Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: EdhmftWGo+Tbykiv6iuMQ3YLWQSD5aBFhu4znyoKosU=
Subject key identifier: 78:52:15:5B:60:2B:04:77:E6:DE:1D:16:71:68:05:36:BC:CF:74:A8
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 01984C2FBC52FADBD27E75EF28E79F17DAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 14:00:53 +0000
Manifest this update: Sun 27 Jul 2025 14:00:53 +0000
Manifest next update: Mon 28 Jul 2025 14:00:53 +0000
Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: XRVDMb0wXYAQP3CHxu19VGdwCgXPk29amTgjBz2Q2lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:bc:52:fa:db:d2:7e:75:ef:28:e7:9f:17:da:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Jul 27 14:00:53 2025 GMT
Not After : Jul 28 14:00:53 2025 GMT
Subject: CN=7852155b602b0477e6de1d1671680536bccf74a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:e7:e8:f1:41:4d:90:8d:34:24:2e:0c:49:
41:69:73:00:73:d3:bf:f3:e8:86:84:6e:44:6a:6e:
68:6a:ee:20:a6:9c:42:43:28:0a:bd:92:52:db:44:
9b:46:93:99:12:e3:97:b7:5d:61:98:63:6d:21:76:
a3:38:2e:da:48:65:b6:f1:b0:a6:12:2e:88:16:67:
09:bd:b1:15:f6:21:6b:13:8b:d0:ea:31:cf:40:87:
f1:14:42:aa:e8:d2:7f:64:6b:5e:83:76:9a:66:e1:
53:c1:ed:76:c2:f2:b7:74:ec:b6:9e:c7:81:55:78:
c1:c7:e6:58:81:6e:ce:7b:16:5c:f7:d3:b2:3e:9d:
8e:46:cc:da:fb:d3:9a:d5:da:f8:e3:4d:e0:ca:cb:
ca:f2:a7:71:55:d4:c4:c7:46:de:8a:6b:55:d7:ce:
a5:ff:99:6e:83:23:c2:cd:b0:68:6f:27:7b:56:e2:
f9:e6:c2:89:b3:3c:20:9b:8f:d8:d0:61:ba:97:b8:
d4:8e:1a:b3:99:c3:0f:f3:e9:46:0f:99:c8:ab:29:
7b:4a:60:da:f2:cf:af:30:e9:b2:81:bf:ae:e2:bc:
9e:4d:4e:3c:b5:49:d7:5a:69:e9:a9:44:df:d8:eb:
ee:59:a6:75:e1:1d:c7:95:3b:a6:87:9e:9a:83:f1:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:52:15:5B:60:2B:04:77:E6:DE:1D:16:71:68:05:36:BC:CF:74:A8
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:74:05:43:4e:72:82:6e:e5:97:4e:73:1a:0e:47:b2:f5:82:
c0:b7:ec:0a:96:2a:7b:5f:9a:fc:d2:cb:de:13:31:31:0d:86:
3e:69:8c:b9:12:d8:27:0f:4d:fd:ae:5b:e4:c4:7b:2b:3d:8d:
14:5d:ab:41:57:02:99:67:cf:1d:f2:8c:4f:21:06:7a:88:72:
fc:80:bf:b9:c6:40:ec:85:b5:70:ff:6d:3a:c1:c9:3d:31:5b:
4f:99:dc:03:39:70:c0:83:5e:a4:79:ec:4e:4d:86:63:f1:58:
13:e2:8a:3e:39:d7:77:55:ed:63:e6:26:f2:d2:8d:a6:0e:9b:
14:23:c8:6e:dc:00:70:ab:36:b6:46:7b:7b:fc:53:10:3d:6a:
55:e5:da:05:01:b6:3a:34:6a:09:ae:16:a1:26:1c:6f:10:76:
9a:1a:65:cf:93:92:c3:d4:b0:2f:15:7f:f8:c8:92:ad:67:a7:
7a:09:bb:fb:16:67:4a:80:c4:1a:79:02:7c:bc:4d:7f:54:12:
dd:18:dd:16:a6:30:e9:83:0b:8c:50:4f:8e:1f:3e:1b:78:11:
d3:c0:da:26:7e:12:d0:c9:28:d4:58:c0:94:d6:39:3f:1a:95:
3a:05:8c:db:b6:9e:96:ee:89:49:37:12:59:9f:ba:52:06:7e:
0f:01:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:34:44 2025 by rpki-client