Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: yv1Xm0XR8rhvFDkKl3BT0YeW918bYiDAzxS5LcXOUXk=
Subject key identifier: 5A:F7:BD:DC:F1:20:B9:3A:C2:39:D4:A4:E1:D8:9F:8A:64:99:AF:1A
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 01995A564CF8CC729E788FE4E89B0C8FE498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1622
Signing time: Thu 18 Sep 2025 01:00:29 +0000
Manifest this update: Thu 18 Sep 2025 01:00:29 +0000
Manifest next update: Fri 19 Sep 2025 01:00:29 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: F5O4iLvc0lxcNQNQvs645xrvpK5UF1rUqLeP2IQuT7E=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:56:4c:f8:cc:72:9e:78:8f:e4:e8:9b:0c:8f:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Sep 18 01:00:29 2025 GMT
Not After : Sep 19 01:00:29 2025 GMT
Subject: CN=5af7bddcf120b93ac239d4a4e1d89f8a6499af1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:1d:63:3b:f9:fc:bc:87:71:e8:eb:dc:a7:
5c:0c:3a:3e:6e:b3:1f:a5:ca:6d:b1:4e:12:75:ff:
fe:84:9d:46:02:df:af:b4:dd:bc:bb:bd:62:31:83:
1b:a9:a4:85:f4:f5:82:5b:68:c3:b1:a2:99:c5:0e:
a8:26:fd:b7:7d:68:fb:da:48:6d:10:0e:f5:7b:c3:
12:b6:23:3f:69:24:e3:bf:e3:5b:55:bb:16:3e:c6:
16:88:b4:9c:f3:17:ad:ae:c6:c8:e2:57:95:34:c3:
16:54:35:99:d2:67:5e:7e:4d:f7:dc:51:ed:79:fe:
fe:74:72:88:9b:59:9a:0e:10:58:91:c5:05:b6:87:
36:e9:78:d1:ae:67:42:8b:8d:08:c1:73:b4:97:97:
d3:8e:90:4c:70:59:ee:d6:f5:91:25:9f:c6:0b:bf:
5d:90:e7:c4:fb:2c:d9:a1:4b:49:16:46:05:84:a9:
9a:95:bf:45:ac:cd:a4:04:32:25:b6:ac:1b:0a:c7:
1a:02:47:27:e8:f0:61:e0:f4:b5:c2:12:d8:dc:69:
bb:4d:5e:b9:d5:30:dd:62:2d:63:7e:85:53:79:18:
02:f7:b6:65:5d:3f:8c:69:1a:52:86:63:52:0b:9a:
66:91:df:74:ec:95:99:71:ab:5e:8d:02:ca:70:70:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F7:BD:DC:F1:20:B9:3A:C2:39:D4:A4:E1:D8:9F:8A:64:99:AF:1A
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7f:0c:e2:4c:a5:95:56:f0:c4:48:69:54:d7:93:c7:10:e3:
e0:62:25:f3:8c:a0:5b:e8:6a:71:54:5c:0f:00:25:de:57:15:
70:69:a0:f2:c2:69:10:51:04:9c:06:63:73:a1:ef:6c:1f:e2:
2d:3a:de:e6:09:19:31:71:c5:04:f0:f4:d6:af:c8:b6:e8:5b:
69:7d:a3:c9:31:27:1f:a7:5e:77:43:4a:5a:65:53:90:22:80:
ed:b5:62:f2:26:ba:53:92:1b:33:80:ce:d9:75:21:be:3e:d5:
fe:13:94:88:93:27:05:c6:5d:5d:82:ce:82:67:86:6b:2d:f7:
65:5d:0b:bd:d1:31:44:b2:ad:7d:56:e9:17:2b:a9:d0:bf:b7:
69:8d:53:02:f7:d9:94:a4:fb:d1:ef:64:9a:2b:ec:b0:d7:77:
c9:dc:94:14:3b:e4:d4:59:4f:f0:ac:94:31:d3:15:5b:52:62:
93:24:a7:e2:ad:08:ff:ec:69:65:81:50:b5:1c:df:cb:72:04:
87:5b:07:f4:da:4d:c7:cd:89:66:d2:65:8d:1c:e3:5f:e9:6e:
c7:ec:c2:96:a3:ff:82:70:d8:1b:b4:33:b0:06:ba:52:1a:b0:
10:0f:18:44:b7:3b:95:be:f6:3f:6d:2d:dc:b0:d1:ca:6f:25:
b8:42:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:04:12 2025 by rpki-client