Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: tzO3FW8KCr+zD/Is7t60LI91Rw6Rvz3riYgyXM2ggJk=
Subject key identifier: D9:B8:79:6D:78:32:98:DA:F1:9B:87:4D:2F:F2:8E:A3:B3:56:91:59
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 01983BE0773B3F805338E9249712ED1F33B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 0731
Signing time: Thu 24 Jul 2025 10:00:23 +0000
Manifest this update: Thu 24 Jul 2025 10:00:23 +0000
Manifest next update: Fri 25 Jul 2025 10:00:23 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: /B6Zxznjb4jNIcB9DIX/heNYwfruhseNTv4eR+Vygto=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:e0:77:3b:3f:80:53:38:e9:24:97:12:ed:1f:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Jul 24 10:00:23 2025 GMT
Not After : Jul 25 10:00:23 2025 GMT
Subject: CN=d9b8796d783298daf19b874d2ff28ea3b3569159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:c0:8b:52:70:5c:3e:7a:ad:cf:7e:8f:05:
48:ed:24:34:7e:ae:c1:8c:3a:87:f9:d6:d4:66:17:
22:98:62:7e:85:54:85:e6:a5:06:fb:f9:7d:ab:09:
69:ca:30:94:bf:0b:cb:f2:44:9d:b4:41:46:a2:30:
33:5c:10:19:31:bf:6e:c2:c4:cb:39:0b:9b:52:89:
c6:03:dd:0e:8b:28:0e:7d:dc:79:88:9c:78:98:56:
c5:3c:bc:ce:56:e5:d9:d0:d5:b9:90:1f:87:62:ab:
26:f8:a2:ae:46:bd:56:1e:d5:9a:76:16:d6:11:8c:
aa:a2:d4:e0:c3:25:25:39:18:34:d7:db:be:6e:5d:
f5:dd:a0:11:fd:0c:b2:ce:2e:46:42:1c:f6:bc:f4:
8c:6f:aa:d1:ef:4e:9d:56:48:08:1b:39:5d:17:6d:
45:7b:35:a6:99:e5:e0:cd:36:bb:8d:3c:d9:f9:21:
a6:79:42:93:71:f7:89:5c:00:9a:51:2e:23:ef:7d:
66:6f:46:a8:b5:b6:37:07:97:e9:75:d2:a9:61:da:
09:6c:38:d3:05:a5:e4:ef:0a:ec:13:94:a4:cc:57:
85:a8:cc:4f:48:c3:51:39:5c:67:a2:f5:25:64:37:
5b:8b:99:54:21:a1:74:e4:f7:4b:95:23:b0:e4:b9:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:79:6D:78:32:98:DA:F1:9B:87:4D:2F:F2:8E:A3:B3:56:91:59
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7f:4c:99:a7:35:3b:fa:94:fd:8d:86:10:ec:a3:bf:68:32:
e4:54:12:d4:b9:69:9c:2b:cb:97:0e:27:eb:5c:8f:e7:82:b2:
b6:50:c3:be:18:68:4e:aa:72:7c:6f:23:c9:14:52:e5:79:d2:
d4:d9:58:3f:ac:34:2c:07:d4:3b:2e:d3:7a:82:ba:c3:f2:7f:
28:29:eb:e1:e6:a4:23:9f:a5:ab:67:ca:b0:b1:42:2a:78:3d:
b1:63:0f:8f:65:8a:dd:d1:df:57:ed:37:12:25:a2:1b:b5:c0:
5f:0c:e0:97:75:3c:ab:39:57:41:2b:d3:8d:8e:a4:c7:16:f2:
aa:ce:bd:69:ae:ef:bd:a9:49:31:a2:d8:a5:27:bb:bc:8d:33:
f5:6f:d9:1b:09:20:d7:2d:9e:5a:ec:1f:b5:84:b0:ed:8e:3f:
3c:06:e6:7f:b0:94:77:10:c3:9c:09:29:a8:b5:8c:1b:8c:5d:
ee:e0:d8:4f:06:77:fe:83:dc:b3:5b:6f:e3:ce:31:b8:4d:3a:
44:e2:8a:1a:17:aa:ad:17:b5:f8:fd:b2:a2:99:bb:2e:b8:78:
86:48:d7:22:93:d8:bf:f4:8a:0a:14:67:ce:c6:2e:e0:81:2b:
45:e9:8d:8d:98:b4:79:de:a3:b5:86:d1:3d:3e:4a:7f:27:33:
0a:60:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:48:57 2025 by rpki-client