Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
File: 309yD7vOaxVdc1fb5xJspWwevnU.mft (raw, json)
Hash identifier: rrVyinQxcenxvAZ/UBVQAv2r8Rh8GNBSxhEC6qlbj5U=
Subject key identifier: 7A:E3:78:A8:AF:93:DE:5C:99:F2:2D:F8:3A:18:A7:AF:02:DD:79:3A
Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Certificate issuer: /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Certificate serial: 01984A77F7B2322205A71078CCAE0B6E2251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
Manifest number: 01AA
Signing time: Sun 27 Jul 2025 06:00:32 +0000
Manifest this update: Sun 27 Jul 2025 06:00:32 +0000
Manifest next update: Mon 28 Jul 2025 06:00:32 +0000
Files and hashes: 1: 309yD7vOaxVdc1fb5xJspWwevnU.crl (hash: koRopOJsNRZEBDgHyiRlxvspE3zHhG6FVJq9xOEwTl4=)
2: qjdo-2hELWfZ5X3xR6fmxm2tvRM.roa (hash: KdwciiToM5teWCqBbT0OWprvk5ot6XdBmfBuE2JH8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f7:b2:32:22:05:a7:10:78:cc:ae:0b:6e:22:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Validity
Not Before: Jul 27 06:00:32 2025 GMT
Not After : Jul 28 06:00:32 2025 GMT
Subject: CN=7ae378a8af93de5c99f22df83a18a7af02dd793a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:7a:a5:50:6a:c2:69:2f:57:d3:d0:5e:a7:
d1:5f:31:f3:65:0b:9c:0d:34:bc:0f:c1:21:1d:bf:
38:16:17:b9:1b:b8:77:cc:66:8c:b6:6c:a4:2b:1d:
92:58:37:18:7c:73:d2:50:7a:ef:42:00:ff:6e:92:
e2:51:60:44:cc:a0:19:df:75:68:3d:f1:52:1f:e0:
79:f9:b5:a7:11:2b:24:c3:53:b1:f6:29:e6:9f:bc:
cd:85:b0:77:cc:6b:23:2d:d0:68:86:d3:e8:16:0a:
1c:9a:ca:aa:fe:95:47:54:ca:97:d9:22:f2:f9:b9:
b0:0b:b5:56:82:7c:3e:9d:cd:cf:b0:00:71:93:25:
45:d3:2d:38:86:12:66:34:10:ce:4f:b6:4b:a8:a4:
22:31:e0:8b:6a:83:23:29:4d:7a:f6:18:ac:f2:da:
39:e6:18:18:a5:e4:22:85:9e:d2:87:ef:80:77:44:
92:b7:13:a1:7a:e4:e5:4f:f9:17:a1:85:cf:73:1e:
41:8b:84:95:4c:c3:4b:17:65:c4:3d:49:92:7c:47:
3c:bb:e6:11:31:75:71:f1:ad:a9:15:f4:72:fa:b1:
17:5f:f1:ae:b9:be:34:33:6b:1f:8f:32:7f:88:0e:
28:1f:f2:78:8b:59:3b:bb:1c:94:92:41:e7:a2:0f:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:78:A8:AF:93:DE:5C:99:F2:2D:F8:3A:18:A7:AF:02:DD:79:3A
X509v3 Authority Key Identifier:
keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5d:ad:86:f6:e1:7c:ee:e8:b3:83:39:e1:ac:63:55:b5:04:
ec:ef:7e:aa:11:02:d0:77:69:c0:4b:bb:c1:2d:45:e8:bf:c2:
21:ba:81:73:70:80:83:e4:b8:31:cf:ea:7b:1d:32:a0:54:07:
8b:04:1f:8b:15:fb:3f:66:f7:37:8c:29:00:bd:ed:37:35:29:
d8:02:da:8e:aa:cf:b3:1c:4c:68:dd:6e:5c:de:e9:3f:24:dd:
0c:36:40:43:f9:f9:f1:cb:7e:b9:5a:18:e0:56:77:b7:12:fe:
b0:81:4a:e9:98:97:af:d0:6f:ee:bd:e2:34:a7:29:dc:64:a3:
a3:95:07:7d:bf:73:e7:09:28:b8:0c:fb:05:64:87:ce:51:b4:
66:0f:d5:4d:b1:e5:7f:d8:3d:d7:a2:93:c9:fd:f4:91:5c:38:
cf:e2:62:2d:f3:ce:8f:73:9c:b2:4c:79:9e:a9:31:ca:40:41:
d5:58:30:7c:66:9d:3f:48:8c:89:57:e9:0b:33:e9:2e:57:64:
22:f4:4f:e7:34:a2:9b:9f:18:eb:f2:ee:c9:d2:f7:e1:79:4a:
53:e4:ef:da:d2:4b:98:a4:cd:35:d5:62:b9:bc:65:fb:98:ec:
9a:a8:29:5d:78:71:ee:56:94:b2:5f:63:c9:9e:d8:83:42:2b:
e9:1e:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:46:11 2025 by rpki-client