Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: Js0Z08MdRxOVgW9phqxnT4DOQquO7SjtVvQKcWHj8Ig=
Subject key identifier: DB:F7:1D:AD:3A:5D:18:9D:C1:7F:D7:58:49:55:C7:BC:88:EE:33:CC
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 01984966133806DB48C772D9FBE9B559B5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 06E8
Signing time: Sun 27 Jul 2025 01:01:23 +0000
Manifest this update: Sun 27 Jul 2025 01:01:23 +0000
Manifest next update: Mon 28 Jul 2025 01:01:23 +0000
Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: 1y3AT+hNOs83ZYH1oBFG4/mw7DhXyxZpFrsl1lbssA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:13:38:06:db:48:c7:72:d9:fb:e9:b5:59:b5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Jul 27 01:01:23 2025 GMT
Not After : Jul 28 01:01:23 2025 GMT
Subject: CN=dbf71dad3a5d189dc17fd7584955c7bc88ee33cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:3c:3a:39:b3:21:ff:e4:eb:08:46:3f:0a:
ca:02:e5:e0:91:56:62:4d:b3:2a:13:b2:6c:f0:f7:
06:0f:da:89:2b:0f:69:47:4e:0d:a1:69:6d:48:c9:
52:8d:46:8a:e7:77:aa:47:33:b0:6b:41:23:63:62:
36:e8:26:82:cd:36:14:22:89:d0:00:c0:da:fd:93:
e7:66:a6:2c:18:02:7c:9e:a3:e4:0c:f3:36:9d:c1:
b8:db:7f:52:70:10:a7:66:b3:4c:72:fd:0e:ee:04:
22:2a:4f:eb:68:78:1d:9a:cf:7d:cb:7e:d9:ac:1a:
03:c2:70:e6:49:d1:88:7f:93:c5:10:b3:e7:a3:55:
10:bb:b1:f9:6e:8b:e6:38:38:0f:75:b8:7d:e0:1d:
14:56:c0:20:a0:51:0e:f2:1c:31:9f:25:a5:2b:30:
a0:dd:7b:88:2d:a4:0e:02:96:b2:d2:eb:38:d4:70:
42:ab:bc:8d:c5:9f:58:f7:33:76:82:de:dc:8b:58:
63:a6:6e:8c:e3:87:40:c8:94:0c:11:d3:b3:63:fe:
85:4d:16:44:1b:8d:19:e6:e3:d1:3c:81:ac:5d:ad:
b5:eb:82:31:f9:e4:4c:5c:b6:7b:ed:12:09:53:72:
aa:03:e0:5d:30:da:5c:5e:39:b8:80:78:92:a2:89:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:1D:AD:3A:5D:18:9D:C1:7F:D7:58:49:55:C7:BC:88:EE:33:CC
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:56:1c:27:d6:d2:e1:5c:95:b2:a1:38:ab:61:92:cd:46:fe:
9e:12:0e:c7:0b:50:1a:8a:e2:0a:cc:8a:83:51:22:61:39:40:
36:04:99:61:f2:a0:e3:33:ca:3f:81:c4:93:c6:f9:bc:25:ae:
4b:ac:f8:36:c3:6a:97:bd:87:71:17:74:ad:8a:fa:3d:0b:ce:
99:3e:96:5f:82:b8:b4:02:90:8f:9e:8c:c2:21:da:67:f5:4e:
fe:38:a8:6f:b3:d0:24:4a:24:6a:06:b0:04:39:be:ba:34:63:
be:89:9b:40:fe:a3:69:5e:ad:be:06:6a:46:1c:a9:4b:cf:bb:
16:27:07:ed:c0:0f:c3:42:a1:98:8b:ed:19:da:a9:d0:e7:69:
4e:1e:81:5d:0a:98:59:8e:63:fa:09:68:73:2a:3f:17:15:95:
a3:b8:ac:c4:18:11:6c:d3:03:84:1e:c6:d2:5c:47:53:c9:19:
e2:58:39:e9:48:2e:41:ce:a4:78:72:60:a6:4a:0b:33:09:2c:
d1:f2:88:58:53:19:89:0f:7f:b3:6c:70:00:85:89:05:29:41:
81:cc:3a:ab:38:5a:6d:50:ad:f7:a9:0e:93:75:d5:31:df:3b:
3b:8b:32:61:3d:14:c3:a4:e8:e8:16:62:91:f0:49:d1:8c:51:
37:af:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:56:08 2025 by rpki-client