Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: 9tJzoVxuxvvSoaD5G632TuQu1P2+Vd0Du7PeHHNJaJ4=
Subject key identifier: ED:F9:7A:A2:83:45:1F:57:A8:2F:87:CE:96:9E:5F:A4:CD:A2:BF:BA
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019847E537BC417395C8A91E9E2F0D5DAC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 07EE
Signing time: Sat 26 Jul 2025 18:01:00 +0000
Manifest this update: Sat 26 Jul 2025 18:01:00 +0000
Manifest next update: Sun 27 Jul 2025 18:01:00 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: SD0nDNoPdtu8nZ7n2stYFqCd4PSN+WoomkTacSleaKM=)
2: Gfuw2x_T8yQVyP6ui29Llxbnd0A.roa (hash: Gjo+1HCWQtVB1KVlZemBlfNk1FD9JNsAIkXhqPnWnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:37:bc:41:73:95:c8:a9:1e:9e:2f:0d:5d:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Jul 26 18:01:00 2025 GMT
Not After : Jul 27 18:01:00 2025 GMT
Subject: CN=edf97aa283451f57a82f87ce969e5fa4cda2bfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:92:d3:9b:cf:02:ed:55:1b:19:69:9d:87:
d7:61:14:38:15:bc:c9:25:ce:cb:f9:2c:1c:2c:28:
3a:07:e9:ef:b8:95:99:af:f8:8d:c6:6e:ba:92:0b:
b5:08:05:a7:d1:fd:19:04:3d:6a:7e:23:f4:36:12:
36:9d:9c:fe:27:fb:e8:0b:a7:66:59:7d:a6:c9:28:
1a:28:e7:a2:b5:94:bd:02:87:6a:c6:a0:aa:39:ce:
65:c0:6a:90:eb:9b:a8:de:4c:ee:00:67:9f:9a:70:
e6:06:e9:58:02:18:a8:75:76:10:ea:7c:d8:98:16:
21:ee:65:39:e9:d9:57:b0:f9:e7:91:c7:a1:8c:7c:
af:89:3c:fe:bc:9f:6f:dc:3f:5d:c3:c0:88:bd:bb:
42:c2:b3:9c:24:35:b3:49:bf:0d:91:65:54:b8:eb:
87:69:c7:6b:91:fe:cb:50:4e:98:39:04:ad:4f:2f:
aa:6a:90:ea:58:14:43:1a:79:2d:98:30:33:82:2f:
d5:fd:63:82:3a:4d:c5:58:c6:b1:c8:96:92:3f:73:
f3:6f:83:30:95:5b:d3:5c:5e:4f:fa:b0:83:85:00:
d9:cf:7a:99:78:12:a0:96:53:4d:72:d2:5a:57:56:
f9:88:ff:b4:39:a0:3f:de:2c:62:e1:b1:56:a7:1c:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F9:7A:A2:83:45:1F:57:A8:2F:87:CE:96:9E:5F:A4:CD:A2:BF:BA
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:57:ad:dd:bc:97:52:b9:50:7e:8c:73:3e:a8:bf:13:93:3e:
29:d8:4f:0f:bb:80:13:0a:74:71:f0:31:16:fb:73:4c:58:4f:
59:23:51:33:15:de:45:ef:0f:99:1b:ec:6e:b4:c1:33:3c:4e:
d7:d6:6e:c8:00:a4:a0:fe:2e:59:2a:3b:81:eb:97:b9:5f:d9:
f9:22:53:ec:c1:35:6d:a2:ba:e5:ea:08:1f:af:20:68:10:57:
5f:c4:79:db:f9:da:f7:47:bb:dc:01:0b:e2:49:2e:68:22:41:
f4:bd:a6:16:3d:ae:25:d2:b0:4e:80:e8:ea:b8:68:10:01:f0:
a7:c0:43:78:c0:1c:13:b4:6f:7a:9b:d6:46:f5:2d:bc:ac:94:
18:cd:0f:d5:5c:5e:d3:8c:7e:68:71:5c:6c:f8:82:7d:8d:68:
cb:77:d7:ec:be:dd:df:f8:c4:d3:4d:e2:ed:00:df:c9:25:3a:
3c:c6:3e:7d:7b:be:b7:f9:22:95:e5:4b:17:1f:f4:6e:04:f0:
d9:d8:fb:5e:17:f7:9e:e3:4c:0c:20:d0:e3:5c:88:16:e2:76:
3f:9e:44:31:78:b7:15:3a:0b:17:7a:b4:9f:bf:c6:23:79:57:
da:58:df:40:2a:14:ee:93:66:f1:48:23:d5:21:f2:a4:94:9c:
7d:81:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:31:32 2025 by rpki-client