Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: t08238YyAeUHoKf2XOjieE2ZPqGsL5Q7U2zBgmSNIDM=
Subject key identifier: 99:74:37:35:82:7E:EE:93:BE:A8:1F:CC:08:BE:40:92:63:9F:3C:89
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 01984A0A45871D6EEAA5CB824DE7C1DABC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 02FA
Signing time: Sun 27 Jul 2025 04:00:43 +0000
Manifest this update: Sun 27 Jul 2025 04:00:43 +0000
Manifest next update: Mon 28 Jul 2025 04:00:43 +0000
Files and hashes: 1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: IXtYZnfy0p+xncp9NZjWYs1gxKQa93WqDslHVspWdBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:45:87:1d:6e:ea:a5:cb:82:4d:e7:c1:da:bc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Jul 27 04:00:43 2025 GMT
Not After : Jul 28 04:00:43 2025 GMT
Subject: CN=99743735827eee93bea81fcc08be4092639f3c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:10:a5:34:2f:1c:8f:e1:cc:bb:33:c4:ad:
ee:c6:a9:d6:ee:d0:07:84:08:92:ee:35:01:ca:11:
f1:a5:37:75:34:85:b3:3a:21:65:fd:6e:9f:39:1f:
8d:7d:f2:2d:f8:23:55:27:76:ed:cd:3a:6d:36:51:
c9:6d:4c:5b:b6:5d:52:46:8d:16:52:2e:ce:ed:1c:
a5:99:83:65:3f:43:34:05:ad:f7:15:d1:16:4e:17:
d3:4d:c5:21:bd:b8:3c:e3:c6:7d:0b:9d:02:0b:60:
f9:ef:f3:bc:2b:a2:23:b7:b0:26:46:fa:2e:0b:4c:
d0:ae:d4:60:25:87:56:01:35:c8:e0:8e:39:45:55:
5f:80:35:12:cd:b5:b6:dc:94:bb:e0:f2:72:11:0d:
6d:2f:7f:2b:e9:62:b1:0d:c2:fe:de:2a:ca:f0:84:
ea:4d:c4:24:a2:23:ab:a4:59:44:41:09:9f:58:42:
22:50:79:f0:7a:58:de:61:39:5f:9f:da:3f:3b:cc:
08:a6:8c:78:ea:a1:33:d9:66:fd:a7:db:bf:12:5e:
dd:b6:9f:a5:ab:c4:d0:c9:eb:59:39:15:e6:7d:c7:
3f:4d:27:16:4b:c5:16:ac:21:30:6a:48:65:d7:dc:
d4:88:84:c1:36:b3:2e:64:95:e4:e6:fc:61:88:cc:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:74:37:35:82:7E:EE:93:BE:A8:1F:CC:08:BE:40:92:63:9F:3C:89
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7a:ab:55:a4:24:58:5b:22:8f:c4:52:8e:a5:a3:b4:9f:bd:
1c:f1:a1:36:5e:03:7a:c8:5a:fc:14:5a:f5:47:8a:ac:2d:81:
d5:fc:5b:be:e6:1c:80:a6:3d:0a:43:af:05:74:9e:71:87:e6:
5d:e7:d6:14:ae:e9:36:b1:cf:b6:0e:89:eb:ba:1d:20:b6:40:
43:7a:21:e7:b9:17:26:79:db:23:9a:47:ba:c6:1e:bf:98:6d:
30:eb:4c:27:e8:d3:39:de:83:6c:1c:e6:31:83:cb:f0:87:7b:
0e:11:da:81:00:47:21:95:42:cb:b7:17:52:d1:2a:08:e4:39:
0c:28:34:bd:59:7c:7c:2f:f4:9b:72:64:92:75:6c:df:77:40:
81:89:31:11:d7:30:6f:21:d3:a5:df:b3:5d:55:6c:50:aa:c2:
7f:17:99:3d:68:98:8d:8c:17:8a:26:2f:cb:51:66:e4:df:0b:
ff:70:ee:1f:41:89:32:07:57:b6:35:24:7c:1f:ba:a6:08:e6:
71:c1:bd:79:a7:8b:08:b7:79:30:e6:8f:30:e0:72:f9:d1:1d:
01:8c:87:24:1d:1f:fe:0d:fb:06:57:ad:f7:ee:a2:45:d4:88:
a7:6b:3c:cf:5e:b7:fe:49:1d:dc:f6:c1:b5:d6:68:3b:38:a8:
ab:43:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:01:22 2025 by rpki-client