAh9cY48j09BWskE/eo=
Subject key identifier: 83:84:66:99:7A:94:E9:C7:AD:7E:E7:2C:67:89:93:C0:21:16:CF:06
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019880F91D604E8AB9A93E26B5328DC44128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 20:01:06 +0000
Manifest this update: Wed 06 Aug 2025 20:01:06 +0000
Manifest next update: Thu 07 Aug 2025 20:01:06 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: IbOmI8kxVQgQ7FGNvYqZZLRVFr8SprXykB5Ozub6u/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:1d:60:4e:8a:b9:a9:3e:26:b5:32:8d:c4:41:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Aug 6 20:01:06 2025 GMT
Not After : Aug 7 20:01:06 2025 GMT
Subject: CN=838466997a94e9c7ad7ee72c678993c02116cf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:99:5e:35:70:4e:d6:71:4a:14:1b:4f:87:
0e:89:cc:8e:03:ed:a5:de:99:d9:d4:7d:dc:69:94:
db:83:4e:04:e0:f2:1c:6d:04:92:9e:fd:83:12:21:
30:36:3e:05:34:80:05:30:23:e5:b4:56:4f:37:c0:
d9:f6:64:0b:95:bd:b3:0f:b3:d9:a6:e1:6f:3c:25:
fd:fc:64:a2:f5:50:df:de:2a:b5:a4:9c:b9:ec:18:
df:24:d3:0c:14:f4:7c:44:26:36:f4:d6:39:f4:dd:
5e:b5:bd:52:0d:76:87:32:f9:75:b0:ee:c9:d2:11:
7e:f2:71:48:b4:9b:bc:e1:2d:fa:b2:cf:9c:bb:1f:
6e:56:25:10:3e:00:6e:bd:eb:7c:88:40:b7:e0:a4:
8f:27:80:f1:03:b8:a4:46:b8:db:61:10:f4:db:a6:
d8:67:db:84:9b:53:13:d5:14:d8:a5:24:ee:84:35:
8f:a1:c9:14:30:26:77:e3:75:42:d8:33:a1:a3:4a:
c6:82:09:e6:58:7d:57:65:d6:d0:35:61:1b:cd:8a:
c4:8c:98:7c:a6:fb:8f:7c:96:ae:22:f6:7f:1a:72:
6a:fb:63:63:7a:45:8d:07:b7:a8:ce:a4:5f:57:af:
3f:cc:27:f6:e1:4c:9b:75:89:18:00:b0:44:db:22:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:66:99:7A:94:E9:C7:AD:7E:E7:2C:67:89:93:C0:21:16:CF:06
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:04:68:e2:91:8f:2b:bb:c1:c7:a7:5f:69:79:e0:9c:21:fe:
48:48:40:9e:0d:c5:61:1d:69:b2:27:98:98:1a:88:a2:f7:c5:
70:e1:80:70:e5:5d:33:c4:ab:eb:4c:13:5d:71:ad:41:0b:17:
4e:d2:78:9f:8f:a4:85:f9:44:71:6a:16:27:c5:0c:c6:d6:50:
5f:8c:c7:44:cc:10:12:62:67:1f:63:59:ba:22:0e:ac:94:82:
1c:51:a1:aa:8e:ed:ab:13:dc:1c:58:81:df:82:69:6d:33:8d:
92:35:8b:ae:6d:6a:51:36:c4:5c:c1:a3:68:1f:65:34:95:f4:
47:2a:40:12:37:65:f7:97:8b:6d:90:f4:02:a0:0e:f9:ff:6d:
89:f8:86:d9:db:cc:62:d8:2f:f6:92:f1:22:f3:32:8d:a5:ee:
b4:3f:c8:ed:f7:0b:c4:32:bc:e0:0b:35:bf:36:1d:96:ae:0a:
13:27:c6:68:d0:e6:62:e3:40:e0:be:84:88:a6:88:70:ec:c5:
6c:2a:56:5f:8d:68:4c:e8:40:57:45:d1:e5:16:22:54:f3:2a:
21:6f:95:69:c3:58:8f:30:09:19:51:ea:98:63:20:0f:10:d9:
b5:17:14:57:48:f5:bc:b4:a0:1c:a9:a3:28:12:ad:8d:a6:a7:
4d:79:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:09 2025 by rpki-client