Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: FUjfXoeRPYFEwJ//1YUXn/0gH9iZxhVu9OvHQ4aIEBQ=
Subject key identifier: 15:87:C2:9E:62:51:CB:0F:77:12:66:14:8E:94:40:86:08:D7:6C:18
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019848C0332CC96BD3F226372D5A667890E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 22:00:12 +0000
Manifest this update: Sat 26 Jul 2025 22:00:12 +0000
Manifest next update: Sun 27 Jul 2025 22:00:12 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: /eijubynJ57FIcx+FiGj1eU6kBBk7+hCPPe69GNM9O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:33:2c:c9:6b:d3:f2:26:37:2d:5a:66:78:90:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jul 26 22:00:12 2025 GMT
Not After : Jul 27 22:00:12 2025 GMT
Subject: CN=1587c29e6251cb0f771266148e94408608d76c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:b9:a1:c8:99:91:b6:d0:d7:79:08:f4:97:
81:04:20:ab:61:ce:b1:a0:16:cd:4a:5e:7e:08:f4:
8d:c4:79:13:17:20:73:fe:43:22:4e:52:f5:80:a5:
ba:38:7d:58:6c:00:3e:4c:53:55:0a:ef:34:a7:18:
dc:aa:32:72:ff:86:6a:53:d8:38:e1:90:2c:d2:ac:
51:bb:0f:3d:f0:14:35:fd:9d:fc:6b:c8:9f:ee:42:
ce:5b:2b:fd:0b:66:2b:dd:cb:c9:b5:e1:f8:f5:50:
9b:6b:c1:e1:19:12:7a:7a:cd:c1:fd:ef:1f:64:8c:
4b:82:cb:5f:b5:81:e4:e2:8b:ae:f2:19:e5:37:d2:
1c:8a:bc:21:d7:27:33:91:f3:1e:92:d9:a4:55:97:
c1:a6:69:ee:c4:b8:6b:f1:1c:41:08:a3:86:04:ba:
3f:88:e7:d7:ec:a6:c8:1d:d8:ac:46:45:97:aa:c2:
8b:3d:3a:94:41:6d:00:2f:9c:ba:23:3f:e2:21:2d:
3f:a5:b5:ad:61:69:7a:99:d7:7b:e1:eb:97:07:a4:
b5:81:8a:51:89:f3:4c:1d:95:08:b2:08:4d:14:1a:
1f:3f:dc:7b:07:2f:65:1b:8f:00:fb:88:00:c9:7b:
f6:a2:fb:98:9e:40:2a:8f:f4:2e:94:db:42:f4:54:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:C2:9E:62:51:CB:0F:77:12:66:14:8E:94:40:86:08:D7:6C:18
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0b:39:71:78:62:82:5b:c7:f6:2e:99:e6:5b:55:d5:17:68:
63:b9:07:12:be:86:6d:73:2e:36:71:3e:6a:c4:c8:05:9c:ad:
65:aa:da:e8:bb:52:b8:93:1e:f2:7a:ce:82:57:2d:65:31:9b:
cb:64:0c:1c:f1:06:77:b7:cd:e6:40:be:d7:85:f3:93:3b:b4:
25:a6:27:ad:47:68:37:c0:65:77:9c:d5:38:62:2c:ce:08:5b:
58:49:16:8c:fc:dc:d3:e0:35:9b:64:4b:f8:43:ea:98:c2:56:
20:7b:88:9f:dd:86:51:99:e2:62:00:2b:4c:11:74:df:1b:58:
2e:2d:5f:8c:b2:13:cc:0a:ff:d1:b3:c8:45:14:ff:77:ac:5a:
78:4a:9d:ac:c6:7d:9b:e6:85:0e:e3:33:36:bc:1b:53:ba:bd:
37:6d:de:57:ac:a0:f4:54:18:74:cf:d2:82:60:98:46:99:af:
b3:05:7c:9f:43:48:2e:52:0e:e3:f7:74:da:1c:2b:58:b7:bc:
a0:85:0a:2c:07:d5:17:dc:a0:28:c8:2d:b1:28:ea:09:a5:13:
b4:b7:c1:f3:d9:62:18:f2:f2:df:1c:a5:ef:bc:6f:80:3e:bd:
20:23:48:74:13:16:60:9f:77:7a:8a:8a:67:65:b4:60:06:10:
78:ab:9a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:38:19 2025 by rpki-client