Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: ZAHc1/e+jFLHzu11zP3/ffSe/haCA5t0HMaSNkKqUY4=
Subject key identifier: 8A:E7:CC:95:FD:0F:26:16:B6:5D:72:E5:3D:87:EC:D0:58:B2:37:56
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 0198499C14279C3EE33128161549F977E27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0D71
Signing time: Sun 27 Jul 2025 02:00:22 +0000
Manifest this update: Sun 27 Jul 2025 02:00:22 +0000
Manifest next update: Mon 28 Jul 2025 02:00:22 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: KSrp7nuF9FhU5rNQI2uGLxyvQHBvZzB4uVu7vfptFsU=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:14:27:9c:3e:e3:31:28:16:15:49:f9:77:e2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Jul 27 02:00:22 2025 GMT
Not After : Jul 28 02:00:22 2025 GMT
Subject: CN=8ae7cc95fd0f2616b65d72e53d87ecd058b23756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:35:6e:5a:07:ef:34:00:03:b6:45:fc:5a:
72:72:31:e1:6f:24:6a:01:7a:dd:bf:61:07:9c:5c:
f6:07:41:6a:ed:5a:6a:f2:b4:29:3d:57:b9:1b:7c:
89:f8:ce:05:78:2c:fa:ae:45:12:52:dc:05:0b:ff:
76:ef:1d:cb:ab:ba:8f:59:41:f2:8c:48:49:6a:4f:
5b:e8:9d:6d:1e:92:98:8b:94:b7:24:bf:49:b6:df:
40:15:9f:33:62:66:5a:24:3c:60:de:87:f3:64:cc:
32:31:fb:39:0f:d0:c0:b1:14:00:98:51:f4:99:85:
7f:76:a3:f8:50:2c:ec:8f:2d:cb:03:9f:14:98:78:
6b:90:7a:22:30:ce:4e:d1:0a:5b:4d:a3:1e:2f:2d:
f2:27:6b:5f:bb:aa:79:85:1c:27:7a:b9:a1:34:08:
fe:0b:7b:7e:b2:c3:83:a8:32:a4:39:b2:87:78:e6:
3b:de:7c:a4:5a:be:1b:8a:11:a5:3b:b5:95:31:85:
e1:d5:8b:1d:65:5d:97:fc:e7:32:e3:bc:7c:f0:f6:
e6:a8:9a:0d:b3:d5:d8:d1:5a:35:6a:42:aa:38:3a:
84:f7:c4:c9:0e:64:e4:0f:20:48:14:33:be:50:48:
f3:62:1d:85:50:09:0b:c0:b4:f1:91:12:c3:4a:8b:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:CC:95:FD:0F:26:16:B6:5D:72:E5:3D:87:EC:D0:58:B2:37:56
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dd:82:a1:5a:47:08:ef:76:6f:81:fc:b0:d0:67:23:01:e2:
b9:c4:59:a9:9b:47:d1:09:06:e1:98:8c:25:dc:60:fa:03:16:
a5:de:28:7a:ac:74:75:55:4a:04:9a:10:e6:49:a0:d8:ba:f2:
ba:b9:71:1d:97:c3:da:86:28:c8:0e:1c:17:92:f4:76:f6:6b:
83:21:97:af:12:17:26:85:27:5c:41:47:51:f5:7c:a6:4d:03:
55:5b:92:8f:0e:1b:ff:70:7f:a6:de:f5:9d:71:78:ef:0d:b4:
3d:f6:da:4e:8a:3b:21:c4:37:b3:aa:0d:96:f4:bb:d0:9f:60:
41:2e:bf:91:09:d7:d2:47:0f:6b:f0:60:9c:0a:ec:99:c6:c1:
d4:07:ee:c5:cf:d2:85:18:34:60:92:fb:5a:50:cf:9b:f9:06:
10:8e:b4:f0:95:13:86:23:f4:ee:d2:db:41:a5:8e:40:44:ff:
44:41:b6:28:37:2b:18:04:35:b2:be:c9:a3:b1:23:7b:98:49:
66:14:b6:1d:98:6d:3a:aa:db:53:90:7d:4b:f8:b4:9f:ae:40:
69:e2:ee:0d:97:8c:c7:ff:d7:87:27:b7:34:d7:7c:b5:8c:42:
0f:6a:20:44:24:ac:6b:e0:0a:a8:3c:1b:ee:b0:84:3f:67:62:
44:fc:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:24 2025 by rpki-client