Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: dKEnQgKD7x1qY5K6CUrUyKiBQuft1Ac5WqY0KEguYZw=
Subject key identifier: 16:97:44:CA:F0:50:5C:0D:A3:4A:CB:AF:F3:95:64:DE:A9:BB:5F:EA
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019845889FB6961BFB71A8A4A0FDEA35B454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 07:00:38 +0000
Manifest this update: Sat 26 Jul 2025 07:00:38 +0000
Manifest next update: Sun 27 Jul 2025 07:00:38 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: IKN7+3W2Fu0QAlNvu1lDJWgOGe+z32H70Nr6oudujgg=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:9f:b6:96:1b:fb:71:a8:a4:a0:fd:ea:35:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jul 26 07:00:38 2025 GMT
Not After : Jul 27 07:00:38 2025 GMT
Subject: CN=169744caf0505c0da34acbaff39564dea9bb5fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:f5:65:8b:da:6c:57:78:45:e7:e7:cc:3c:
ee:97:94:fa:ab:38:96:03:a6:f6:cb:9a:cf:26:05:
3d:cb:73:ec:52:21:40:33:1d:db:cf:91:83:b1:4b:
44:e4:41:33:da:47:df:c0:da:f0:f8:83:27:b4:40:
31:14:46:70:46:da:f5:f0:ea:ba:e7:ec:c8:49:7d:
9f:87:69:d7:e3:95:35:be:b9:a9:2d:47:84:ec:f3:
7d:ab:2d:a1:2e:ad:8c:c6:98:36:4d:7e:0c:13:50:
54:28:2d:13:6f:f0:21:9a:b2:06:17:61:47:4d:00:
ac:d7:d0:48:40:7f:5b:59:6d:3b:9e:49:57:44:45:
d4:1d:dc:54:19:be:c3:e9:08:74:26:79:b7:55:ee:
d8:1a:00:fc:69:25:7d:15:95:24:09:30:f0:fe:02:
0b:cf:4a:87:d1:af:bd:bd:70:d6:7d:a8:8d:d7:56:
5a:70:f1:a3:48:05:48:0b:6a:a8:46:c9:fb:c4:6c:
dd:34:d1:2b:5b:c0:a2:f6:d7:4d:ac:6a:b9:39:78:
f0:77:9e:28:1d:96:8b:77:65:1b:76:ff:d3:df:d9:
e8:49:e4:1a:41:f7:2e:bd:09:86:8a:4e:9f:1a:cf:
3a:1c:42:4a:ac:94:4a:10:02:cf:b3:98:14:70:33:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:97:44:CA:F0:50:5C:0D:A3:4A:CB:AF:F3:95:64:DE:A9:BB:5F:EA
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:72:b7:0d:d7:a0:f8:18:57:a6:a4:c6:87:21:59:3a:ac:cb:
97:bd:69:49:50:23:21:1a:26:cc:38:6f:79:8b:67:28:04:f6:
55:22:cf:c7:06:e6:c2:47:b3:43:f4:f9:01:83:b0:50:98:36:
55:fc:d8:36:8a:44:7b:1c:8a:fb:91:60:e3:9e:ff:a2:fe:44:
7a:b8:fd:fb:72:81:96:fa:b3:f6:4b:2b:e0:34:d3:69:04:c1:
08:4a:dd:ea:33:f7:dc:90:6e:6e:1a:13:74:76:71:d3:f3:0a:
60:ac:e8:63:e9:25:c9:92:3e:df:e1:50:65:4d:42:72:fa:ad:
23:93:13:39:9e:59:a8:a7:e9:bf:a8:01:36:f2:0a:01:23:b2:
09:4f:fc:6c:09:8d:24:30:3a:a3:1d:5d:d9:d6:e1:f8:20:6f:
f7:16:8d:1f:af:6b:60:8d:43:a2:30:31:1a:09:94:41:7e:37:
30:97:5a:6e:dc:c0:69:69:78:4c:9c:d2:e7:2b:70:21:37:7b:
f0:1c:9b:a6:2c:c8:4b:ba:cd:de:ae:6b:53:ed:5e:55:a0:21:
d5:2a:3c:22:46:24:26:02:28:fe:27:6a:8c:ff:32:a0:57:8a:
f0:c6:f3:c0:60:9a:db:4f:e6:f0:c4:16:2d:b6:04:2b:95:ec:
1b:27:c6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:18 2025 by rpki-client