Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: FzJTTKPZ9MfKvYI5K5zq7cieCNl0JW3g/F4elY5Z+RU=
Subject key identifier: 9F:8F:BA:C8:A2:EC:01:84:30:C9:B8:00:D2:58:F5:84:AF:98:B4:F1
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 01984776D9AB388598244AEBA89035BEFBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:00:27 +0000
Manifest this update: Sat 26 Jul 2025 16:00:27 +0000
Manifest next update: Sun 27 Jul 2025 16:00:27 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: gj7cHL3/qWhY71GEzmu0ZKJ8bgkxbkbJ7wUHTySadOU=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:d9:ab:38:85:98:24:4a:eb:a8:90:35:be:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Jul 26 16:00:27 2025 GMT
Not After : Jul 27 16:00:27 2025 GMT
Subject: CN=9f8fbac8a2ec018430c9b800d258f584af98b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:75:e8:86:23:d6:5b:1f:d3:a6:d5:84:db:
be:e0:1a:78:c3:a7:19:3c:b2:e4:f3:ac:91:0c:2e:
b3:60:80:04:d2:09:e9:46:4b:28:17:d3:39:a6:5f:
ff:1f:e7:25:be:9c:67:86:9f:fa:d7:ff:8b:36:20:
0c:cf:29:0a:c6:78:38:0f:e8:07:bd:be:43:6a:23:
cf:1b:fc:3e:63:86:2e:6f:1f:c4:1f:2f:53:f2:c4:
bd:6c:48:85:6d:c8:25:5d:67:87:91:76:df:10:22:
74:26:01:d8:23:d2:46:51:13:74:da:24:62:e6:2d:
11:8b:e9:bc:c9:43:16:b9:de:4c:3b:d8:15:90:9b:
1d:44:89:cb:0c:10:65:72:13:e0:6d:70:0a:6e:0a:
4f:7f:f1:01:43:08:c2:ac:72:4e:9a:78:de:e9:86:
2c:bd:af:98:35:8d:2a:fe:83:7e:74:f0:15:f7:3b:
46:71:29:63:94:1e:42:46:c2:ba:66:a9:f6:91:98:
3c:42:4f:f9:85:79:e3:10:11:90:b8:0e:8d:0a:27:
3a:fe:5b:63:ac:1c:0c:1c:27:5d:90:74:b0:27:83:
16:90:8f:c1:fa:a4:92:67:d2:fc:9d:2f:ab:4c:db:
82:32:7a:ca:a6:f6:cf:f7:56:e4:cb:93:e2:0c:a4:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:BA:C8:A2:EC:01:84:30:C9:B8:00:D2:58:F5:84:AF:98:B4:F1
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cb:b9:d2:ef:84:42:65:9c:b3:1e:9e:7e:66:d1:c1:e4:a6:
9d:ee:36:58:a6:53:12:39:b7:0e:a3:eb:ff:f3:1d:80:b5:25:
72:59:c6:5c:b0:b8:60:36:5c:9f:4f:e0:7d:da:e9:46:69:d9:
07:04:a6:0b:93:67:08:12:90:c5:a5:32:d3:4b:62:55:16:1d:
11:ae:13:96:c9:b7:0f:a5:96:0b:86:d5:fc:d8:b9:94:11:95:
b1:93:4f:8c:8a:e2:13:e2:85:f0:45:1a:5e:74:2d:3b:6c:cd:
28:e8:27:2d:5d:11:42:cb:e7:5b:b9:ff:93:82:6f:99:95:fc:
fc:96:13:a9:f8:a2:6e:6a:2e:3a:26:69:0c:64:57:8c:e9:b1:
eb:a1:8b:f1:b1:b4:a4:df:b2:93:13:d6:b1:bc:21:f1:79:51:
89:69:0b:5b:6c:d0:cd:7c:9f:21:b2:da:86:95:2f:a3:71:2a:
dd:fb:f1:93:02:d4:60:27:35:cf:a6:4c:8e:34:80:dc:73:b0:
59:b0:0f:83:85:e4:2d:3e:16:75:06:ef:08:50:ee:59:66:12:
bf:ff:5f:84:99:6a:d9:0d:05:34:5f:ad:e7:0e:0e:a8:db:75:
2f:37:f6:a7:e7:4d:a9:60:87:3b:4c:6d:b9:d9:e8:7d:d0:d7:
0d:91:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:58:34 2025 by rpki-client