Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: AAZol3e2E1gX0tfHu7oVskwXR5xFjXWEHALJI/FhsD8=
Subject key identifier: A7:C6:65:E7:95:07:59:5C:B7:67:AD:99:E1:1C:52:75:66:16:53:EE
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 019845BF3F6B10C05F9EEA063FE2904C2631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 09B2
Signing time: Sat 26 Jul 2025 08:00:18 +0000
Manifest this update: Sat 26 Jul 2025 08:00:18 +0000
Manifest next update: Sun 27 Jul 2025 08:00:18 +0000
Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: AZlYRWyN2ALtkMH843fRtGFeIZH/UwIL7mb7lmfewyk=)
2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:3f:6b:10:c0:5f:9e:ea:06:3f:e2:90:4c:26:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Jul 26 08:00:18 2025 GMT
Not After : Jul 27 08:00:18 2025 GMT
Subject: CN=a7c665e79507595cb767ad99e11c5275661653ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:da:93:17:a5:6d:02:d7:c9:d8:c7:ed:9d:
e9:a6:90:06:ad:bf:a3:4b:62:5f:3f:92:b3:30:1e:
2a:c0:c4:75:10:e7:db:30:f5:ec:e2:92:f2:3b:d9:
d3:1a:55:a4:b4:b6:74:88:8d:4e:4d:5b:78:1a:92:
9e:79:21:0d:d3:95:7e:fd:ff:e3:88:ce:70:61:e6:
96:a5:f5:0b:f7:2c:0d:b0:c5:14:49:fb:4e:a4:f9:
a2:67:27:00:c1:9d:6f:53:94:be:1b:fb:78:2e:6b:
26:8a:1f:1f:62:4d:24:f8:89:3d:be:6a:16:6c:cf:
a1:6b:47:ef:6a:90:88:7f:b0:4d:00:e1:e2:74:e5:
73:d6:81:ce:81:e1:39:51:73:23:7a:56:43:da:c4:
11:ac:60:5c:e2:8a:64:40:8e:30:3a:b5:c4:fd:38:
e5:2e:3c:67:0d:e8:62:d6:aa:a8:0c:e1:81:f2:68:
ba:ff:f8:af:c7:6f:e9:68:b7:8e:ed:51:72:f8:c8:
2b:f4:d3:5e:71:2d:3e:01:71:7e:87:a7:78:c1:d2:
16:dd:14:b4:80:5a:93:62:8a:df:bc:d5:89:0c:d9:
9f:61:21:a4:cf:44:4a:02:90:d7:af:ec:6b:3d:70:
d1:b1:56:3f:a3:67:64:46:79:2c:fa:2a:a3:1c:de:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:65:E7:95:07:59:5C:B7:67:AD:99:E1:1C:52:75:66:16:53:EE
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:9f:c5:a0:be:cc:62:5e:9f:1a:29:f1:10:fc:63:91:ee:
e6:ea:34:14:ef:02:6b:49:0c:40:04:f0:fc:de:64:cb:a6:9b:
f4:11:c0:ac:08:5c:39:60:2f:86:74:8b:a8:59:c4:db:27:ba:
f1:77:d2:c8:b4:39:dd:7c:5b:66:d8:5c:7a:42:40:f3:4e:64:
20:fb:18:89:42:94:9c:0f:12:5e:1c:ee:26:66:34:2c:0e:bc:
89:ac:48:dc:37:72:18:ae:a8:11:bb:40:74:f5:69:93:64:a2:
67:a0:76:03:a0:29:fb:49:d8:46:07:51:f8:19:6e:1b:61:ea:
68:c2:bc:a2:9a:15:f5:fa:8c:31:98:56:7d:af:ae:85:5e:8c:
19:6d:40:c0:c8:99:70:32:ff:8c:09:fc:94:58:90:a6:09:d8:
00:43:49:ed:c8:e0:97:a2:a8:b2:19:6d:93:a3:3f:13:00:8e:
b6:7e:31:f6:50:89:7a:ec:f2:75:02:9d:1b:02:ed:de:eb:80:
83:ee:83:54:b4:13:68:20:81:47:66:e0:2e:87:b7:36:37:a7:
ae:0b:38:a8:c6:d4:1c:cc:af:dd:32:5b:fa:62:96:82:ce:eb:
cd:c6:80:85:50:71:ff:65:6c:b4:75:f3:1f:f6:3e:5f:77:79:
b8:9f:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:28 2025 by rpki-client