Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: Ev2SaKJfq5PXs5PsSQEsvSQoaHADSSJ3wz3oRQA1B5Y=
Subject key identifier: F2:D0:90:76:F5:7C:1C:AD:70:AA:E5:50:E1:7B:9F:62:85:7F:74:AA
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 01984AAF1850785C4CF806DE39900162B894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 056C
Signing time: Sun 27 Jul 2025 07:00:45 +0000
Manifest this update: Sun 27 Jul 2025 07:00:45 +0000
Manifest next update: Mon 28 Jul 2025 07:00:45 +0000
Files and hashes: 1: AJ5wMI6kFAAGgXfPHZAVtLCSnP8.roa (hash: O5F5OKdgmFhYvl6NemyAslo9muG5v3CdZb38avB1q8I=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: QnC3NcGjTeT3kd6ZF6G86tZlzS0O2axXourjbn6Dhl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:18:50:78:5c:4c:f8:06:de:39:90:01:62:b8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Jul 27 07:00:45 2025 GMT
Not After : Jul 28 07:00:45 2025 GMT
Subject: CN=f2d09076f57c1cad70aae550e17b9f62857f74aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:25:3c:f1:f9:1c:0b:36:a5:80:84:2b:6e:
06:96:14:88:8f:4b:b5:20:f7:26:80:1c:ff:c2:bf:
c1:71:98:87:19:91:00:72:d3:4a:72:f3:fd:4d:3f:
3f:04:2e:6a:ea:aa:2a:e3:aa:29:60:b1:84:93:03:
ce:2b:d1:65:cf:52:fc:9a:16:08:cb:dc:3d:23:39:
53:73:8b:b6:86:d4:e9:48:6e:15:84:9c:92:80:90:
36:cc:c3:9c:68:71:48:42:d5:c8:e5:9e:2e:38:8d:
91:3c:77:42:ea:db:b5:9f:c5:f4:cd:c8:ce:12:52:
e1:84:e0:8e:df:bb:60:3c:cc:08:09:50:e9:10:21:
da:90:d8:55:c6:73:ab:d1:9b:91:42:85:7a:fc:08:
dc:01:f1:a0:d2:57:18:43:3a:91:85:dc:73:3e:ff:
59:3c:f5:b1:e6:ba:5f:d8:50:1c:5b:38:67:e8:8b:
f1:4e:d9:b0:6b:51:0b:a8:fd:30:d7:35:b8:e8:ef:
ca:93:2c:89:16:c7:61:a0:c0:80:d3:12:bf:2f:54:
67:2d:e1:05:74:cf:82:23:e9:3f:31:2f:63:1c:42:
48:c0:28:aa:12:c6:18:7f:c8:0f:9b:0f:76:7b:29:
c4:23:7d:e2:95:06:72:0a:25:92:8d:ed:70:d2:26:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D0:90:76:F5:7C:1C:AD:70:AA:E5:50:E1:7B:9F:62:85:7F:74:AA
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:31:19:d4:ed:e4:93:ad:0d:5b:d3:c3:46:71:a8:3a:03:8d:
0c:81:bd:08:ae:dd:51:78:35:a5:c6:14:c1:81:e5:58:76:0d:
22:52:24:6f:8d:23:26:b9:b5:af:dc:99:fa:16:58:56:2d:d6:
59:31:de:3a:67:de:bc:12:39:de:e1:25:c6:6f:b8:1d:5e:cf:
b7:9f:d9:bd:19:bf:de:28:fe:ce:3d:95:20:e8:35:f8:33:c7:
f5:a1:fe:6e:a3:2d:9d:cc:a8:73:8d:2a:48:7a:5e:9c:7b:4e:
a5:7a:7a:02:c1:f2:18:95:8c:71:94:84:b0:e6:cb:00:63:6b:
68:f5:89:96:e8:13:39:2b:83:07:1d:37:e6:98:13:c8:70:97:
8a:e7:86:e8:47:af:02:c2:5c:0b:90:89:a1:3c:c2:09:d3:32:
cc:2c:e1:4c:1e:c0:12:63:15:8f:85:38:e6:6e:0f:3f:98:3f:
c5:ea:09:b8:77:d5:f5:0a:75:7e:a3:f5:19:ff:e4:69:a0:42:
c6:41:e4:9f:8e:fa:6d:79:e3:64:2b:3f:6d:ed:6c:88:50:64:
21:30:e5:d1:cd:14:e7:65:ec:5f:06:a6:cf:29:08:95:e1:a4:
3c:36:5b:dc:7d:86:1b:af:99:0c:59:c1:96:7f:22:12:de:12:
60:b9:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:20 2025 by rpki-client