Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: OwaGLsCPC+OuNjaumxiETYfyz8gPKODBr9kUpFN/0t8=
Subject key identifier: 12:2F:E9:ED:21:9B:00:D8:7B:D5:52:47:9B:19:F2:95:A9:8E:CE:1F
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 01983DCF14A935346706FD4AF2899F13A344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 15FD
Signing time: Thu 24 Jul 2025 19:00:38 +0000
Manifest this update: Thu 24 Jul 2025 19:00:38 +0000
Manifest next update: Fri 25 Jul 2025 19:00:38 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: /1fuL+ifMgvc2MPTXh1sT7p/H05TxG0d2SiOWQH4NgE=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:14:a9:35:34:67:06:fd:4a:f2:89:9f:13:a3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jul 24 19:00:38 2025 GMT
Not After : Jul 25 19:00:38 2025 GMT
Subject: CN=122fe9ed219b00d87bd552479b19f295a98ece1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d4:db:f8:76:b1:0b:ab:01:a9:f8:12:72:a1:
ad:f4:69:ba:08:80:91:aa:fe:88:d1:22:a8:15:1c:
2a:e4:75:3a:97:4f:45:b3:34:f7:e0:e1:b6:74:66:
ac:be:81:3a:69:a0:d4:ed:e3:51:6b:b9:0f:e6:a5:
27:1f:cd:dc:5f:fb:dd:a1:c4:64:3d:51:26:cc:1c:
7e:f0:b4:3e:03:bc:3e:6d:64:82:1a:0c:36:5a:ab:
71:35:29:6d:37:48:db:48:00:f9:ac:7e:65:af:25:
c6:6f:1b:0c:13:e2:31:52:d0:12:cb:9b:9d:72:51:
98:cf:a4:e4:bf:80:6f:ed:07:86:7b:a3:7b:dc:15:
6f:74:15:8b:50:eb:8c:f9:9b:77:09:4c:5e:b4:d5:
84:18:d3:3f:0b:8c:5c:8e:d0:4f:04:1b:ca:d9:f8:
72:c0:93:c7:0a:1b:85:12:82:4a:f2:ef:9e:74:26:
a8:38:fa:b3:c8:d4:87:38:90:df:41:eb:a6:22:cf:
f1:f9:65:b4:38:60:8b:52:63:ef:ac:63:3f:0d:b8:
b5:97:4d:99:1f:39:28:85:d3:e8:3a:fa:65:61:56:
1f:05:9c:02:b6:9d:5d:0b:42:e8:91:ae:d5:a7:f2:
32:2f:57:36:c1:84:df:59:c3:55:5b:97:ba:73:54:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:E9:ED:21:9B:00:D8:7B:D5:52:47:9B:19:F2:95:A9:8E:CE:1F
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fd:de:40:02:38:8b:7c:98:30:f7:8b:b3:54:93:47:f5:34:
75:9b:f3:20:e7:50:1b:15:3e:9d:29:6e:82:81:b5:dc:1b:f6:
a3:a9:88:9d:2c:a0:d0:10:c7:4a:37:ca:31:24:7c:36:fc:00:
05:88:cc:c0:ca:68:54:85:37:4d:b2:c4:88:fc:b5:15:73:61:
e8:99:62:af:6c:0d:70:60:1d:1b:b3:d5:19:2e:8c:e3:df:c6:
e7:fa:07:52:6d:28:bc:5c:e7:d9:d2:31:6e:64:63:da:f4:8a:
1f:a3:0c:bf:54:02:c2:c1:57:e9:70:c8:a1:56:6a:ca:38:5d:
b3:f8:63:f6:91:84:bc:8e:1c:07:86:d0:d5:b4:b4:48:3f:c6:
20:10:26:0c:41:57:38:3e:bc:24:51:40:fc:83:5c:3e:c8:d9:
7d:a5:71:4f:72:0c:50:29:b1:71:b6:33:2d:61:4d:78:0c:f8:
91:a2:76:53:c0:9d:70:86:c9:76:13:c2:0b:f4:71:10:b7:e7:
d1:fe:00:d4:e4:22:1b:cb:7e:6e:42:31:b9:e5:ff:0d:44:e2:
d2:34:0b:7f:e5:48:57:d4:c9:83:a7:6f:8b:5a:02:b0:04:52:
b0:d3:73:56:16:a0:94:ed:03:c7:f9:74:5c:96:fd:0c:86:9c:
e8:bd:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:02:27 2025 by rpki-client