Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: I1BT2Cy99Baf8V4CBvkwGheNYwf45ktgqWzn3e/Rxro=
Subject key identifier: FF:95:D4:BF:98:DA:2B:CB:00:39:15:8A:F6:3E:C2:17:69:41:53:8C
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 0198496558FDC05FB9890B7B2856DF6F3A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:35 +0000
Manifest this update: Sun 27 Jul 2025 01:00:35 +0000
Manifest next update: Mon 28 Jul 2025 01:00:35 +0000
Files and hashes: 1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: HZ67MbU4f+zTcCWn+KlV9AbmMnJyjQ1/v/L9EeaVhcM=)
2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:58:fd:c0:5f:b9:89:0b:7b:28:56:df:6f:3a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Jul 27 01:00:35 2025 GMT
Not After : Jul 28 01:00:35 2025 GMT
Subject: CN=ff95d4bf98da2bcb0039158af63ec2176941538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:c9:a2:07:f3:a9:de:d2:ea:85:ea:6c:f4:
dc:ca:82:78:10:de:56:61:9c:86:fb:68:e1:f1:a3:
88:30:91:2a:b9:79:d7:4c:cf:c8:af:c6:53:31:70:
2b:5b:29:2c:26:94:da:b0:87:83:1a:e5:3c:71:cb:
4d:7a:87:ab:84:ec:ec:cc:cc:13:92:08:82:76:49:
ee:79:de:b2:fd:fd:ab:f2:70:a4:0e:8f:ce:4e:d3:
f1:e0:d3:57:9c:09:9b:7e:c8:00:1f:1f:16:3d:f6:
79:a0:17:8a:19:4d:c0:e7:9a:15:18:b7:eb:25:ca:
9f:fa:49:29:09:ce:7a:86:52:1e:94:51:20:01:85:
1f:66:b6:b2:54:fd:d1:cd:88:9d:b5:bc:fd:d9:24:
29:48:cc:3f:2a:89:1f:b9:be:40:bc:8a:c6:be:90:
93:ab:07:5e:bc:7c:06:49:d8:ef:0c:16:5b:3e:2c:
51:28:80:43:8f:45:07:6a:16:86:03:39:67:9b:8d:
60:e1:d4:c9:dc:0c:3f:b8:3a:94:10:e8:b6:95:64:
51:a5:0e:17:7f:d6:71:cf:b2:ef:a6:d3:6c:c3:8e:
25:9c:d1:4a:02:64:ca:a4:a7:ef:7c:0f:c8:5f:2d:
c2:ed:71:4e:47:29:c3:3e:dd:af:a0:f3:e7:76:ed:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:D4:BF:98:DA:2B:CB:00:39:15:8A:F6:3E:C2:17:69:41:53:8C
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:79:14:de:22:3b:3b:34:08:7a:3b:90:c1:51:86:06:e6:f5:
69:f7:7f:78:59:1a:2b:77:e3:b3:b8:a5:bd:07:aa:6c:ec:93:
ca:f7:43:7b:35:fc:1c:11:8b:a8:a1:7f:b3:ef:cb:ad:ba:9d:
a1:03:15:f8:93:f3:8a:3f:c2:49:9c:96:5c:5b:99:5e:a5:d7:
36:90:b3:10:8c:0e:95:0c:7d:bf:7a:3c:e5:a7:ff:b7:a2:a2:
75:8e:24:05:42:0e:1f:e5:a6:98:4a:2e:dc:7f:13:4e:40:fc:
b2:b6:41:d2:25:12:bb:fb:f3:b8:39:68:27:05:ab:0f:1f:4a:
d0:75:17:ea:d9:da:cf:92:78:79:bc:ac:80:00:e5:4e:e5:52:
1d:07:d5:8d:12:f9:4d:b1:bd:c0:a8:a8:b1:72:b8:53:a5:10:
e5:1d:9f:6e:b6:fd:72:fb:da:68:b8:69:ab:33:bf:a2:35:60:
f7:38:fb:3f:71:e0:56:43:1e:b2:aa:94:7b:f4:c2:5b:f8:7c:
5b:c2:d1:00:0a:46:9d:c1:59:65:f1:8e:cb:c1:d1:bf:2e:f4:
37:e4:1d:59:c7:53:bc:b6:5d:f6:7f:06:a8:c2:fd:bb:35:96:
b0:2b:9c:10:a2:58:08:d2:fb:57:4d:a5:25:7b:83:51:fa:32:
d2:e2:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:19 2025 by rpki-client