Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: MoPZJ29o1qz0sCZXp/MXq0nidhL50mYJCrrqRZ1hiWU=
Subject key identifier: 74:92:BA:8C:FE:FA:69:0F:1D:55:10:31:98:61:2B:95:11:EA:0E:11
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 01984A77F1610E39883154A6ACE2F3E5D23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 0537
Signing time: Sun 27 Jul 2025 06:00:31 +0000
Manifest this update: Sun 27 Jul 2025 06:00:31 +0000
Manifest next update: Mon 28 Jul 2025 06:00:31 +0000
Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=)
2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: 9lUt5Xw6m+E1XiMWD/cB/ZbItvemkpIsnQuMbR1rKW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f1:61:0e:39:88:31:54:a6:ac:e2:f3:e5:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Jul 27 06:00:31 2025 GMT
Not After : Jul 28 06:00:31 2025 GMT
Subject: CN=7492ba8cfefa690f1d55103198612b9511ea0e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:6f:f8:a0:48:27:90:e0:27:ad:08:23:d9:
b1:45:ca:1f:d3:28:ad:81:c8:23:ed:9d:ee:d3:9d:
6c:3c:89:cd:7a:0f:a0:3a:cd:93:74:3f:4f:14:e2:
fe:6b:ae:66:17:17:ca:0d:26:d1:28:66:c1:39:c4:
21:c2:7e:10:76:9f:11:8a:78:45:f3:b6:85:62:f0:
93:3e:7c:11:52:85:45:15:9c:bf:d4:da:fd:0b:64:
08:22:d3:e8:63:10:ca:8b:8b:f5:fe:ae:99:79:0a:
8c:de:23:6a:c7:22:eb:72:8b:12:b6:f8:78:75:ff:
67:e1:18:ba:83:3c:c4:5b:05:d8:a9:52:0c:b7:e3:
da:9e:65:13:9e:bb:6b:8b:3c:a3:c5:2b:9d:2d:e6:
b0:5f:45:ce:07:71:e8:f6:a8:cb:ba:a1:63:65:5f:
62:3a:c6:09:9c:52:90:d3:53:7b:03:44:c1:a4:29:
ce:60:42:44:03:f0:38:79:33:57:97:06:49:1a:c7:
9e:09:c1:e0:fa:39:a0:9b:c7:87:fe:2b:0d:92:66:
fa:bc:32:0c:a3:a8:91:6f:6f:ef:bf:81:e8:e4:85:
80:d5:4c:e7:88:02:19:fb:aa:6d:b0:45:aa:c7:6a:
ff:33:cc:3b:12:0a:2a:f8:df:3b:a8:1c:ba:98:07:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:92:BA:8C:FE:FA:69:0F:1D:55:10:31:98:61:2B:95:11:EA:0E:11
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:13:67:3e:d8:4e:4c:0a:bd:33:66:f0:ed:c7:c2:61:f4:
ee:14:c4:80:0d:f7:10:7d:40:7a:03:78:e0:47:41:87:16:17:
de:00:34:1c:fc:68:d6:8b:29:19:38:39:2f:44:12:76:0a:38:
cd:f0:e6:eb:24:fa:b0:96:b6:d9:42:08:bc:19:ae:34:4d:3a:
0e:85:f3:b8:20:83:db:9a:7e:d8:97:85:e1:00:57:d7:0e:3f:
88:c2:91:e2:e8:78:7a:4a:27:a9:4c:94:8d:db:c4:bb:77:8b:
3b:4e:0b:3a:e8:19:ab:9b:17:df:29:5a:4f:47:ac:83:18:1b:
2a:02:b0:39:16:13:4b:5f:96:83:a7:a4:4e:3b:73:1b:6f:ca:
91:ab:7d:d6:9c:ec:1f:44:e5:0a:b7:50:76:28:87:2d:60:c3:
a6:e9:03:cb:6c:55:05:fe:67:c8:e2:e8:af:57:bd:15:fa:58:
c0:e0:0a:a6:5a:c1:de:78:6c:da:66:f4:6c:37:e2:fa:2c:cf:
0c:02:36:82:87:cc:3e:8d:72:85:33:b9:a7:0a:63:51:84:4a:
31:3d:9f:7a:2a:09:ec:6f:19:21:28:a5:5f:88:58:6e:61:95:
6e:64:41:61:ea:91:c9:b6:b7:3f:0f:a9:ee:d3:19:4f:d8:fd:
a8:47:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:02 2025 by rpki-client