Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: GqBubRiH+FxgkqAzrnjFI2sAwU6ev+rix8o3Rty2j4w=
Subject key identifier: 3E:4A:E6:F0:94:42:1C:36:58:01:01:A5:0A:F3:63:86:99:0C:04:6A
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 019853E91480B9D3F2D4F08CCD6A25FE6B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 160C
Signing time: Tue 29 Jul 2025 02:00:40 +0000
Manifest this update: Tue 29 Jul 2025 02:00:40 +0000
Manifest next update: Wed 30 Jul 2025 02:00:40 +0000
Files and hashes: 1: DPZDlwC5lvIBjZjDv4jWEsMDlMI.roa (hash: JSJ9xva93NHEmD/GiUVFRsLxBb1tpR6rl5zNqgBI5EE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: 10ar573O4xHi8WZo2XtQ9a7N4MbvR8S0UakkGPOfTfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:14:80:b9:d3:f2:d4:f0:8c:cd:6a:25:fe:6b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Jul 29 02:00:40 2025 GMT
Not After : Jul 30 02:00:40 2025 GMT
Subject: CN=3e4ae6f094421c36580101a50af36386990c046a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:4e:80:5d:20:72:2d:bf:49:4a:c1:ba:c5:
7c:08:4a:17:ce:01:b0:25:88:19:73:0b:9d:c0:fa:
51:92:f3:53:81:ce:03:de:94:69:61:33:b3:7a:bf:
e6:b3:29:5d:e3:83:c9:41:22:ba:5b:8b:e7:a6:4b:
40:89:3e:94:c5:28:6f:ed:19:89:da:eb:14:16:82:
d2:39:f4:7b:27:2a:57:5a:c8:e2:60:d1:9e:9b:b8:
de:43:1e:a7:e0:4a:79:cd:c5:28:24:e8:f9:0a:59:
c8:1b:19:63:b4:77:dc:99:e5:89:40:b6:77:03:5e:
1d:97:f1:e7:68:94:5c:b9:59:f1:1a:48:15:71:04:
e1:e6:33:07:29:bb:45:cd:98:c8:25:8a:24:90:18:
6c:79:29:f9:5b:ca:fb:38:28:7d:15:46:f4:39:04:
69:42:8b:3c:bc:22:e3:ff:51:63:4b:bc:c1:11:c6:
5b:5c:d3:ba:a8:a5:10:97:42:5e:b3:0e:b6:0a:94:
f5:87:ec:78:2a:97:ee:22:ff:69:c2:db:30:59:2c:
16:82:a1:2c:b9:93:82:1c:09:82:9d:84:bb:20:c9:
41:3e:18:72:d5:f6:7a:9e:91:2f:bb:de:92:49:23:
c5:3a:66:fd:da:da:37:36:6e:43:b1:e5:48:71:3d:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:E6:F0:94:42:1C:36:58:01:01:A5:0A:F3:63:86:99:0C:04:6A
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ce:e1:44:9e:94:e5:f7:c4:54:29:8d:46:1b:14:9c:db:b7:
8a:58:d5:03:15:6b:87:1c:30:c0:44:b6:ab:b4:0f:95:cc:8e:
6a:45:20:ed:88:f4:cf:6c:a6:10:ab:5b:22:f7:2a:13:ca:ff:
7f:6b:16:10:22:f6:1f:5e:7a:3a:3d:e8:b9:1e:93:51:ae:a3:
f2:55:52:13:c4:8b:5c:a8:8c:b3:0d:55:8d:1d:b8:90:c1:1e:
d7:30:98:86:d3:e1:24:ef:d4:c5:95:a0:c4:5c:14:32:0b:eb:
d9:38:3c:c1:ad:31:9b:94:0e:29:06:2d:49:35:2f:e8:1b:d4:
52:e3:35:f5:a5:26:71:9f:33:f1:9a:01:80:b6:a3:c6:ff:26:
31:b2:57:6d:b2:f4:a1:ff:c3:f5:8d:5e:de:a2:6c:28:08:44:
2d:22:6d:21:29:8f:41:a7:16:1b:d2:0d:6d:8d:57:e6:3e:1a:
df:b1:19:f3:32:96:aa:1d:53:69:de:ab:cf:4e:4d:cd:48:a7:
0e:5f:dc:c3:e3:01:54:ea:76:e2:49:40:01:7e:7b:2b:42:50:
5b:11:03:cf:0f:34:fa:f0:a9:e5:fe:32:fd:cf:b6:b7:a9:36:
dd:16:71:1b:b5:a7:69:bb:d8:53:fa:67:28:cd:61:ab:ae:15:
ef:14:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:54:53 2025 by rpki-client