Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier: gJ611hdTgnnMDxlmgzh+RT3yp2Y8cbXCoiRdnjwCYyo=
Subject key identifier: CA:CC:47:E8:BB:67:0F:90:ED:32:6B:A3:45:C9:2E:E4:20:A8:B6:4B
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial: 019936812FC8FC6A45B24B7177BB2740E843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number: 04D5
Signing time: Thu 11 Sep 2025 02:00:59 +0000
Manifest this update: Thu 11 Sep 2025 02:00:59 +0000
Manifest next update: Fri 12 Sep 2025 02:00:59 +0000
Files and hashes: 1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=)
2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: 9h0auL4YQHhDCrsPciE8K95llpHV16qw75y9CanJgOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:2f:c8:fc:6a:45:b2:4b:71:77:bb:27:40:e8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Validity
Not Before: Sep 11 02:00:59 2025 GMT
Not After : Sep 12 02:00:59 2025 GMT
Subject: CN=cacc47e8bb670f90ed326ba345c92ee420a8b64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:c6:66:26:7e:b7:e3:4a:d6:45:87:8b:ad:
6d:fa:0e:fb:5f:c8:0d:96:09:4c:18:bb:ef:36:ce:
8c:a0:e6:f6:9f:19:67:fa:e9:ec:10:10:5e:c5:2c:
86:da:f1:f0:c8:37:6d:e6:ef:0f:dd:37:51:5a:a8:
46:16:28:af:94:0a:8c:f4:f5:d0:44:b4:41:6d:7d:
56:ad:82:1a:ab:23:28:43:5d:25:54:ea:2b:ac:c6:
33:2c:b0:1b:39:f5:79:6b:ce:47:8d:5f:8f:1c:aa:
53:2d:45:a0:0d:22:29:10:68:c0:4b:a2:a7:28:eb:
0c:93:cf:d0:e8:e3:00:58:7d:86:5c:c2:10:ac:1a:
cd:7a:3c:d2:03:d6:66:89:de:b7:f4:45:03:09:d5:
90:8a:a4:67:14:85:97:a2:eb:70:07:b1:3f:aa:0f:
2d:91:fe:aa:ec:25:cf:a2:bf:d4:47:0b:e7:f3:92:
b1:37:0c:c3:68:08:d0:bf:1f:47:cd:20:2e:65:ea:
86:90:47:ee:1d:38:15:52:ce:5c:35:2b:90:5c:45:
b6:5d:28:42:7e:88:f4:8c:b8:1a:31:28:8d:18:7f:
c2:cf:f6:92:b6:12:98:23:86:aa:fd:8b:6d:e7:83:
5a:d7:cb:39:f0:0f:ca:4c:69:b9:b9:93:1b:70:46:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CC:47:E8:BB:67:0F:90:ED:32:6B:A3:45:C9:2E:E4:20:A8:B6:4B
X509v3 Authority Key Identifier:
keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b7:6e:05:81:14:12:84:97:d0:2e:f5:e1:f3:e0:c7:2d:02:
5b:8d:b8:21:80:26:bf:b6:2d:cf:3a:16:d2:91:d1:11:cf:31:
33:64:b1:22:6b:af:2b:be:e8:b4:4d:39:61:c9:ae:fb:d6:e8:
d7:85:c3:ae:f4:e3:ff:95:0f:2c:79:8f:2a:f5:b0:7e:fb:4b:
5c:bc:9a:a2:78:40:33:d2:9f:65:d4:8d:2b:9e:98:4f:06:df:
c1:bb:cc:d6:72:94:62:72:65:a9:09:4b:7a:41:70:a5:6e:87:
f0:05:11:17:7e:d6:4f:2d:35:0d:19:4a:50:d7:16:15:46:17:
a7:42:4d:49:74:6c:b7:8c:74:ec:c7:bc:66:32:bb:87:62:ae:
44:c2:c3:90:dd:a1:26:04:15:94:8c:cc:8c:15:8b:56:c4:2a:
2a:c2:fa:75:c8:40:db:15:ec:d5:cd:36:39:57:5a:2b:9c:c8:
f0:90:64:53:61:04:ba:7e:9a:e3:60:31:62:8a:df:d9:b4:39:
21:58:5f:4a:b6:b7:9c:90:9a:17:d3:d3:54:a9:22:fc:be:ff:
fc:c5:a9:a3:34:4e:2e:62:60:77:76:f5:bd:2a:7f:f2:60:8d:
b7:b1:18:c7:7b:2a:16:7c:dc:d6:12:d8:61:a4:04:f5:f8:0d:
b4:b1:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:53:20 2025 by rpki-client