Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: Eb3Qm9QH2LBc+CHfAvQYnPw25CA0nzA1SuVDO4RZRJ4=
Subject key identifier: 39:79:8A:42:AE:83:8F:D1:04:44:D3:E8:49:A8:B5:F9:2E:30:B2:D5
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 01984708D4B6CBD9D0AB976E141409D3DE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 14:00:17 +0000
Manifest this update: Sat 26 Jul 2025 14:00:17 +0000
Manifest next update: Sun 27 Jul 2025 14:00:17 +0000
Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=)
2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: AFcmOllIti8hh3N6J1BrPX64q+KcwySwGI4yJFsPXx8=)
3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:d4:b6:cb:d9:d0:ab:97:6e:14:14:09:d3:de:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Jul 26 14:00:17 2025 GMT
Not After : Jul 27 14:00:17 2025 GMT
Subject: CN=39798a42ae838fd10444d3e849a8b5f92e30b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:3b:56:c9:ce:1f:b8:7f:50:70:63:d6:0d:
ff:95:e6:fc:9f:f2:03:82:53:d9:01:dd:7b:fb:b4:
36:74:31:10:7a:79:a4:a2:77:96:0d:3c:1a:69:ff:
f0:eb:d6:17:c5:d0:b1:bd:2a:51:df:c6:78:5e:6a:
c7:75:82:7e:69:5a:52:23:ea:85:d6:47:bc:2a:a7:
02:05:66:d5:f8:38:4e:e3:1e:6c:f9:40:9a:bc:66:
d9:e7:0d:d5:3a:f8:00:78:d3:3c:27:fc:0f:f3:94:
08:74:e8:87:7d:e6:9a:c9:18:41:20:e3:2a:d9:e0:
38:99:e3:c0:a1:44:69:95:90:5d:46:6b:b1:9b:5c:
40:87:aa:f6:9c:08:32:9a:d2:d5:bb:86:9c:e7:76:
b5:eb:82:68:b6:01:68:bb:5c:88:a0:f5:14:c2:8a:
58:40:35:07:e6:8a:cd:a7:d6:c7:fd:64:9b:43:6b:
9e:c7:a7:7b:48:05:3c:ef:cb:bc:78:3c:da:a2:da:
b6:83:0f:99:68:25:64:aa:74:0c:0a:6a:95:22:1f:
e1:9d:38:1c:e0:3f:2f:37:11:11:8c:43:b8:58:03:
64:0b:5b:b0:b6:a6:c4:30:16:a2:8c:80:b0:34:dc:
9e:1a:59:b5:e1:57:3c:fd:c1:82:d0:72:c4:45:b5:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:79:8A:42:AE:83:8F:D1:04:44:D3:E8:49:A8:B5:F9:2E:30:B2:D5
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:92:29:6a:44:a4:fb:01:41:fa:bf:e9:47:a6:4d:42:60:dd:
8f:db:3b:88:15:51:a5:5d:ab:96:ee:eb:ed:94:70:6b:c2:a0:
33:74:92:08:7e:3a:40:2c:a3:b1:9d:56:e7:d6:dc:3f:e2:b1:
f3:ee:f8:6c:e9:6a:70:ad:e9:29:68:bb:a4:c2:62:0d:9e:d7:
85:1c:f3:3b:fd:4f:8c:6e:a8:95:e0:09:e6:9f:d4:27:28:ff:
e5:34:52:88:34:a5:ce:07:01:16:04:74:4e:9c:d2:bb:02:47:
89:17:dc:bf:e6:8f:b6:3a:5a:c5:10:0d:f6:a6:0b:75:b8:3f:
21:63:01:78:44:82:59:58:0f:53:9e:38:8a:54:99:96:f1:1d:
27:cb:89:58:1f:b1:bf:bb:fa:23:a6:16:7a:a5:b8:8c:84:fe:
82:a8:20:88:9e:f3:d8:e7:90:fd:df:cc:7c:36:5b:40:59:8f:
05:27:5b:c5:82:ad:e2:70:7c:63:f0:08:aa:ae:8f:56:0a:b0:
66:e4:94:8a:5f:ff:52:93:0d:f7:51:bd:77:b4:d8:e0:11:a0:
90:e2:03:b7:64:72:86:a3:d9:81:81:94:b2:4a:5c:d5:8c:3d:
b5:65:19:1d:a5:c1:5e:7a:93:ef:cd:43:5b:44:51:51:15:e6:
4b:f7:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:37:54 2025 by rpki-client