Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: /6T1G3tVAnfLnKab9Bd7B4arVIKBrYjEhFbYcNPeggM=
Subject key identifier: 42:E6:B0:F7:EB:D8:C6:A4:01:77:12:A2:D9:D4:42:B9:C6:01:66:27
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 019849D3607C829965950366A8DE7CEB4FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 0342
Signing time: Sun 27 Jul 2025 03:00:46 +0000
Manifest this update: Sun 27 Jul 2025 03:00:46 +0000
Manifest next update: Mon 28 Jul 2025 03:00:46 +0000
Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: u5y0Yqc1qjAzAEK0Rh3zIRdezRcwZEP4Vu5iaWwZCX4=)
2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:60:7c:82:99:65:95:03:66:a8:de:7c:eb:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Jul 27 03:00:46 2025 GMT
Not After : Jul 28 03:00:46 2025 GMT
Subject: CN=42e6b0f7ebd8c6a4017712a2d9d442b9c6016627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:2c:11:a1:1f:4b:95:1b:ef:bd:43:1c:f9:
b7:fe:1f:fc:70:49:88:cb:5f:e4:91:32:ee:9b:11:
9c:29:86:9b:a1:24:2f:c8:6c:b4:df:d0:9d:b1:8a:
25:d9:40:32:52:f5:06:db:0a:b1:58:a1:c4:81:e0:
a4:f2:7a:90:33:73:90:a6:c9:76:7a:52:7c:ea:b8:
5b:f8:fe:2b:48:f1:ec:d0:f3:34:4b:c2:e3:86:c4:
f5:b5:45:30:e2:e2:f2:94:f8:c7:27:41:cc:08:fd:
0a:ae:08:de:f5:e5:fa:56:1a:e3:71:16:0a:a3:e0:
61:c5:54:55:47:d5:ef:d6:8a:dd:0b:cd:81:e8:0b:
d5:dd:68:39:34:01:b1:bd:1f:52:9d:f6:93:1c:35:
bf:b7:04:5b:56:17:ac:51:5e:68:27:f2:57:3c:54:
7f:d0:73:ce:20:e0:44:8f:fb:73:ba:59:19:be:54:
2a:f0:f1:c7:d8:61:86:7f:d5:1d:90:66:da:fb:41:
a8:88:72:1b:d0:03:ec:23:fb:7b:40:de:57:13:cc:
e1:39:9b:bd:8b:d3:54:21:25:58:5a:8f:a8:01:44:
4b:76:76:be:b0:94:a2:15:2b:16:09:0d:4d:93:a6:
43:c8:e2:ed:90:6c:64:e6:50:b2:f5:83:a2:91:83:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:B0:F7:EB:D8:C6:A4:01:77:12:A2:D9:D4:42:B9:C6:01:66:27
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e5:05:db:ac:1e:13:1c:6b:2b:c1:df:10:50:c7:b9:c2:69:
bf:23:06:fc:e5:1f:36:99:eb:3b:77:f2:99:6c:65:cd:1b:23:
72:a1:77:56:57:30:5c:b8:91:52:a7:be:d8:b4:13:d2:5b:31:
dd:57:42:d9:04:9a:38:f9:65:5c:1a:2c:b9:9a:39:a3:b0:62:
05:0c:c0:4f:89:22:ae:8d:6c:1e:1c:b5:f3:c8:f3:1d:8e:3f:
a1:2f:0d:ba:7c:38:f6:de:d8:93:81:36:b9:ae:92:ad:57:9d:
1d:85:c9:1c:b7:41:41:99:71:82:79:ca:44:ff:bc:e5:97:23:
9b:74:ae:90:db:5b:fc:03:98:38:42:46:55:f2:aa:36:d8:7f:
23:93:f3:d3:78:fa:85:62:6a:f1:45:c1:5a:bf:e9:87:59:fa:
87:50:ba:58:58:d7:8a:12:98:70:5b:d6:3d:d2:c8:6f:8d:e8:
d2:a7:32:58:98:57:f8:32:8c:a1:69:cc:07:21:cf:d3:00:71:
fa:bc:f7:c0:b6:6c:9a:b6:c8:19:fb:07:23:76:ca:15:dc:da:
43:af:bf:d5:f8:b7:17:37:72:72:b5:c3:37:35:42:c2:01:27:
cb:af:af:be:cc:22:0a:8b:5a:61:72:c2:e7:17:40:3c:ee:1d:
8e:69:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:38 2025 by rpki-client