Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
File: F-ad3CmgWyxF7jzFojQLLkxtrV0.mft (raw, json)
Hash identifier: BUUqo/qhHvwTjKISEE/Vpl1zicO0sEP6KfuDRv9VWkM=
Subject key identifier: 11:A7:00:02:40:06:28:52:3A:63:D1:57:96:65:E7:99:AA:2B:A8:85
Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Certificate serial: 0198499C558FBBABD0856DA12CD1EE55AD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
Manifest number: 08B9
Signing time: Sun 27 Jul 2025 02:00:38 +0000
Manifest this update: Sun 27 Jul 2025 02:00:38 +0000
Manifest next update: Mon 28 Jul 2025 02:00:38 +0000
Files and hashes: 1: A8Ej05bPXSyJSutko6zMXi_LdTs.roa (hash: l1Np2vyuCibE5G3ZNC4CZuxMVOv5Q0qw24MUV/m5PcU=)
2: F-ad3CmgWyxF7jzFojQLLkxtrV0.crl (hash: vrnJKTC6q0t7djd1LSyYajx5abR9zpVZi+FcHIw5+mE=)
3: LrktV_MNLgMuzH072PMIh7VuEn4.roa (hash: shYF8grlz0KlYGSJ/aVE66ppgDECTuvjQ5MpA1IvAJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:55:8f:bb:ab:d0:85:6d:a1:2c:d1:ee:55:ad:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Validity
Not Before: Jul 27 02:00:38 2025 GMT
Not After : Jul 28 02:00:38 2025 GMT
Subject: CN=11a70002400628523a63d1579665e799aa2ba885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:35:38:17:d6:97:2e:70:3d:d7:af:0d:0a:
f6:17:20:c1:d2:13:bf:52:62:fe:7c:a1:6e:9e:55:
86:10:5f:0d:c1:49:e1:c7:94:1e:12:9d:17:19:d2:
55:d9:37:a4:6d:d5:04:82:2c:a1:a8:87:9d:8a:49:
f1:a3:15:0a:46:8b:c6:f8:00:74:37:07:49:fb:10:
62:ac:55:e9:b3:52:a1:0d:9f:e6:f3:22:e7:ab:4f:
60:07:22:97:b0:70:36:33:ea:4b:08:de:30:23:a0:
1b:0b:ed:e8:46:17:a4:7d:bb:b3:86:40:5c:9e:70:
48:b4:dc:4b:2a:e6:ec:24:6f:8d:f1:77:71:95:d1:
99:12:32:9b:67:92:58:e0:18:73:a9:83:08:6a:76:
3e:fa:a4:bc:9c:81:fb:28:0a:83:0d:d2:57:67:4d:
a2:9d:a0:43:36:f2:61:51:35:0a:8b:18:38:0b:00:
09:99:d1:c3:4a:87:c0:3c:a9:b0:71:4f:e4:42:1d:
94:c4:8c:8f:21:f0:d7:ef:ff:e2:b3:d1:02:fe:90:
2e:b5:38:46:3f:c5:22:49:ce:a5:d0:d0:14:14:0e:
b0:d8:cc:62:71:11:dc:4d:41:6b:ac:2f:48:3f:ca:
65:87:71:d5:b3:43:a3:26:2b:18:b7:30:5f:b2:dd:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:00:02:40:06:28:52:3A:63:D1:57:96:65:E7:99:AA:2B:A8:85
X509v3 Authority Key Identifier:
keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:13:95:d4:68:ba:df:25:78:3f:25:a3:82:cc:e1:15:1b:d3:
8f:75:9a:f1:3a:34:a7:25:0c:17:b0:2f:36:3b:62:a3:71:06:
f2:b3:90:47:75:d3:f2:a9:3f:0e:34:02:18:67:b2:87:08:ae:
a4:5f:f4:dd:a1:84:f2:34:f8:9c:58:f1:1f:7d:06:cc:97:d3:
d9:ad:29:69:ea:aa:6c:ed:b7:b7:a8:5f:e7:69:d8:2e:5f:3b:
eb:8d:ec:18:2d:7d:f1:83:3d:28:11:97:cc:eb:ac:ed:5a:de:
25:4d:86:a6:d8:32:aa:cd:99:6d:6d:79:97:15:47:bc:9f:fd:
8d:f4:49:f0:59:aa:e6:53:a2:3d:03:2f:1c:03:9b:0f:7b:5f:
b0:af:23:77:ad:80:11:74:7e:d2:10:f5:2f:af:59:c9:45:e4:
de:e6:8d:76:02:af:c7:92:16:fb:e2:7e:d2:97:6a:35:43:7f:
67:87:f1:73:95:f2:fa:cc:46:49:4c:d0:15:e8:86:7d:f0:44:
b2:75:5a:85:b2:0e:18:38:d4:21:39:7f:bb:69:6f:cf:01:f5:
f1:97:3e:f6:37:e9:b2:06:3f:c1:20:4f:23:c3:2f:9b:5c:a8:
d3:42:49:a1:d6:0d:d0:25:8b:f7:a1:1e:66:98:8a:63:08:8e:
22:9e:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:56 2025 by rpki-client