Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: Asgk7leadBhKQmB4KnX+gW+sWsCqkbxU/wwXMjiU/EQ=
Subject key identifier: 43:3E:13:51:87:A0:B6:8C:EA:C8:BD:A2:77:94:8A:43:2B:3C:29:82
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 01984A77DCA384F2DA949C0C2FF2152A0D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 06:00:25 +0000
Manifest this update: Sun 27 Jul 2025 06:00:25 +0000
Manifest next update: Mon 28 Jul 2025 06:00:25 +0000
Files and hashes: 1: 0-dFdMQBS6PQc_H8zCEvitr9Geo.roa (hash: wf7BGdUuzEvUWE1tRs5aPe5d6Kbqkjno2v5St+tRxhA=)
2: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: vDbuCFnrQs07/RwhtmZ4RQh9fLP7q8p8WNxWzCrulak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:dc:a3:84:f2:da:94:9c:0c:2f:f2:15:2a:0d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Jul 27 06:00:25 2025 GMT
Not After : Jul 28 06:00:25 2025 GMT
Subject: CN=433e135187a0b68ceac8bda277948a432b3c2982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:a5:58:a1:56:b0:38:2b:fc:5c:53:2d:4b:
3b:c4:04:4b:cf:ea:7a:b3:12:95:d5:8e:a5:d4:3a:
ad:79:15:8b:75:9b:6d:60:02:67:15:19:a0:14:38:
d0:fc:b8:d6:68:31:2d:76:0c:8f:e7:b1:ee:70:02:
0f:74:9f:41:2c:07:f5:75:fc:e4:58:8e:bf:eb:ff:
f7:c3:b0:ff:7d:44:78:a8:91:bb:75:4c:12:d8:58:
8f:45:5e:7a:7f:e9:03:b0:4a:04:ea:3f:d1:a1:e7:
6a:5d:f6:74:7d:9b:51:ea:54:fa:2a:13:7f:83:b7:
e7:81:cd:70:7d:82:d1:50:79:f5:0a:ad:c6:b1:25:
cd:bc:56:10:1d:33:a5:2f:82:94:38:03:07:04:d7:
db:b6:a8:64:04:3a:a8:76:07:e1:43:ca:33:f2:bd:
b1:1f:d7:3e:82:7c:7e:96:91:00:6b:9d:86:69:4a:
dc:b7:78:ec:3a:2f:a3:ac:b6:0f:b4:c0:72:75:f9:
f5:85:f1:74:32:25:38:f8:5a:c9:eb:6e:c8:45:83:
20:1f:47:17:17:46:ef:40:58:b0:1c:53:8d:51:5f:
e7:d2:ff:2c:7e:98:f2:58:4d:91:af:57:99:e2:79:
bd:08:cd:cc:a7:d3:9a:66:87:db:1c:ea:e4:7d:33:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3E:13:51:87:A0:B6:8C:EA:C8:BD:A2:77:94:8A:43:2B:3C:29:82
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:54:7a:37:5d:c1:b7:66:af:69:a7:d0:6b:3d:d9:28:86:ef:
76:bd:b5:c1:9c:55:96:2d:6d:e3:72:ad:7c:64:c5:f3:53:31:
dd:1a:f7:62:12:c0:b0:65:71:24:46:56:3d:fd:a9:5a:df:c6:
1f:55:ab:e4:f7:61:04:f1:22:f1:5a:a7:1b:6a:14:47:fa:6c:
af:81:85:17:2d:b5:cb:27:f0:b4:7d:f0:23:a6:51:06:3e:91:
ee:4f:6f:b7:10:dc:6b:63:8e:66:5f:21:fc:e7:f7:44:06:94:
11:b7:29:80:08:6c:c0:d1:6a:28:2a:e0:83:77:e2:4e:d7:ec:
c0:27:3f:0c:93:b5:55:86:63:61:6a:6e:55:a6:a2:49:da:1a:
e4:86:32:1e:6a:73:3c:7e:c9:36:da:8d:db:3b:fa:89:ee:c5:
d7:1b:4e:d5:2a:06:4a:60:4a:bc:76:56:7b:8b:e4:55:2f:32:
c8:47:c1:ce:5a:57:ac:ab:6b:05:11:50:31:06:7d:a5:3f:16:
6f:ab:bb:3d:89:53:57:0c:83:0c:f6:7d:72:97:aa:8c:08:b7:
23:ff:47:42:fc:c6:2e:5f:53:c4:c9:d3:d2:a4:b3:5c:a2:83:
11:19:6a:49:e5:51:b5:be:0e:51:b8:5f:5a:9e:bd:9d:c9:4f:
db:91:55:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:57 2025 by rpki-client