Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: Quvocljrtlm2F/RJfW/uWeDof51AD9peIwpHkm07IyI=
Subject key identifier: 87:3E:9A:AB:7B:56:C8:3E:23:1B:94:04:F5:E9:29:99:30:4B:B0:D3
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 01985569EBCD1BE0301E5C1B4CE2D8023DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0D41
Signing time: Tue 29 Jul 2025 09:01:01 +0000
Manifest this update: Tue 29 Jul 2025 09:01:01 +0000
Manifest next update: Wed 30 Jul 2025 09:01:01 +0000
Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: JikoBd1kPlO2yScaDeixd07g69tvAHsxYrbSYxH+NEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:eb:cd:1b:e0:30:1e:5c:1b:4c:e2:d8:02:3d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Jul 29 09:01:01 2025 GMT
Not After : Jul 30 09:01:01 2025 GMT
Subject: CN=873e9aab7b56c83e231b9404f5e92999304bb0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:b8:7e:d8:f2:f6:e7:14:0c:50:07:1b:7b:
03:31:0b:7d:04:f4:7b:7b:b3:ac:cc:96:97:94:19:
9d:56:33:1d:60:c3:51:b4:41:bb:9c:0c:75:73:02:
e0:25:7a:89:11:7d:16:c0:af:cd:46:2f:2e:3e:62:
96:0a:79:30:29:e7:69:64:10:0d:90:0a:43:e0:28:
39:87:f2:82:89:67:ae:19:a0:bd:a9:99:69:8d:56:
8b:26:d5:a1:09:8a:d0:97:63:85:51:f5:aa:1c:91:
8d:6d:ea:7b:8f:9b:9c:41:44:fe:5f:58:7a:86:52:
2c:53:2f:37:50:92:45:b7:40:73:35:27:a3:9b:3b:
2c:e2:b8:ee:be:27:2d:d1:c2:44:d8:bf:e3:92:53:
ba:f1:8e:64:ca:65:26:48:ce:ce:11:d5:4a:a7:16:
db:e0:f8:0f:17:df:4f:e0:e5:60:a9:ba:e2:89:d9:
e6:e7:9a:df:48:a3:cf:33:ea:4b:70:ef:ed:ba:60:
d2:69:2b:0f:84:e1:18:7c:09:73:01:32:1d:50:02:
eb:e5:67:5a:89:7f:57:9f:31:9c:33:14:e8:ab:d4:
b8:92:33:10:d6:4c:7a:ef:06:d4:f7:8d:18:5b:1d:
d1:f1:f2:46:4f:68:2f:4a:f4:d7:98:0a:7a:e6:ec:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:9A:AB:7B:56:C8:3E:23:1B:94:04:F5:E9:29:99:30:4B:B0:D3
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:71:bf:c6:21:66:9c:4b:4e:83:c9:4f:2a:9e:95:e2:99:
0f:b3:66:2c:2e:fb:59:a8:97:df:f1:bd:4d:c2:cd:98:cc:b1:
d6:6a:6c:76:ae:4d:81:70:05:56:69:b0:8e:30:e6:52:90:51:
75:31:d3:4b:dd:06:6c:11:2c:c9:f7:b9:c3:d3:2b:ca:48:93:
50:d9:3f:77:da:45:13:45:dd:18:4d:75:1f:8a:22:44:16:77:
a6:35:e2:5b:6c:c2:31:3a:59:82:93:35:87:0a:68:e1:1f:9f:
2a:ad:08:f7:93:5e:e4:37:74:3a:b6:9f:74:49:c4:b1:d8:d2:
2e:54:67:5a:02:54:b2:b5:a3:f8:d9:10:09:2c:08:2c:7f:5e:
36:ae:77:f6:49:e7:7a:4e:2d:7c:26:ba:44:f9:2a:5d:52:9a:
54:f2:e1:a1:86:03:78:d0:ae:ce:40:75:49:0e:a1:1e:c0:4c:
86:d6:06:7e:57:73:5d:40:b1:ee:8e:ab:4b:ab:1e:14:4c:73:
82:ec:21:76:4a:19:70:d6:5c:a2:69:ca:8e:bf:ef:46:eb:99:
4f:55:e8:55:c1:7a:f5:22:6f:ae:ce:0d:3a:19:c7:ed:6c:0d:
96:22:8d:b2:db:d9:f8:cf:de:d3:bf:fa:27:ab:d4:49:f5:f8:
dc:00:ea:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:14:08 2025 by rpki-client