Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: W9zT4OLZbifUf8hNKv/XDH4MGl4vI9AuAKjSwAhZLmY=
Subject key identifier: AE:33:B5:91:A7:36:79:2F:32:AE:F5:2C:92:4D:42:53:8F:71:ED:88
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019844E3820E3C308283509332A25496FE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 04:00:17 +0000
Manifest this update: Sat 26 Jul 2025 04:00:17 +0000
Manifest next update: Sun 27 Jul 2025 04:00:17 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: JC4Rttq9UNcm/Jdxv8qywCCogZxRMxjJZKQPhvij37M=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:82:0e:3c:30:82:83:50:93:32:a2:54:96:fe:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jul 26 04:00:17 2025 GMT
Not After : Jul 27 04:00:17 2025 GMT
Subject: CN=ae33b591a736792f32aef52c924d42538f71ed88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:78:e5:d0:34:4b:23:26:e5:a9:da:0d:e8:
04:17:51:8c:e4:22:c3:ce:28:8c:d2:d3:17:bf:7e:
2f:fd:2a:b8:81:45:e4:88:7c:b1:76:34:c3:36:3a:
16:a8:85:be:1f:55:d7:1c:4d:d0:d8:57:3b:55:ed:
2f:b2:f7:e1:38:20:8e:22:de:4b:1c:53:00:0a:d3:
8a:32:ff:b2:67:86:a6:29:bf:63:ac:ee:df:d7:fe:
ae:c5:4b:6a:dd:10:0e:43:c1:b8:74:e1:cf:27:61:
d6:63:96:9a:68:72:cc:c5:2a:d6:30:94:c2:61:de:
28:d4:e7:ff:17:f6:76:7f:dc:1c:94:94:a3:75:fd:
36:9e:3e:78:74:7d:46:e0:1c:e6:1d:10:8c:c9:1c:
ce:49:8d:6f:75:88:a1:8a:09:da:c3:16:93:27:0d:
25:c8:a6:f4:b9:9f:2f:72:f0:c2:35:b5:73:00:83:
da:68:0f:eb:38:3d:02:ca:98:c7:1a:2c:4c:82:d1:
93:71:6a:ad:ad:87:29:55:b8:b2:64:d6:53:da:4a:
8e:65:b5:91:aa:07:dd:b1:40:b8:1c:ec:3d:d8:78:
58:64:62:cd:0d:74:cc:58:c0:04:7a:64:0f:d1:b7:
32:8d:d1:13:34:26:30:ee:cc:5f:c1:c3:28:32:5b:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:B5:91:A7:36:79:2F:32:AE:F5:2C:92:4D:42:53:8F:71:ED:88
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f1:58:2b:be:c3:91:e3:f8:10:02:64:14:f3:0d:2b:7d:94:
f0:b0:8b:ea:2e:b5:34:52:62:7a:7a:b9:fb:35:eb:25:02:1d:
ec:d5:81:73:bd:28:1d:4d:f6:f5:77:f7:36:38:2b:14:81:8c:
35:ad:e7:20:ed:c7:be:2a:f9:14:8c:fa:3b:54:2c:51:28:62:
30:1e:99:c6:6f:86:0e:a7:bb:cc:5a:06:e9:a3:84:05:05:e7:
4a:9a:fc:8c:08:7b:2d:13:6a:0a:b8:2d:2e:a8:e3:24:2b:6a:
04:29:b5:b0:5f:04:58:f5:90:77:a7:27:bc:4a:be:ab:bd:b3:
45:b4:e8:87:63:37:95:c2:c3:81:32:59:77:33:41:df:a9:5e:
02:74:9a:6b:ca:32:ab:1d:8a:32:91:de:0e:d0:97:34:92:a8:
7f:0e:90:95:4e:7b:47:51:96:65:69:e9:c4:a5:32:8c:87:30:
11:66:66:37:87:98:c8:97:83:41:56:b4:d5:69:b0:8d:92:6b:
58:fb:a9:c1:11:e2:cd:5e:f5:69:5e:93:be:be:33:c4:cc:d0:
65:be:39:4f:1b:9d:82:d9:93:e2:14:f8:33:90:0f:f1:99:15:
c5:47:83:51:f6:f1:c5:d3:6c:21:20:99:88:db:6d:3a:46:98:
c3:02:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:34 2025 by rpki-client