Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: qYAHlKwJhJG7fKkJsZHFojdo5IpZ8yG73V7EptCRgSQ=
Subject key identifier: AA:20:40:BD:06:DF:75:9A:A8:92:D2:53:2F:48:E7:81:4B:C6:4F:C6
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 01984A0A6A980790C8559B194D841AAA46FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 12F6
Signing time: Sun 27 Jul 2025 04:00:53 +0000
Manifest this update: Sun 27 Jul 2025 04:00:53 +0000
Manifest next update: Mon 28 Jul 2025 04:00:53 +0000
Files and hashes: 1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: fIEwVhTGPO7DPejJ5M62gkwIdyNAg4N+WKJJVraaUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:6a:98:07:90:c8:55:9b:19:4d:84:1a:aa:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Jul 27 04:00:53 2025 GMT
Not After : Jul 28 04:00:53 2025 GMT
Subject: CN=aa2040bd06df759aa892d2532f48e7814bc64fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:68:69:b5:c3:aa:26:1c:d2:f7:0f:29:88:
ee:96:6f:0d:40:52:b9:44:8e:08:fa:72:c7:33:f2:
0b:78:02:eb:ed:09:33:6a:6b:31:4c:97:d5:0b:1c:
8f:c4:79:8e:f7:62:44:b6:a4:75:ff:8e:5b:8a:ff:
56:a6:c6:66:21:6f:7d:f6:ae:3a:7e:eb:bd:e9:5a:
54:f2:e7:0f:82:89:82:0e:90:13:f8:b3:17:41:d3:
c3:13:79:1b:f9:56:a2:f9:55:f6:d4:fc:92:3b:5a:
6a:61:dc:67:9c:09:79:6f:40:b2:91:d4:74:15:f0:
03:05:d2:32:56:6f:6b:99:18:80:1d:99:b4:24:7e:
b2:e5:6c:b7:bc:8b:fd:3c:7f:88:6b:0b:73:16:fc:
5b:2e:07:5e:3c:7d:de:9f:18:96:3d:fc:0e:94:49:
ab:7a:19:69:c0:8d:b8:bc:a1:1e:6e:7a:15:15:0b:
9a:b7:c9:cd:3d:f9:d6:e9:0d:c7:5d:c6:07:8f:bf:
6c:38:b7:23:1a:b8:b9:d4:b3:c4:e2:6d:ac:f9:a2:
07:fd:16:62:e3:d5:1e:c3:1f:3e:0a:84:ea:5d:1f:
3d:0e:91:0c:b9:24:c4:4d:61:5f:54:90:70:59:ff:
61:31:ad:65:40:5f:6b:95:05:9f:02:f8:56:ee:d2:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:20:40:BD:06:DF:75:9A:A8:92:D2:53:2F:48:E7:81:4B:C6:4F:C6
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0d:68:f0:f0:b9:e9:80:cb:5d:88:ea:d7:15:cc:d0:0f:3f:
41:8a:48:ae:e0:bd:1b:22:eb:b9:5e:ee:b1:fd:6f:e5:5d:84:
a6:cb:8d:2b:06:56:2e:f9:cf:b2:4f:e9:7a:17:84:dd:66:e5:
96:2d:57:db:1c:12:75:d2:69:0e:82:c1:c3:4e:64:3b:7e:8f:
0d:39:94:69:f1:21:03:2c:bc:49:13:0b:d4:a8:98:ab:6f:9b:
15:07:19:63:91:6b:cc:b1:36:e3:ef:5d:1a:94:ef:74:19:17:
7d:4d:29:e1:15:de:51:ae:91:56:1a:3a:cf:cd:10:94:e9:c7:
39:75:7d:d2:57:91:79:1a:d8:df:5c:92:ce:9e:0f:dd:9e:f2:
60:63:45:9b:80:e2:0d:a9:7d:db:07:d1:7e:a2:ab:2f:04:24:
12:20:b0:74:a1:14:11:c5:71:6d:6c:79:e6:64:61:f5:95:ed:
83:a5:ad:51:0f:f8:7f:7f:42:c2:87:c0:f5:69:87:f9:d7:05:
50:de:60:88:22:9c:16:2d:3b:13:1c:c9:5a:e8:a7:91:c3:8e:
11:ea:37:f0:0f:4b:f1:84:4c:a3:fe:24:6f:25:f0:7d:5d:3a:
a2:3d:a4:7c:1a:eb:8f:ca:d7:4b:a5:04:db:ff:c4:ed:5d:3e:
4f:b5:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:11 2025 by rpki-client