Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: K0xYtfKVJ7xmxGLey5JoiNLdEbOIeoef36mvBC87/9Y=
Subject key identifier: A3:82:3A:5B:F8:B3:EE:53:F6:75:95:30:6A:EA:18:72:09:5B:E3:6D
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01984A77F451EB96348A20199D1E68C18491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 137A
Signing time: Sun 27 Jul 2025 06:00:31 +0000
Manifest this update: Sun 27 Jul 2025 06:00:31 +0000
Manifest next update: Mon 28 Jul 2025 06:00:31 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: jntVjbL+/FbtWFz/HZRMytgy9t7JsL/4oqe3ClplM0Y=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f4:51:eb:96:34:8a:20:19:9d:1e:68:c1:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jul 27 06:00:31 2025 GMT
Not After : Jul 28 06:00:31 2025 GMT
Subject: CN=a3823a5bf8b3ee53f67595306aea1872095be36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:6e:be:55:b8:b4:01:90:b5:e0:d7:79:52:
7f:fb:9d:1f:66:34:3c:e8:8c:fd:c7:7a:52:64:1d:
ae:eb:80:22:e1:ca:c2:03:9a:28:96:5c:e0:83:6c:
69:b5:9b:c9:ee:00:00:e6:ce:52:99:22:75:8d:4d:
21:94:ac:14:f6:d3:cd:ac:38:ea:a8:4a:f2:bd:bc:
57:45:be:5b:a8:b6:e4:bd:3f:6c:89:c9:d5:12:c8:
9b:9b:06:55:8d:24:b7:18:70:2c:14:75:ae:70:53:
f1:fa:b3:03:5b:a9:73:19:35:e8:4e:91:92:29:5d:
93:5a:18:0b:5a:c5:33:23:8a:3c:b9:2b:73:53:93:
7d:fb:47:07:33:a2:cd:2d:2e:45:de:f3:fe:08:0a:
bd:5e:cc:9b:2f:67:a4:f6:06:27:a7:54:99:0e:26:
b8:c9:e5:9d:1f:d0:a1:d4:81:64:58:2c:a5:38:13:
ce:48:0e:fd:56:11:75:f4:4f:8f:81:e8:a8:cf:46:
7e:91:d2:a5:4b:e1:e6:df:1e:0f:d5:6f:4a:ac:c4:
f9:06:cf:d8:76:a7:f3:e5:c7:5c:cb:37:a4:7f:32:
45:be:6b:a2:f0:29:8e:4a:e2:69:0a:16:68:5e:5e:
ab:e4:4e:6d:7c:c4:d1:4b:6e:8e:9d:91:64:ac:db:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:82:3A:5B:F8:B3:EE:53:F6:75:95:30:6A:EA:18:72:09:5B:E3:6D
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f1:df:e2:71:ac:57:14:1e:58:74:86:4b:9d:bc:65:d0:65:
36:b7:3a:0a:8f:f8:41:a2:d4:5d:d0:bd:23:7d:12:56:af:d3:
3c:a9:70:01:09:72:88:4e:a5:39:42:cb:69:f1:57:41:4e:3c:
35:cc:76:21:23:e3:ac:3a:c1:2e:6d:6f:6c:60:ef:bf:47:27:
86:36:e6:45:ba:a6:d1:3a:73:f0:0b:e4:1b:c0:d5:5d:5d:10:
5f:4e:fc:6d:40:05:da:58:1a:08:bb:00:b1:d2:db:db:f4:7b:
4f:ca:35:a3:10:05:30:76:78:b1:7c:08:33:7d:99:17:67:40:
79:be:88:dd:d4:d1:43:d0:6f:2c:91:13:6b:c1:ed:30:e1:1f:
ce:b3:4a:4a:7e:52:73:c7:62:d3:cb:41:ce:71:67:45:23:10:
21:df:71:a5:51:8c:1d:6d:dd:f9:33:e5:5f:ab:ee:a0:cc:39:
c8:90:9b:70:37:b6:e0:e1:d0:21:68:6b:65:78:8a:e0:0a:fc:
b8:b7:40:58:b4:61:72:4f:9e:28:50:4b:44:49:1b:9b:80:f4:
47:bb:90:38:fe:8c:14:31:0f:83:ff:a6:31:aa:a8:88:ca:43:
37:8e:cc:66:ed:da:7c:17:55:f7:40:90:7b:ba:d1:f9:38:39:
54:15:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:24 2025 by rpki-client