Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: 5JxEDj2jp5Mi9RKCGvO4Oo/5WqTYTiCfDWpbMK/VOms=
Subject key identifier: BE:29:85:24:61:A4:57:99:6B:27:67:25:F6:76:AC:1B:62:24:ED:58
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 0198838C92222736ADEB4A0BDF37E19DC5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0ACE
Signing time: Thu 07 Aug 2025 08:01:24 +0000
Manifest this update: Thu 07 Aug 2025 08:01:24 +0000
Manifest next update: Fri 08 Aug 2025 08:01:24 +0000
Files and hashes: 1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: pgcP82MsWZTztEdIqPmPRmKkJJ9T2IxXhot1HSo1fw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:92:22:27:36:ad:eb:4a:0b:df:37:e1:9d:c5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Aug 7 08:01:24 2025 GMT
Not After : Aug 8 08:01:24 2025 GMT
Subject: CN=be29852461a457996b276725f676ac1b6224ed58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:9b:6b:9a:56:f7:b2:30:e4:99:4f:84:30:
7d:e8:b1:35:c4:85:32:93:a4:24:90:e3:16:91:7e:
d0:48:7a:15:b2:0c:d2:b0:1c:f4:ef:5a:57:c4:9a:
52:f7:8c:96:71:da:82:62:97:95:bb:fe:c2:a8:59:
25:cb:92:1e:37:89:58:36:ca:7b:65:5b:de:ef:9c:
03:22:e1:9e:a3:a7:f3:7a:a1:e3:17:74:46:33:78:
03:d7:32:39:cc:b4:83:35:26:19:0f:96:60:17:f3:
30:af:46:42:b8:a1:22:05:b4:5a:25:34:4a:24:f4:
69:00:73:da:17:54:25:91:f0:cc:b5:53:3e:be:ae:
59:05:10:b7:df:97:6f:f8:e3:8f:8e:9c:90:d5:f1:
66:46:ee:0e:2b:5f:a2:88:16:5a:22:60:ac:2c:8d:
6e:e1:c4:54:b9:39:5b:2f:ba:2b:c8:0e:50:42:01:
2c:7a:86:3f:98:6d:4e:b7:bc:5c:5e:d5:16:0f:b5:
91:9e:f7:f3:8a:32:56:4a:b4:96:06:fa:93:85:39:
c5:6d:2c:06:23:ff:fb:6e:92:12:7d:be:30:7a:50:
b1:e0:4a:7f:21:5d:57:19:71:24:1f:26:9c:30:d7:
3c:7e:21:1c:19:68:0e:b8:b2:f8:81:70:5f:c2:5b:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:29:85:24:61:A4:57:99:6B:27:67:25:F6:76:AC:1B:62:24:ED:58
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:26:f5:97:84:5c:c9:12:f9:ce:44:8e:27:39:f2:bf:65:1a:
ba:f8:01:9c:f0:dd:a2:74:d3:d7:8e:57:55:82:70:43:76:b7:
a4:e0:42:e1:40:29:9a:6b:e3:b7:fa:7e:9e:18:af:b3:58:67:
4c:0d:9b:10:04:61:5d:a7:38:b7:48:a0:fa:ee:c0:ab:e3:b6:
05:e9:cb:d2:c0:2b:a5:01:10:38:b1:bd:63:1c:1d:fb:66:51:
e6:fa:2d:0d:10:4c:1c:59:3f:a6:f1:01:67:27:d1:dd:5e:b6:
2c:a5:21:f7:de:11:32:e0:1f:be:08:23:65:2c:2e:b4:84:7a:
2f:f5:71:ea:28:47:c7:28:59:32:20:e0:fb:03:b6:c2:5d:3a:
1a:32:4b:c7:cc:fa:b3:84:51:3c:60:c9:ed:3b:f8:42:df:db:
bc:50:cd:5c:23:be:87:8e:73:6f:05:04:bc:4c:f2:ee:42:a2:
08:93:6e:ba:3c:ac:a2:8c:97:43:3c:02:65:5e:73:24:7b:af:
bd:42:68:55:9f:73:7f:3a:c5:b0:5c:56:dd:5d:0b:20:ef:ac:
39:5a:27:60:fc:fb:e9:8f:bc:5f:48:b1:c4:58:5b:79:ce:46:
d8:ee:a3:d5:6e:a3:53:2d:a2:d0:bd:9e:69:7d:0f:62:cf:58:
3a:27:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:44:47 2025 by rpki-client