Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier: JjWe0Grs0Ag7qee5Oy3i4wLVF3IruSKcXtclv2hqApY=
Subject key identifier: 06:91:6F:60:A5:33:5F:C1:78:4E:01:7F:8D:7D:68:CE:07:0D:B3:14
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial: 019848C03D1C76529888F7B3715F77A0A151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number: 03B1
Signing time: Sat 26 Jul 2025 22:00:14 +0000
Manifest this update: Sat 26 Jul 2025 22:00:14 +0000
Manifest next update: Sun 27 Jul 2025 22:00:14 +0000
Files and hashes: 1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=)
2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: yk1f9Z62J9CLS3AoPpGluIf784TMy5pBG0j7kRuAo+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:3d:1c:76:52:98:88:f7:b3:71:5f:77:a0:a1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Validity
Not Before: Jul 26 22:00:14 2025 GMT
Not After : Jul 27 22:00:14 2025 GMT
Subject: CN=06916f60a5335fc1784e017f8d7d68ce070db314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:1e:bb:57:7d:48:1f:f6:f6:04:d0:8b:0b:
f5:37:1c:8b:aa:5d:44:f8:ff:d0:b6:66:05:d9:31:
85:bd:72:32:75:f7:4d:42:4d:a3:e5:87:d2:1f:d3:
eb:f7:25:3a:78:70:29:d6:a8:c8:d0:68:6a:16:d3:
b3:66:cf:29:92:2d:b1:ab:b2:9c:2d:a4:83:b7:90:
4a:80:9f:fe:66:91:59:91:ef:ad:8c:1f:ab:02:2e:
a6:ea:58:56:51:2d:fc:2e:dc:a5:39:52:b8:ae:71:
4b:2a:ca:97:ba:2d:7c:f9:f9:5f:c0:21:2c:07:89:
42:d5:88:70:2e:ff:81:fd:a5:9d:4b:fe:84:8c:a7:
d9:a3:73:88:0a:16:2f:ef:48:de:6e:eb:b6:b5:a0:
ad:f7:ff:77:28:c1:46:8f:86:e9:68:cd:6a:d0:e3:
61:ae:c8:e2:7f:7a:86:ba:cc:81:ec:0d:1d:9f:9b:
b2:c9:58:a2:40:8a:8c:e2:b3:20:70:3f:c1:7a:ab:
61:16:24:28:d8:5d:70:3d:28:bf:a6:a3:e1:09:0f:
af:c3:21:d1:1c:2e:27:f2:2c:5d:84:c4:c3:d3:32:
63:57:ff:82:f6:79:3e:93:2c:5e:ba:ca:63:b0:3b:
5f:f2:76:db:c6:21:54:d1:9e:82:85:06:6b:5b:cc:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:6F:60:A5:33:5F:C1:78:4E:01:7F:8D:7D:68:CE:07:0D:B3:14
X509v3 Authority Key Identifier:
keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:34:5d:0c:a3:56:68:e3:42:e7:58:dd:60:73:4a:fd:24:0b:
20:a5:0a:ef:c7:e1:9a:ba:03:3f:5d:34:07:c0:95:36:6d:4e:
4f:e4:4f:69:1b:e7:b5:55:56:c7:b2:47:30:bb:40:76:62:97:
20:2f:ec:ab:56:f5:89:d0:55:f3:c3:b8:03:39:81:4c:b1:75:
f9:78:6a:c6:47:91:18:b7:8d:e0:7e:a7:94:61:ca:5c:ec:ca:
d5:ba:73:f9:01:5b:67:30:d4:b8:3b:7b:3c:95:4c:64:84:4e:
9f:f4:ea:60:58:53:99:e9:0d:b8:77:c9:c0:b4:92:1f:61:ec:
54:2f:9b:78:92:cf:86:1f:c7:76:a6:c9:14:02:2e:49:72:6b:
4c:1e:f2:96:e7:98:f2:17:1a:cc:a4:51:94:c2:9c:0c:b5:1f:
1b:75:81:ea:08:bc:ee:d9:dc:a4:aa:17:e7:f4:6d:4b:69:91:
c8:04:77:ec:82:d6:98:14:20:95:22:b5:48:8a:25:83:4f:aa:
96:fb:0f:9a:16:2c:10:1c:c1:4d:cf:49:25:fc:c3:6f:b8:a9:
4a:fd:b0:80:12:41:06:02:a5:0d:80:5e:e8:55:79:1e:08:03:
7a:cc:44:a9:b1:96:da:17:66:e4:1c:54:a0:13:a8:d3:b9:dc:
80:c1:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:33 2025 by rpki-client