Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: 4qzXxDq59rc7SZjEkD99sk0WEKg/CfJVFo4uYxIrCcc=
Subject key identifier: A5:90:3A:4F:70:B5:02:67:32:BE:63:A2:77:6C:9B:B9:34:E8:FE:66
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 019853442F674CEF93FCE4677ABB05C4C9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 23:00:34 +0000
Manifest this update: Mon 28 Jul 2025 23:00:34 +0000
Manifest next update: Tue 29 Jul 2025 23:00:34 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: Fdlh7gjSUWeZgZudZE1yCQXbx1ekPMQ4LKWhbXpGcz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:2f:67:4c:ef:93:fc:e4:67:7a:bb:05:c4:c9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Jul 28 23:00:34 2025 GMT
Not After : Jul 29 23:00:34 2025 GMT
Subject: CN=a5903a4f70b5026732be63a2776c9bb934e8fe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:7e:3f:30:a1:96:88:4e:ee:3f:45:55:15:
e4:cb:9e:89:4b:bb:65:19:73:d1:ec:a8:de:74:32:
df:d4:fa:59:9d:eb:3b:68:e8:ca:08:60:66:76:97:
47:2b:bf:a8:3c:9f:69:dc:59:98:db:55:49:01:ee:
58:91:ce:35:18:14:a8:a2:b8:43:b6:b9:19:39:b9:
66:66:e8:a9:38:34:52:a2:ff:50:ea:d3:35:78:61:
0c:6b:1b:1b:ff:16:85:b3:67:35:0e:26:6d:a7:26:
e6:67:d3:11:5a:23:25:e4:a4:dd:21:28:73:5b:d9:
0b:dd:25:7c:5a:29:73:60:a5:10:0b:fd:aa:ea:ac:
6c:8e:1c:b6:6e:df:3f:aa:7f:70:e5:90:83:17:c9:
84:c0:b7:31:1a:5b:a4:96:4b:55:cd:fe:ff:4b:d5:
35:2a:79:ba:a1:56:47:c7:4c:bf:2c:4b:fa:a9:dc:
29:67:c0:61:1c:f1:48:dd:5c:0e:61:95:46:d3:f8:
8b:3b:0c:4f:e3:4d:ed:ec:bd:1e:92:2e:57:45:02:
fe:55:9e:09:b9:f6:88:1b:40:f9:58:d1:82:ae:07:
a5:c5:3e:06:50:4a:29:b3:2b:41:a1:d2:27:04:2a:
49:e3:d1:d1:51:29:47:46:58:54:65:40:f5:16:5d:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:90:3A:4F:70:B5:02:67:32:BE:63:A2:77:6C:9B:B9:34:E8:FE:66
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fa:c3:3d:2c:e2:43:04:42:76:68:d8:28:4a:d3:c2:75:b3:
22:ed:d1:76:d3:c2:48:36:e4:d7:26:4b:02:5b:af:32:d3:a6:
0a:c0:36:e1:29:5c:1f:e1:9d:37:94:04:e8:4f:ad:34:61:10:
a4:51:69:f5:18:d5:65:90:3f:d7:e7:3c:4d:97:fe:00:43:57:
35:7f:e7:8b:69:61:c1:93:ba:77:f8:58:63:01:f7:49:4d:93:
5f:55:88:0e:96:8d:b2:0c:90:17:0c:c1:f9:e9:bb:70:84:3c:
f6:2e:af:d0:4e:96:d4:58:b6:2a:c9:6b:82:bb:e5:d1:f9:18:
08:21:2b:8c:59:d1:12:89:07:72:f2:50:a5:3c:8d:fd:6f:a3:
a5:13:d5:8f:83:b0:ee:03:6e:07:9f:b6:04:5f:ac:38:8e:0c:
7d:26:d7:71:0b:ec:0e:b0:fe:11:e4:85:e2:f3:4c:8e:4f:94:
d5:32:33:31:ff:aa:28:10:ee:c7:65:d8:20:06:42:33:72:0f:
ec:39:5d:f5:8a:f7:d6:23:96:4f:cd:80:83:7a:f7:b8:60:81:
ea:18:27:d7:5b:37:32:b4:0a:9e:35:a3:c5:1c:da:f1:cd:96:
44:be:76:e0:bc:72:2c:68:3d:9d:a0:f3:9e:1a:a5:b1:39:6f:
c9:ae:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:30 2025 by rpki-client