Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: JJinHnlioDfa1R6mnSXmTIcjjssUQ/dNvK7S7U44tSs=
Subject key identifier: F6:D8:AC:7C:38:D2:8F:C6:C2:AC:89:6D:3F:CC:C3:EA:8A:A4:97:2E
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019867027F1928DB5062FCD49AFCE2AC2594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 15A4
Signing time: Fri 01 Aug 2025 19:01:13 +0000
Manifest this update: Fri 01 Aug 2025 19:01:13 +0000
Manifest next update: Sat 02 Aug 2025 19:01:13 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: X45F9cWyuNbK+zoT2WFm+0eOn8yvn7KF6y4QPIMy5mc=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:67:02:7f:19:28:db:50:62:fc:d4:9a:fc:e2:ac:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Aug 1 19:01:13 2025 GMT
Not After : Aug 2 19:01:13 2025 GMT
Subject: CN=f6d8ac7c38d28fc6c2ac896d3fccc3ea8aa4972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4b:21:25:13:06:1b:8f:c2:76:56:8a:4f:21:
0d:fd:7e:04:72:4b:0e:8d:5a:e7:08:ec:cc:eb:1d:
47:c8:fd:61:ec:73:2b:58:a5:60:7b:04:b4:6c:21:
a6:5c:2a:4d:91:f1:a7:03:56:24:42:ae:8b:c5:fb:
8d:08:0e:ba:ee:2a:f7:2b:d0:39:af:c0:3e:39:fa:
b8:3a:fc:9d:56:26:5b:04:95:b0:d7:52:37:90:8e:
35:9d:2b:03:bb:c4:73:1b:01:3c:42:90:24:29:f6:
02:e5:fa:15:e7:75:d0:4b:fb:c3:86:96:69:d1:11:
bf:8d:37:68:50:80:6f:28:0e:12:2d:d9:0b:a2:9b:
4b:b5:72:6c:b0:82:0f:41:9c:fa:17:c3:96:6d:d3:
fe:1b:c0:15:cb:65:dd:13:28:4e:78:70:ff:13:30:
38:bf:de:d2:f9:06:7c:45:d6:fe:9b:15:77:2b:25:
72:f3:c9:dc:0b:2b:22:c0:dc:2a:5e:11:8c:61:a1:
a1:92:02:74:98:36:7c:d2:1b:78:5d:ff:17:a0:82:
29:43:f8:32:dd:a1:30:79:09:d8:1f:73:99:88:bc:
bc:9d:a3:2f:30:b7:f6:de:3d:93:3b:cf:1e:66:60:
f7:a9:18:ec:b5:e7:73:99:c1:32:62:da:0d:f3:c0:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D8:AC:7C:38:D2:8F:C6:C2:AC:89:6D:3F:CC:C3:EA:8A:A4:97:2E
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:36:1a:59:2b:34:95:0e:28:c2:5e:af:6d:87:20:9b:fd:97:
ba:68:a6:1a:c0:a4:b7:c7:05:ad:c7:f2:05:9d:29:d1:00:e0:
38:f5:fb:29:f7:e1:71:f8:47:8a:01:6a:de:cf:36:02:75:35:
bc:6b:02:a1:f4:dd:5a:56:fe:09:6a:c8:a2:fd:1a:3c:96:07:
93:93:ed:d5:f6:bc:68:4d:2d:88:2c:dd:e7:84:1d:26:21:4f:
9a:e9:75:18:26:e2:68:6b:09:e8:66:46:e5:51:cb:a6:89:b7:
cd:37:11:a4:07:df:18:6e:2d:5c:c1:74:27:15:aa:dc:12:bb:
14:21:2e:02:ed:72:65:dd:e4:a9:6f:b9:15:00:b3:ca:76:3f:
d6:2b:c1:29:a0:53:3f:a7:2d:a5:e6:a8:98:a7:cb:f6:b8:2e:
5a:91:79:10:fd:62:7b:96:e1:23:0c:92:ac:2c:70:4d:40:19:
fb:27:69:a9:44:61:b0:55:fb:13:6b:ac:91:74:bf:ca:dd:bd:
7c:92:95:5a:6c:c7:eb:0b:c2:85:ab:82:ce:92:83:ad:cd:88:
51:4c:ba:a6:d5:09:3d:3b:47:ed:30:ac:ec:fc:b8:14:34:0f:
7a:42:86:14:fa:75:13:39:db:07:02:73:87:9c:d0:92:ff:6c:
36:61:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 23:33:25 2025 by rpki-client