Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: IjQLmN4BPNY5Oj6Xm7V4cTGAjuIoF3mQrNuLrlBdXj8=
Subject key identifier: 7F:3A:86:D8:E8:6E:2B:1C:84:2C:06:D2:E3:43:C9:6F:5A:BB:98:CB
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01984AAE9117F047A770CE772915F7423BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 0FEB
Signing time: Sun 27 Jul 2025 07:00:10 +0000
Manifest this update: Sun 27 Jul 2025 07:00:10 +0000
Manifest next update: Mon 28 Jul 2025 07:00:10 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: LIqHF86yoKAkpN4SI/QOTxgBACyDCihTH658HioQncI=)
2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=)
3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:91:17:f0:47:a7:70:ce:77:29:15:f7:42:3b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jul 27 07:00:10 2025 GMT
Not After : Jul 28 07:00:10 2025 GMT
Subject: CN=7f3a86d8e86e2b1c842c06d2e343c96f5abb98cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:af:d4:62:39:5a:29:61:3d:0b:9a:b5:df:
82:27:b0:c2:19:36:5a:5c:70:83:7f:a2:aa:4f:66:
b5:31:f3:44:1f:1c:dd:0c:06:62:9f:e8:0c:77:b6:
aa:7c:f9:02:5e:61:24:99:36:34:ee:f9:f6:7b:27:
6d:f4:ae:2a:5c:09:a6:23:6c:47:ba:ed:1e:1d:7b:
43:8d:56:80:4d:c2:42:27:48:c4:6f:af:e7:2a:74:
cb:be:83:19:1b:58:ce:59:52:30:53:48:fa:2e:94:
c8:cd:3c:2e:0a:db:b6:0e:35:4d:ef:24:35:42:1d:
2e:e9:30:95:a3:99:1e:4d:e8:f5:08:d5:cb:ec:50:
00:da:5f:c1:9a:f2:f4:eb:b0:d9:4e:01:23:da:29:
c3:58:72:c9:d8:5c:07:dc:ac:00:81:56:d7:8f:7a:
e9:9d:40:4a:9d:87:ef:3f:68:35:c6:a1:56:99:b9:
9f:2a:12:57:8c:81:0d:61:09:2f:f3:b7:a9:f2:55:
4a:8d:16:96:2b:3c:08:7f:a1:79:a2:3a:11:05:c9:
27:a3:07:92:3b:46:8a:9c:b6:59:da:05:f0:91:f8:
f9:e1:3e:a5:8e:05:23:10:d0:7a:73:79:9d:89:6f:
67:8c:53:99:c0:29:27:95:84:46:4d:ea:ed:7f:b6:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3A:86:D8:E8:6E:2B:1C:84:2C:06:D2:E3:43:C9:6F:5A:BB:98:CB
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f6:39:f9:c6:b0:d8:2a:4f:ac:fc:32:c0:f8:04:7e:1a:28:
f2:04:eb:ad:aa:a2:ef:7e:e2:e4:85:ee:53:26:94:93:bf:78:
8d:c6:fc:f2:2d:7d:7a:5b:70:e5:0b:15:70:d2:7c:e0:81:ed:
31:d3:4f:b4:c9:c5:b6:9b:a6:ff:a2:02:ef:50:77:64:5d:a8:
97:99:34:da:b7:5e:92:10:ba:ff:bb:27:58:09:47:1b:6b:70:
91:31:49:cf:f7:09:3b:04:58:64:3c:2d:d1:17:54:9d:0e:e7:
00:59:0e:11:b3:c0:4f:0a:aa:62:ef:d9:6c:86:3b:89:c7:8a:
23:d6:e7:af:f3:fa:27:b8:a2:b8:42:ce:80:8f:65:5a:1a:78:
f7:bc:ec:c5:10:6a:99:cb:ca:2e:25:9c:d1:f4:86:6e:9b:5f:
87:55:79:91:b3:ef:9f:fa:39:bb:45:1a:d4:ef:01:d0:dc:73:
11:e3:44:c4:ae:f4:97:3a:ee:3b:5f:20:5d:24:53:d0:8c:9a:
2b:5f:1d:84:96:be:00:8e:1f:d3:14:72:f4:12:1a:d5:c2:56:
e4:68:83:9e:44:93:0d:4f:54:fd:85:21:51:18:9a:04:f1:f0:
ca:3c:91:d6:78:80:19:13:2c:4d:a7:9b:fc:b5:ff:0f:db:cc:
80:66:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:55 2025 by rpki-client