Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: W6RZnYScCdsxZb2EXW6OX57aIRZivGIhRMGFJs2x0lo=
Subject key identifier: 8F:D2:98:47:A9:5D:DB:66:9F:F2:56:15:B6:A8:0E:61:91:D6:3A:85
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 01984A0A21321EE898848A18AD3193598532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0A2A
Signing time: Sun 27 Jul 2025 04:00:34 +0000
Manifest this update: Sun 27 Jul 2025 04:00:34 +0000
Manifest next update: Mon 28 Jul 2025 04:00:34 +0000
Files and hashes: 1: 2JA-ZwNyhJfjy4iRgBz6O7qcilU.roa (hash: CuX1HDub6jnp4XmLQgh/JslHvidglBPgi73piILRqao=)
2: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: v0N33IXcPVBSh5ew+NvadUzFhJdOYc6IHnUWYjo4GwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:21:32:1e:e8:98:84:8a:18:ad:31:93:59:85:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Jul 27 04:00:34 2025 GMT
Not After : Jul 28 04:00:34 2025 GMT
Subject: CN=8fd29847a95ddb669ff25615b6a80e6191d63a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:99:4e:14:09:d9:69:c3:0d:e5:3e:3f:56:
e6:54:db:8c:76:a2:e1:0e:60:9d:a3:d4:63:50:85:
c5:e5:85:bf:33:f5:ec:c8:1d:39:93:14:14:e9:5c:
89:d3:89:32:9b:9e:a1:31:2d:47:e7:4e:7d:dd:9b:
8d:99:b3:2b:be:f3:86:57:90:a4:e5:f7:af:be:3c:
54:15:88:13:ac:83:b1:7a:4d:2d:a3:f5:0b:b1:01:
ad:e4:19:c8:3a:c7:c7:75:e0:6c:8c:1d:dd:b1:7b:
be:69:c2:72:80:69:04:ce:c5:18:0c:d3:2b:1d:4d:
e0:5a:e7:f6:32:5c:73:f7:4b:18:c9:b8:a2:11:55:
56:4d:86:0d:10:fd:a6:0f:8a:97:cb:fe:75:da:8a:
ec:07:4a:60:db:22:0f:52:48:39:e0:fa:34:48:63:
0d:32:46:d8:06:01:77:2f:fa:49:b9:57:42:d8:5e:
0c:95:a5:23:65:43:69:a7:18:2c:81:57:38:df:b8:
95:59:8f:1d:dd:a1:20:6e:9b:37:ff:7a:c9:e9:69:
68:6a:14:f8:65:2a:ee:01:d3:41:e1:46:21:8d:f1:
5c:50:c7:98:e4:a9:ac:41:71:e7:ce:ac:36:fb:7b:
19:e9:9c:5f:39:1e:67:f0:8d:cf:62:80:27:88:22:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D2:98:47:A9:5D:DB:66:9F:F2:56:15:B6:A8:0E:61:91:D6:3A:85
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:88:eb:35:14:fe:06:c2:5d:cc:de:13:62:76:fa:ae:99:40:
a0:1c:c5:f1:c7:26:24:c2:f3:af:30:25:c8:cf:81:13:d6:0f:
66:62:e0:84:9f:90:1e:77:cb:59:32:3a:c9:2c:ab:6d:29:b0:
6e:d2:a7:f4:f5:d5:40:c3:c7:95:2b:06:ef:ea:32:d1:8a:08:
e1:9d:f1:92:19:ba:34:8d:c7:2a:4f:a2:ce:85:86:6c:13:cc:
fb:95:c3:dc:57:d6:94:1d:22:78:cb:50:50:f3:26:0c:27:cf:
0c:00:be:5a:e1:8d:7d:35:ae:f6:0d:0b:d9:59:c4:11:16:cf:
92:5c:be:3d:44:31:79:9f:e9:43:35:b6:59:0e:26:d9:85:f6:
15:76:63:3f:f7:2e:23:45:ee:d5:e9:da:ad:8a:9f:ac:b0:86:
7f:5a:5c:52:b5:16:0b:23:5b:da:7d:28:00:e6:f2:4c:f5:27:
a3:da:e6:14:88:58:c9:86:9b:fa:81:2e:8d:e5:43:46:1b:22:
de:2e:b9:5d:23:e8:2e:6c:8d:c4:ca:ab:23:e2:8c:41:48:8a:
ea:96:2a:a0:0b:17:2d:eb:c7:5b:65:50:bb:19:17:9e:e4:b3:
af:33:0b:ec:70:d6:ea:a8:aa:cf:30:32:b4:78:5d:1b:a0:28:
8c:09:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:42 2025 by rpki-client