Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: C4sGZtUznF1N9i2Z+1mrA2ewfSfRrK6WlrUyR8w+sCY=
Subject key identifier: A7:C8:FC:6D:28:5C:53:4C:EA:7D:79:1B:EF:FF:FD:BB:6F:5E:FF:BE
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019849D2ECA2DFA0E65D81A31865B61441F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 03:00:16 +0000
Manifest this update: Sun 27 Jul 2025 03:00:16 +0000
Manifest next update: Mon 28 Jul 2025 03:00:16 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: LyFOQ3J/CHmu3Wv9TL0ABLw+uUgixr7xHIX9w2wLddk=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ec:a2:df:a0:e6:5d:81:a3:18:65:b6:14:41:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jul 27 03:00:16 2025 GMT
Not After : Jul 28 03:00:16 2025 GMT
Subject: CN=a7c8fc6d285c534cea7d791beffffdbb6f5effbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:16:0b:60:ec:82:78:ec:c1:f1:0f:38:7c:
fc:e4:ab:e4:f8:15:a3:94:2b:79:12:25:e5:e1:10:
05:7f:1c:aa:5f:df:0c:db:26:b4:25:c8:b9:e1:ac:
78:9e:6f:d6:a0:46:f4:48:d1:1d:5b:b9:c3:32:39:
c3:31:64:4e:90:5d:01:7c:bb:66:2b:85:17:0e:bb:
8e:38:34:51:70:98:1e:a1:f9:8a:f8:a1:2b:a6:81:
dd:e3:ee:5d:9a:76:67:f0:e6:8a:e3:90:99:dc:bb:
9c:cb:b0:dd:3a:b8:51:c7:eb:a6:4e:c9:4e:bd:66:
1f:02:2d:85:b6:02:79:08:29:88:9e:49:c4:0e:5a:
73:20:c9:70:bc:0f:aa:c4:a6:6d:37:4f:75:c1:8f:
cc:fd:b5:7d:df:2b:41:da:7b:cb:1c:44:00:57:08:
a1:cc:19:e8:b5:e2:94:7c:20:00:76:3e:90:25:bf:
e8:1e:96:3e:ac:53:10:03:de:31:ed:11:b7:d5:ad:
f7:2e:6a:24:f7:fa:db:0f:7b:82:2c:69:f6:13:05:
29:ef:e2:83:ee:20:73:2e:1c:9e:9b:82:35:7c:27:
a4:32:04:f3:5a:28:e4:df:f7:fc:57:94:67:70:ca:
ec:1a:30:a6:0e:4f:6c:62:5a:e7:98:33:77:2e:2d:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:FC:6D:28:5C:53:4C:EA:7D:79:1B:EF:FF:FD:BB:6F:5E:FF:BE
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:d4:58:8b:40:c2:b8:00:fe:3e:c2:88:82:6b:d4:62:c8:
c3:9c:bd:43:0d:42:a9:58:67:d3:ae:fa:af:95:dc:d2:23:97:
f5:3c:40:52:de:7d:bb:3d:eb:e2:b9:27:ae:2e:44:53:8c:a7:
2a:4f:78:63:18:45:e7:99:fb:1a:6a:91:cc:21:4e:66:c8:fe:
a7:29:48:bb:ee:af:19:72:1b:2b:08:0c:e8:fc:1a:16:3a:d3:
36:7f:e0:13:8c:81:86:6c:e8:83:4e:2e:a0:16:46:c7:41:16:
00:46:1c:80:b6:05:df:bb:eb:80:ac:2a:e9:bc:c4:0a:9f:a6:
13:85:c4:f8:f6:26:a6:ae:86:c8:7d:8b:db:cc:00:86:20:79:
27:02:eb:cb:fd:f6:4f:9f:d1:b5:97:03:48:0d:86:11:3b:09:
e6:81:bf:d8:fc:0d:17:42:d3:91:c2:ac:3f:47:c2:27:22:d7:
7f:8b:c5:6f:26:36:7a:a1:ba:5a:dc:60:a8:10:bb:ac:6d:41:
6c:7d:1e:ac:06:66:75:7d:c7:d4:d8:b8:c0:0c:66:4d:17:4e:
14:d7:34:bb:a8:31:49:3e:9e:8b:a2:f3:b2:61:20:b8:82:c2:
ea:0b:77:8f:04:6f:c0:a6:f2:ac:b5:f8:2a:d5:3f:50:f1:34:
29:fc:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:07 2025 by rpki-client