Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: 83fFESjVmi8VViP84O/axtzdq6sRKvqx0fQy7RSl+LA=
Subject key identifier: 02:E8:AA:3A:8E:62:51:66:8C:66:78:FB:AA:03:B9:39:8F:A8:EB:82
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01984AE56C0CDD9FB8F30BA3CCAB24A951BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 15C7
Signing time: Sun 27 Jul 2025 08:00:05 +0000
Manifest this update: Sun 27 Jul 2025 08:00:05 +0000
Manifest next update: Mon 28 Jul 2025 08:00:05 +0000
Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: zhzTpVLSzuC1sLXFks8Lb2ABAEEosThfsF/diLxL8qA=)
3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:6c:0c:dd:9f:b8:f3:0b:a3:cc:ab:24:a9:51:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Jul 27 08:00:05 2025 GMT
Not After : Jul 28 08:00:05 2025 GMT
Subject: CN=02e8aa3a8e6251668c6678fbaa03b9398fa8eb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:f1:eb:8e:56:e9:bb:ec:56:db:d8:c9:9a:
aa:43:35:74:b4:7a:2d:62:e3:08:1a:77:dc:b7:47:
8b:6c:40:c5:37:c4:b8:f2:1f:b0:c0:80:33:08:76:
69:c7:19:6f:c7:7c:20:39:85:ed:54:ed:17:44:d1:
95:28:25:0e:b3:3a:5b:d6:39:0e:ef:82:4d:7e:84:
ea:09:cc:1d:0a:6a:6b:0c:e6:39:dc:07:c2:37:43:
08:29:63:f8:58:5a:cb:af:8a:e7:c5:0c:07:8a:04:
d7:c5:e4:7c:b0:8c:96:c0:8b:55:14:0b:b0:4e:37:
27:50:48:27:b1:88:d3:a2:34:74:fc:66:1f:94:03:
17:d4:f1:40:e3:de:ae:63:0e:54:99:ca:3d:39:2d:
c0:cd:26:dd:c1:aa:d2:53:cb:01:0d:ba:f9:10:cf:
09:64:37:7e:fb:d4:3d:ca:60:c6:8c:46:b5:7e:53:
11:a5:82:c7:ed:69:f7:bb:86:57:7e:55:57:e3:15:
77:57:64:7d:a6:56:e5:74:ad:49:01:9a:ff:0b:ea:
ac:82:0d:b8:fc:ae:3f:df:51:f8:d7:0d:98:90:52:
98:0b:f1:49:75:f5:39:89:6d:72:cc:80:0f:19:1f:
5b:72:3b:e1:be:fe:a1:1d:dd:73:4c:7e:6c:14:c0:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E8:AA:3A:8E:62:51:66:8C:66:78:FB:AA:03:B9:39:8F:A8:EB:82
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:30:c3:b6:0f:2a:4b:82:bc:4e:20:26:c7:b0:67:a0:92:12:
3c:98:75:49:53:b3:5c:4a:d8:f8:f5:f4:94:89:e1:25:5a:65:
bd:a2:48:ce:6c:ff:14:ab:80:cf:a1:99:b0:fa:e3:fc:66:5c:
38:03:85:48:1c:76:b7:8e:19:59:9c:b5:46:34:90:79:31:34:
79:53:a6:5a:79:24:0f:7e:f7:0a:82:91:86:80:bd:87:7a:66:
28:d5:e5:55:20:25:d0:24:e9:12:26:a2:a5:52:40:a0:c6:ef:
8e:b8:07:95:4d:11:32:62:49:14:04:d1:a6:ad:85:89:ca:bd:
c0:ce:cc:e8:f4:03:ed:27:60:8b:53:a2:d2:e7:ae:ab:ab:82:
27:41:85:ff:cc:c6:db:1c:2e:e1:56:d9:89:c3:f5:18:7e:c4:
fe:43:b5:58:18:f5:90:7d:f2:32:f3:88:c4:4e:7a:a1:c1:87:
be:76:81:ca:5f:af:6c:cf:4f:19:52:c2:07:e0:fa:26:47:1b:
9e:f5:ab:63:2b:c5:7c:68:61:da:dd:21:6d:6b:20:96:c4:25:
c5:e1:1d:fe:fb:38:13:45:00:77:1c:2c:d3:89:e5:d0:fd:b6:
28:8f:f8:59:c5:d6:f6:45:02:39:d0:78:78:c0:5e:76:d2:10:
cf:64:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:24:13 2025 by rpki-client