Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: 2EcbDD0lDhgadGKW8hbJy9vjl+y3ABbImQStkNWa4Dc=
Subject key identifier: 5F:56:D1:23:85:B4:82:44:E7:EA:58:D8:62:8D:45:66:5D:2B:F3:F2
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 01984AAF1DF085C5B338562790DB70141ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0CBD
Signing time: Sun 27 Jul 2025 07:00:47 +0000
Manifest this update: Sun 27 Jul 2025 07:00:47 +0000
Manifest next update: Mon 28 Jul 2025 07:00:47 +0000
Files and hashes: 1: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: pvmM/3+EGGRqS8QhU5AXRr7sF09aQ4yfKaXYHGZC/LY=)
2: x5BCA2nXSzjfqsyhw28GUZqlIA0.roa (hash: XYC94H5SlTsc3HXQBpsVEd85N9+lJ9Ig2x3jNjrZbWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:1d:f0:85:c5:b3:38:56:27:90:db:70:14:1a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Jul 27 07:00:47 2025 GMT
Not After : Jul 28 07:00:47 2025 GMT
Subject: CN=5f56d12385b48244e7ea58d8628d45665d2bf3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e1:52:50:28:9a:68:8f:c1:dc:1e:fb:70:16:
26:29:85:44:2b:67:bc:58:4a:53:12:04:9e:17:4d:
c4:d9:ac:08:99:c2:9c:d1:1a:ab:63:83:e7:f5:69:
0e:e2:df:2d:ce:12:fc:0f:31:ad:b3:94:0e:b8:1d:
85:ab:24:ba:11:be:8d:43:10:74:e4:14:83:a4:e5:
30:a6:c9:49:a6:02:5b:f0:07:44:05:5e:e5:5d:20:
80:8a:3c:98:9f:d5:64:ac:3e:fb:33:64:e7:71:5f:
33:70:a0:7f:92:fc:df:87:f6:23:ea:0f:68:44:4f:
57:76:68:59:16:7e:38:71:b4:82:de:7a:5c:22:6d:
4e:31:35:19:e2:1f:69:52:4e:20:3d:42:86:80:d9:
e4:4c:8f:d3:61:8f:a1:33:c6:81:6b:7b:0d:3a:94:
5e:89:e3:2c:41:53:1c:4d:7a:f9:49:af:9a:56:49:
6e:8c:fe:8e:7d:14:39:2c:1f:37:d3:10:0a:0a:a1:
5f:7b:f4:fd:c0:86:f6:2f:b9:e1:85:55:a8:0b:9b:
a2:60:37:bc:fa:41:6c:1e:21:b2:22:0f:b5:c6:59:
c7:25:89:d7:c6:69:b7:44:b0:1d:70:28:6e:cb:78:
3b:b0:b3:e2:eb:21:6a:96:df:06:05:ed:2f:2d:93:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:D1:23:85:B4:82:44:E7:EA:58:D8:62:8D:45:66:5D:2B:F3:F2
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:72:cd:ef:92:22:b7:1d:02:42:ae:43:bd:df:75:37:f2:7b:
d0:a6:fe:0e:0a:86:e2:07:d7:23:3b:eb:a3:32:04:55:3d:a1:
de:46:4b:24:e3:6d:7b:6b:f3:a7:35:8b:71:ce:c5:6d:90:2b:
5c:95:68:05:79:26:77:2f:10:a4:ec:0d:8c:ca:4d:13:dc:42:
d6:63:31:4b:00:25:5e:44:08:67:87:d9:14:02:6d:47:83:40:
da:71:45:1e:c0:76:1e:20:2b:b8:66:3d:53:b1:8f:92:51:1f:
f0:2e:82:ca:5e:88:f9:b9:06:0a:b4:85:0d:1e:84:81:d3:fb:
99:2b:db:6f:ae:3f:12:f8:7f:b3:5b:47:c2:e4:a7:3e:58:f3:
07:dd:da:c5:65:a3:b8:6d:07:92:fb:b4:ea:d3:e4:68:f2:4b:
ee:68:ea:6e:fc:83:4a:f5:8e:a8:fe:2d:7a:eb:56:3a:8e:4e:
58:ed:7c:39:c3:d5:21:f6:3d:ed:bc:09:50:bc:4a:b1:fc:ca:
57:a3:80:62:04:4a:2b:33:8d:22:cd:68:08:be:32:7d:d0:ee:
af:2c:d1:1e:65:93:f5:57:6e:a2:f5:17:b1:c0:c9:3d:8b:45:
2a:71:51:ba:b4:2f:ba:97:2d:7e:d5:3f:4d:2d:b4:57:81:31:
47:99:a6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:06 2025 by rpki-client