Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: VI620cMYXygEikaBk0XIwsHokHcVhrrgaEoOxnoWZSw=
Subject key identifier: 83:3F:9B:DF:71:41:FA:E0:D3:AE:E8:0D:8A:10:09:A8:F7:05:F9:FC
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 019849D3450019575297D4BF545DB69F3528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:39 +0000
Manifest this update: Sun 27 Jul 2025 03:00:39 +0000
Manifest next update: Mon 28 Jul 2025 03:00:39 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: 3YbdoOCRsS973dTw2+FdSkftXvhlvRhCYlZ4erZ6pX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:45:00:19:57:52:97:d4:bf:54:5d:b6:9f:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Jul 27 03:00:39 2025 GMT
Not After : Jul 28 03:00:39 2025 GMT
Subject: CN=833f9bdf7141fae0d3aee80d8a1009a8f705f9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:dc:de:71:ca:06:66:30:f6:c5:ed:b3:35:
69:7a:3f:47:94:0e:25:51:40:da:e8:22:35:34:70:
01:68:b8:30:3b:98:22:ed:cf:57:eb:ef:7c:b0:33:
17:78:76:46:f1:90:94:b6:8e:1f:7e:1b:77:b6:1f:
c7:e0:61:d2:b0:90:33:9f:da:53:6f:b5:c5:37:3a:
65:ce:72:ff:d2:f6:21:66:3c:b7:fd:65:58:5f:c5:
48:48:ab:5e:4f:3a:3c:30:b6:ac:d7:79:a5:b6:5a:
71:12:c5:ba:c2:ab:72:5d:48:1c:9d:ec:5d:df:70:
14:35:98:e4:30:24:bf:2c:c2:a4:1c:5c:2a:d0:8e:
52:2a:6b:6d:89:30:6e:54:2e:8d:fa:f9:7d:df:26:
8e:ca:29:15:d4:03:15:10:ea:da:56:28:76:e6:a6:
20:18:fb:6c:90:e0:bf:0d:b1:cb:3c:78:ba:09:ab:
17:e1:af:28:2c:ef:d7:32:21:11:0b:57:ad:33:c2:
9e:5b:eb:a2:41:11:9f:7d:78:cf:89:62:58:84:41:
90:1a:cd:1a:b5:fe:7a:f0:b8:c9:f1:76:0a:c6:ec:
8c:c3:50:43:ca:d2:c6:44:94:f3:58:b7:0a:32:9d:
9c:74:5a:a3:a2:25:5d:de:70:bf:a4:00:c1:98:64:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3F:9B:DF:71:41:FA:E0:D3:AE:E8:0D:8A:10:09:A8:F7:05:F9:FC
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:e8:04:16:30:ed:db:94:6f:21:5e:fc:00:18:4d:21:da:
a8:3c:87:93:c4:d8:14:26:96:0d:b5:64:b9:f4:da:6e:8e:4c:
95:d5:f6:5d:7c:10:4f:89:20:c2:d6:f5:55:20:a3:dc:a9:ad:
cf:ea:58:b7:2d:1a:c7:db:5f:cb:82:c3:6c:08:3a:ab:4d:8d:
1a:87:d0:9c:19:5c:7c:3d:df:d9:b3:cd:80:87:c4:60:d7:8a:
3b:50:65:9d:a9:95:a0:4c:73:21:2a:e9:67:8e:94:e4:a5:a2:
31:79:c9:84:5a:e2:1c:97:54:3f:47:d3:fb:f7:4b:f0:c6:ff:
4b:fc:10:b0:00:cc:19:1a:ef:30:2b:50:4b:d3:5e:be:86:8e:
90:93:37:cb:ee:17:bb:de:7a:de:14:30:83:04:86:a4:8d:35:
ac:cf:de:5d:4f:f9:44:99:39:31:cd:cc:af:bd:2b:58:3b:cc:
f4:c9:c7:50:bb:24:d0:d8:20:42:20:b5:79:d0:91:37:4b:40:
5f:72:92:76:fe:24:79:04:d0:a1:78:39:f0:78:2d:cc:a8:93:
c7:c7:fe:72:cd:d1:47:2b:0d:c4:ee:70:ce:1d:0d:57:cf:2f:
44:b0:08:1d:35:fb:7a:d7:99:37:6e:b1:8c:81:b8:45:3c:4d:
7e:3e:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:49 2025 by rpki-client