Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: BcPvdOznCBH1rWzkFyN2QWiwLJzQzX8FdmpAbFy7ZRM=
Subject key identifier: 2D:77:FD:12:F7:D7:A9:FE:13:17:65:B5:42:9D:EE:95:5D:B8:5C:0D
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01984777C5EF16C483FAE05379DC02468318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1480
Signing time: Sat 26 Jul 2025 16:01:28 +0000
Manifest this update: Sat 26 Jul 2025 16:01:28 +0000
Manifest next update: Sun 27 Jul 2025 16:01:28 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: 5IfiRIKKLeJgdeu4sHG75TItVasTCy34q2FfO+WG1LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:c5:ef:16:c4:83:fa:e0:53:79:dc:02:46:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jul 26 16:01:28 2025 GMT
Not After : Jul 27 16:01:28 2025 GMT
Subject: CN=2d77fd12f7d7a9fe131765b5429dee955db85c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:2a:6d:ea:3b:1a:ac:4e:04:ac:f3:d8:21:
0c:07:17:37:04:59:63:6c:e8:ad:3c:c7:af:91:7f:
3a:3e:bd:87:e3:7e:6b:3b:2e:25:80:df:5f:a7:7d:
88:4e:de:53:0f:66:cc:36:b5:13:6a:38:d9:81:17:
8c:4d:0d:9c:b3:78:28:dd:c1:82:7e:8e:98:d4:bb:
0e:02:27:0e:50:7d:48:7b:d7:60:9b:e3:55:57:0a:
98:54:96:ca:08:79:fa:a2:29:a1:52:da:2b:3b:c7:
1d:65:2b:c1:1c:a9:30:44:39:9b:e2:dc:04:66:e4:
29:b9:51:91:56:f2:74:f3:4f:cd:f7:09:3b:a0:fd:
84:05:13:b0:17:6f:73:c2:47:10:28:1f:5d:f7:bb:
d2:e8:88:31:a9:9e:cd:75:b2:18:2b:20:0a:e3:f0:
2d:a4:f0:c3:3a:51:0c:d9:64:d0:90:d8:ad:29:4b:
ef:c0:ce:af:64:97:38:f9:d0:f7:78:ec:70:c8:45:
9c:d5:fe:02:c5:36:16:6a:71:5f:d2:14:8d:58:f1:
cb:63:44:64:01:ca:39:84:52:ad:26:7d:4a:f9:20:
e5:ea:58:57:f7:89:23:f8:6d:68:c8:69:6d:f1:3b:
48:99:ce:d4:92:a3:61:92:0d:e1:5c:b6:73:2c:43:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:77:FD:12:F7:D7:A9:FE:13:17:65:B5:42:9D:EE:95:5D:B8:5C:0D
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6e:eb:f0:6a:54:02:f9:3f:62:c4:b9:c5:a2:5b:0d:9f:19:
dd:e3:94:e5:cc:79:4d:2d:1a:ec:a0:6c:3d:ed:6e:58:52:fc:
4e:46:10:98:00:cc:0e:d8:08:41:da:cd:3a:fd:9f:71:ef:4c:
c0:79:73:8a:a9:7f:cd:93:a4:2c:58:88:86:02:95:d8:62:cc:
8e:d4:66:61:c7:be:72:24:dc:e7:13:da:1d:a3:aa:d9:82:5c:
16:29:55:2b:6b:aa:48:ac:b2:31:c5:13:1e:f9:ad:97:1f:3c:
49:ac:86:c5:38:fe:e9:d9:35:57:c2:2a:40:3b:0c:84:49:01:
86:9a:5a:fe:da:e2:45:59:35:36:67:f9:e3:6c:f8:81:b1:0b:
f4:d3:c6:0a:1f:76:f6:d1:7f:d8:02:13:b2:61:86:c9:99:b7:
98:e3:54:fa:9c:f2:2f:4b:30:a6:1e:53:ec:bf:01:3b:11:11:
c9:d2:db:6c:37:7c:c7:98:63:48:3d:23:9d:0e:eb:af:b0:73:
b5:cd:e4:f8:25:a6:de:74:6c:c1:81:93:0f:03:06:77:d0:b8:
48:df:60:24:b6:22:fe:ba:32:fd:68:ef:7c:0e:48:f3:4f:f2:
2f:e2:0b:3d:bb:bd:8b:90:94:ea:ac:cc:24:34:4a:f5:03:73:
56:5f:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:45:19 2025 by rpki-client