Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: 4+pBFoZFi6PNDxolf8m3/d+C6OlVY8e6PGMAth7t714=
Subject key identifier: EB:C9:47:91:E5:E1:87:83:0B:64:F3:2D:DA:7E:B0:34:DB:3F:6B:C4
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 019846D280DD2703B32D7067760080B32855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 08CA
Signing time: Sat 26 Jul 2025 13:00:57 +0000
Manifest this update: Sat 26 Jul 2025 13:00:57 +0000
Manifest next update: Sun 27 Jul 2025 13:00:57 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: 3IRshg7lRwzgis511w5ZCVnLiHaw1FCp+fBB0xYG3mQ=)
2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:80:dd:27:03:b3:2d:70:67:76:00:80:b3:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Jul 26 13:00:57 2025 GMT
Not After : Jul 27 13:00:57 2025 GMT
Subject: CN=ebc94791e5e187830b64f32dda7eb034db3f6bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:e1:30:61:11:47:94:8f:e8:66:c8:b2:a6:
dd:73:77:11:c5:0e:0b:75:f1:11:04:64:0c:6e:9d:
ed:10:d7:9d:00:62:51:bf:8d:fb:43:bf:0a:8f:77:
81:f0:28:b2:8a:9a:09:3a:37:a5:eb:c2:05:b6:7e:
b2:a3:92:dc:d8:a0:dd:9c:c1:be:62:6c:6a:b0:08:
e3:d4:5d:7c:b8:a3:e5:05:ea:23:82:c5:e6:55:e0:
15:11:83:9d:64:2b:52:2c:39:02:37:7e:5f:32:5e:
1d:0e:13:93:79:2f:23:7c:68:5a:d7:59:2a:6b:2d:
b6:fd:5e:0c:00:83:ef:9a:6f:a6:46:ab:92:38:8c:
b7:7b:14:3d:73:37:e8:65:52:35:2c:32:99:92:3f:
0d:36:c4:bd:e7:9f:38:db:26:f2:ef:45:ad:dd:c4:
75:ca:c8:23:53:07:6c:50:38:f5:f3:ef:9e:77:28:
ae:a1:36:f6:f1:f2:d9:87:27:95:b4:d0:af:8e:f9:
90:a5:8a:c9:49:51:b7:37:3d:53:18:fe:37:98:78:
89:5e:f3:ae:66:f1:9c:8f:d9:d3:ab:28:5d:93:c8:
f2:e2:ba:4e:65:d4:58:31:f8:cb:da:ea:2a:b0:bd:
2b:43:ca:a3:65:fc:c9:f7:22:24:ca:40:19:e0:42:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C9:47:91:E5:E1:87:83:0B:64:F3:2D:DA:7E:B0:34:DB:3F:6B:C4
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:65:a4:99:cb:82:3f:cf:49:54:78:4d:8c:5d:a2:53:03:
a0:6e:48:37:82:b0:3a:73:50:17:40:18:37:54:bf:51:85:0d:
66:c1:98:3f:5b:c7:4a:92:b1:e7:22:e4:7d:38:25:ec:b9:fa:
cf:81:f2:e2:4f:f8:f2:c6:7e:78:0d:ed:87:fa:13:6d:d7:69:
9b:9f:d2:55:4b:7e:1a:f1:07:69:19:bd:92:5c:f2:7a:f4:ed:
bb:6f:f2:79:58:93:41:f0:e5:78:41:94:3b:47:ca:56:be:37:
2b:42:1f:46:5d:4f:d7:35:92:86:03:0f:3c:0d:75:eb:ea:e1:
e0:04:82:6f:df:d8:7f:cc:c4:d7:cb:81:2c:b5:62:b3:4a:24:
f1:f2:0e:69:31:05:90:11:26:6b:0a:c8:15:ab:ed:14:7d:ce:
8a:88:be:84:34:3d:00:dd:6b:1a:01:9a:44:4b:30:1d:cd:36:
49:93:80:16:80:2b:41:0f:cd:2c:01:96:3b:41:f7:be:f6:57:
60:6a:3e:a3:ad:84:68:9b:df:02:d2:77:91:2b:99:fa:96:ba:
1f:e0:ae:0d:38:19:27:73:6d:70:56:97:f0:ae:7f:98:05:4c:
d0:b3:f5:d9:67:cc:2a:1d:08:51:c6:66:d9:a7:29:31:e6:04:
76:1c:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:43:32 2025 by rpki-client