Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: cPjT2CMiAyQSAZn0aKsFmLY7KMD7MlIdZl40KJ5l/f0=
Subject key identifier: EF:0A:EC:4E:69:7B:30:77:0E:BD:37:50:78:64:9D:BE:48:FD:5A:76
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 0198469B5EEB31B93C7AEAD0991056ED74D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0717
Signing time: Sat 26 Jul 2025 12:00:44 +0000
Manifest this update: Sat 26 Jul 2025 12:00:44 +0000
Manifest next update: Sun 27 Jul 2025 12:00:44 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: BZOo2uPPxUGqwoLxVgzgMl9UZGwDgnVzNlDes1qlhWI=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:5e:eb:31:b9:3c:7a:ea:d0:99:10:56:ed:74:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jul 26 12:00:44 2025 GMT
Not After : Jul 27 12:00:44 2025 GMT
Subject: CN=ef0aec4e697b30770ebd375078649dbe48fd5a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:f5:da:0c:9f:84:7a:9a:04:cf:ef:c7:ca:
21:d0:c6:69:fc:4e:8d:56:b7:a9:ed:5a:1d:3d:c2:
ea:b5:e5:1c:6d:cb:7c:01:f1:c6:21:9b:55:5a:ec:
50:19:02:b6:99:0c:be:27:d1:ac:34:dd:17:90:33:
6b:50:14:74:33:85:46:dc:0b:20:1b:e6:af:08:5f:
bd:d4:0e:d9:6f:43:96:98:57:fe:c2:4a:b3:02:21:
2d:96:90:98:c8:b7:d9:74:06:51:ba:a4:0d:99:8f:
bc:a1:62:98:1e:7f:0d:71:93:9f:c0:11:01:53:d1:
1e:11:55:ab:fe:cd:d9:56:f3:d5:cf:d4:c4:c1:f7:
ff:7a:b0:a5:77:1f:a8:2b:1d:b1:af:b2:ab:df:7b:
65:2c:b5:0b:c9:f9:b3:2d:07:d7:ee:1e:89:11:75:
cb:8f:a1:f8:9b:30:04:e2:75:65:b2:ad:27:0b:8d:
53:73:b2:c2:75:34:10:bc:30:22:1d:18:53:f7:5a:
f5:44:62:d6:f3:cd:ba:31:60:c8:ad:8b:51:bd:d9:
21:ca:01:2d:22:90:b5:a6:12:0d:79:9e:55:df:31:
d2:e6:c6:75:8b:3b:c6:df:10:4a:51:39:27:bc:3e:
dc:e3:2d:1c:55:e2:37:fb:21:f9:a1:4f:93:8a:bd:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0A:EC:4E:69:7B:30:77:0E:BD:37:50:78:64:9D:BE:48:FD:5A:76
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7b:38:c1:4a:6f:22:70:b1:86:8b:b1:9d:fc:9b:45:ff:b0:
08:43:6e:87:4e:22:2c:97:b9:7a:2e:95:7c:1e:3e:72:f6:fc:
b6:67:42:7f:f7:74:df:1e:bd:18:49:56:7f:11:31:56:87:45:
d7:9c:5f:b8:a9:51:0e:2a:9f:5c:b3:3f:2f:25:15:83:81:2f:
c4:0c:7e:83:d1:c4:47:9b:72:8d:f1:6b:ab:d3:d9:7a:3d:87:
6c:21:2b:61:43:e6:48:62:88:55:8a:f2:97:a3:19:5c:cd:26:
f6:4a:6a:96:8c:4a:55:7f:58:22:42:43:96:02:c3:a0:51:79:
94:ea:ae:dd:db:14:4d:96:79:6e:3d:17:3d:34:d2:45:27:22:
ed:18:89:00:08:d8:51:e2:cd:21:7b:63:59:c7:d0:d0:4e:67:
99:7e:f8:45:d9:fb:29:5a:b7:e5:69:47:31:25:02:6e:7f:c5:
6a:3f:c6:79:b4:e7:54:cf:a8:46:16:23:a9:a2:d3:ac:98:10:
ae:f8:71:e3:62:95:e6:16:7b:ef:84:c9:24:80:05:87:cb:8f:
6d:27:f9:9a:df:01:65:7d:9a:ab:07:c3:5c:6b:59:48:7b:1d:
05:ec:2d:98:f6:5b:94:d2:d6:be:96:5d:21:44:44:10:f9:25:
21:cf:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:56:05 2025 by rpki-client