Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: 5smuxhzj0YBm6v/6ikPn9Db0QOOl+nJO2f7QA43zegU=
Subject key identifier: 89:3D:2F:D5:A1:5A:1E:EA:99:C4:79:66:19:FB:CF:04:E7:94:8A:01
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019844759945EC3E991B96BF9554F4DDB11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1593
Signing time: Sat 26 Jul 2025 02:00:14 +0000
Manifest this update: Sat 26 Jul 2025 02:00:14 +0000
Manifest next update: Sun 27 Jul 2025 02:00:14 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: t48HWhAorUneAdRR4QwCigGAcWg8Sxbkwfnzu1JEtds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:99:45:ec:3e:99:1b:96:bf:95:54:f4:dd:b1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jul 26 02:00:14 2025 GMT
Not After : Jul 27 02:00:14 2025 GMT
Subject: CN=893d2fd5a15a1eea99c4796619fbcf04e7948a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:3e:f5:e3:c5:d0:0c:21:c7:a3:51:b3:db:
26:7a:c6:fe:ca:bf:a5:bb:99:3e:e8:70:61:50:de:
a1:7a:62:0b:74:3c:2d:72:aa:32:c9:54:cf:7c:28:
94:6b:05:d7:ed:56:53:74:bd:81:18:4c:49:d4:a5:
1a:6a:af:60:5c:87:87:28:1d:0b:4b:55:2a:26:d0:
24:89:22:94:ef:72:03:57:1c:dd:ba:2c:24:78:d6:
2d:b1:cc:55:84:27:69:41:f2:aa:96:74:63:75:e5:
b9:27:d0:94:97:76:92:af:46:26:c8:33:37:48:b7:
b0:b3:f9:25:95:de:3d:ba:13:f7:e8:38:fb:88:f6:
17:45:c2:26:00:d2:8c:16:83:c0:33:b5:7c:91:72:
ff:2c:7c:0f:fa:15:12:c1:30:71:8a:2d:a8:e9:da:
b0:23:23:d7:3e:8c:25:f9:b0:06:ad:64:11:5a:c1:
56:36:00:ca:8d:53:3f:50:74:f0:90:16:94:cc:39:
42:a4:47:30:a0:0b:41:b4:3b:78:4e:85:9d:62:1e:
53:a9:3d:71:66:03:04:b6:fe:a2:5f:02:37:61:e1:
14:af:93:9c:f1:de:38:11:c1:2f:d3:1f:c3:52:20:
c7:1c:86:ac:87:df:2a:71:f7:a0:0c:33:ec:83:f1:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:2F:D5:A1:5A:1E:EA:99:C4:79:66:19:FB:CF:04:E7:94:8A:01
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:74:73:dd:85:3b:85:f5:5a:97:b5:ce:a1:9c:84:bb:87:
ba:15:0b:bf:5c:45:27:e5:6a:79:8f:75:0a:74:12:c8:e0:94:
06:8d:93:5c:df:7e:fc:a3:36:75:58:c5:de:0f:4f:0d:1b:3d:
ea:06:4f:a5:a8:4a:aa:0f:85:6e:27:0b:19:69:85:4c:ae:f2:
aa:2c:13:a7:0b:76:e7:84:15:9e:05:f5:76:fe:41:f7:54:17:
02:38:1a:f2:94:35:b2:03:0e:40:15:b9:81:22:d1:2e:c9:83:
68:ec:04:6c:5c:8f:2d:da:48:4d:01:b0:26:f4:39:f9:f0:6c:
89:86:b5:a2:32:0d:95:49:f7:82:bf:cd:f2:c1:2e:67:44:89:
6f:05:29:8d:aa:bf:bd:1e:c1:21:07:07:f0:ab:b3:10:88:33:
17:d5:2a:f0:72:96:81:54:10:b4:d3:4f:02:9d:0e:65:c2:b7:
6a:53:1f:13:c1:4f:78:48:41:1e:fe:ba:79:f0:af:f7:18:04:
f5:81:d2:59:3a:01:23:3f:69:84:56:eb:05:2a:34:02:0a:54:
94:a0:63:e4:1a:e1:c4:38:3a:0d:da:46:18:d3:cc:53:13:7f:
ec:f1:04:1b:55:76:53:46:2f:07:db:f5:77:48:d7:06:4e:00:
1e:1d:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:20 2025 by rpki-client