Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: qTcYeONwcmV7LaPL2nqk5BeswqEyHE8yJ+HuizRHzq8=
Subject key identifier: FF:50:39:E3:34:A4:3C:49:5E:61:45:33:D5:1B:4D:6C:4B:84:58:95
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 01984B1C82F42D72DD9B0013C7672418ADB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 0C
Signing time: Sun 27 Jul 2025 09:00:16 +0000
Manifest this update: Sun 27 Jul 2025 09:00:16 +0000
Manifest next update: Mon 28 Jul 2025 09:00:16 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: pPpGgz38gc1eKTf+FZVpAB9+IweOpbps9urFdX+NQv4=)
2: i9PMkFjZgddcdQkvP1yxnZzZAzQ.roa (hash: AH1/HP90I2Jx2/ajhEGYd7uNt41g8Pva2Gq/dNXs1dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:1c:82:f4:2d:72:dd:9b:00:13:c7:67:24:18:ad:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Jul 27 09:00:16 2025 GMT
Not After : Jul 28 09:00:16 2025 GMT
Subject: CN=ff5039e334a43c495e614533d51b4d6c4b845895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:1f:66:41:9a:85:37:2b:40:e3:f1:19:55:
7a:d3:e2:6c:24:4e:b7:7f:9b:14:fc:65:cb:14:3e:
d0:07:a9:c6:d0:00:b1:98:7d:e5:f8:07:56:1c:75:
1d:5c:2d:5e:74:ea:2b:59:71:a9:64:c7:f8:81:91:
65:32:5f:90:be:17:c5:7e:3e:14:91:44:6d:71:a3:
36:9b:b6:80:6c:65:67:ed:b5:94:a9:90:46:aa:f1:
ff:5a:a0:61:1a:01:cc:b5:ee:f9:b7:70:f0:8d:0f:
ef:21:da:02:58:c4:e7:40:d8:a7:4c:39:88:13:31:
82:bc:e3:52:e0:e5:03:e7:22:87:04:9c:16:c1:28:
db:b0:2d:f1:9d:6d:62:74:83:ff:c0:2b:0c:5b:6e:
66:43:61:0b:dc:a6:a6:7a:c1:99:3a:4f:51:1d:7b:
e8:97:b6:8b:fb:58:e4:16:37:87:03:10:60:a0:d7:
8a:1b:d1:d7:76:74:dc:4b:4b:a2:20:87:33:1e:34:
ec:39:16:70:29:79:d8:89:03:e0:f6:0f:f2:dd:51:
7d:54:3c:c7:0d:c4:45:96:bf:7c:02:d0:be:ff:18:
bd:30:48:9e:04:e0:31:fc:2c:e9:50:18:4d:25:6e:
41:f1:7f:b8:dd:a2:7d:dc:e7:18:86:3b:6f:48:8e:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:39:E3:34:A4:3C:49:5E:61:45:33:D5:1B:4D:6C:4B:84:58:95
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:86:5d:d1:52:55:0f:b1:2d:16:7b:46:de:76:fe:49:f8:31:
79:6e:1f:1a:6b:e5:be:37:73:1e:2a:50:01:e9:dc:76:22:04:
6a:fc:16:22:fe:a9:89:82:bb:25:ee:da:24:b5:0e:23:34:2c:
fc:f6:33:7c:38:6e:83:7a:2a:a0:fe:1d:a9:e3:4f:24:3c:87:
af:12:96:93:74:63:99:a1:96:aa:05:3b:24:e7:f0:a3:6d:a7:
32:6e:9e:40:eb:91:14:15:ed:15:2b:4d:89:f4:bf:f3:9b:37:
0b:05:3a:4a:83:e7:52:c6:86:37:4c:73:ab:5e:56:72:f5:50:
92:c7:02:51:83:d6:4a:4a:2d:14:fa:f9:eb:09:78:bb:04:5a:
66:26:9b:39:3f:b5:98:b8:15:99:e9:41:26:2a:5e:58:d1:95:
79:ef:9c:69:0c:4f:15:40:f8:ab:01:81:2a:61:ff:b1:4a:94:
1a:17:a4:fd:62:6f:30:8d:36:8e:30:52:0c:b5:6b:4a:21:5a:
67:b2:66:bb:4d:0e:25:21:19:92:8b:c1:f7:d1:af:fc:58:22:
81:34:ab:a3:8f:e5:9b:51:d7:24:6b:49:b5:8a:a8:bc:04:30:
3b:83:a8:e3:fc:36:ed:91:13:0a:3b:64:f3:cc:01:11:18:62:
d2:0f:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:40:12 2025 by rpki-client