Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File: frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier: Ar7ptvyB98fynWWuqmrGSA5VoqGQb2uCxtWppIA6TUs=
Subject key identifier: CA:D1:8F:2C:47:96:58:54:25:52:6A:AB:7B:3D:83:1C:DD:0B:29:F3
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer: /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial: 0198477696D1625581CEEA66B76F1D6ADBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number: 0264
Signing time: Sat 26 Jul 2025 16:00:10 +0000
Manifest this update: Sat 26 Jul 2025 16:00:10 +0000
Manifest next update: Sun 27 Jul 2025 16:00:10 +0000
Files and hashes: 1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: WAmYZlqZNYlHoix28qeK683x1wRMx6icmjeTCZUUgl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:96:d1:62:55:81:ce:ea:66:b7:6f:1d:6a:db:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Validity
Not Before: Jul 26 16:00:10 2025 GMT
Not After : Jul 27 16:00:10 2025 GMT
Subject: CN=cad18f2c4796585425526aab7b3d831cdd0b29f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:7a:c1:29:8c:d5:49:b7:69:91:8b:61:80:
07:31:ef:47:1e:a2:2a:6d:27:06:ee:3f:4d:0c:19:
85:ab:ea:b4:b9:ed:5c:05:37:44:ab:3f:e4:d3:38:
94:86:76:98:b1:68:36:7c:33:b5:d7:47:6c:93:22:
ec:51:0f:ea:92:17:77:ce:23:75:d2:ee:fe:53:81:
df:f4:8a:99:38:c7:75:f6:62:20:df:bd:49:6a:a6:
79:b6:7e:3d:dc:16:78:87:4f:35:cb:76:8e:f9:1b:
ce:c4:c8:a2:ca:f2:fa:7d:08:3c:69:1c:a9:98:d2:
38:80:1f:9a:e5:35:c6:5c:a0:54:55:0f:dd:33:2b:
76:82:6f:f5:bc:c7:d3:97:42:6a:3f:48:89:c6:07:
c2:39:c2:c6:96:6d:a3:b3:d3:3e:0e:07:ab:57:7c:
17:a5:a4:7e:cf:4f:e5:ad:27:5f:23:c4:d8:d4:9f:
ea:e5:07:11:f1:31:d5:b9:13:0c:a5:e6:2d:da:29:
44:c0:ca:16:8c:63:da:cb:b9:fd:14:c6:e0:9b:22:
03:87:09:09:6b:21:86:23:cd:c8:64:d4:79:df:8f:
a9:e7:40:8e:98:af:a4:3f:9b:59:04:7b:62:26:a0:
2e:e7:a7:52:96:7d:f6:ba:95:d2:86:00:c0:06:3c:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:8F:2C:47:96:58:54:25:52:6A:AB:7B:3D:83:1C:DD:0B:29:F3
X509v3 Authority Key Identifier:
keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f0:2a:9c:21:c9:8e:17:e5:49:b6:ad:3c:bb:bd:53:88:e4:
78:f1:ce:e2:33:d5:f6:61:d4:d8:d3:8c:d3:fa:1a:88:36:6b:
b3:12:67:3b:de:93:72:52:d2:8c:9e:4a:16:45:8a:68:31:a0:
59:e6:e5:cb:a4:70:47:61:c1:67:bc:29:dd:c5:20:40:97:7b:
48:4a:3f:4f:5f:7c:1a:c4:06:23:73:28:57:b9:58:84:62:47:
6d:66:55:0f:6f:6c:f9:25:a2:01:0d:0f:b9:c6:4d:03:22:b3:
c7:51:28:dc:f7:23:fd:f5:3c:2e:0c:c8:86:94:1d:82:a0:b4:
6a:77:91:c9:64:81:a6:0c:ee:7c:96:bc:97:cb:eb:1e:9f:a3:
18:e3:cf:64:f3:6d:8e:4f:c8:10:3c:29:15:54:3a:dc:a6:b6:
52:15:75:60:1c:0b:b6:b9:f9:06:d4:a0:01:e0:fc:f6:19:90:
be:a5:af:7e:17:9a:9c:aa:97:07:4a:29:27:e7:e1:5f:44:7a:
45:18:dc:0a:d4:e5:87:47:b7:33:ee:58:9a:f5:bb:86:82:40:
ee:dc:67:57:db:fa:8f:d6:5d:d6:f6:b8:b0:60:be:4e:db:0a:
20:e9:05:3c:f8:60:64:10:83:65:24:ab:86:40:70:65:06:fc:
8c:ff:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:22:07 2025 by rpki-client