Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json)
Hash identifier: AYKojA4sMLazWqJ2jHxAaNGjR8Huiz/xFnm61e+keI8=
Subject key identifier: 18:E7:93:63:5F:8B:50:89:30:F4:79:B7:A5:F6:6D:39:DE:9D:80:69
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 019928209085C77B56E75E5500C9E8898C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
Manifest number: 0517
Signing time: Mon 08 Sep 2025 07:00:46 +0000
Manifest this update: Mon 08 Sep 2025 07:00:46 +0000
Manifest next update: Tue 09 Sep 2025 07:00:46 +0000
Files and hashes: 1: 9RdZIw-S-FYoTEGCNtUVTMr1UI0.roa (hash: cuWu4zoZh39hHnMbQsbn1GavX5fkwgR9EpdjwPAYmFM=)
2: C36HYE9g7Segc4lKsITQsAPbk3A.roa (hash: xJXCT5dY3X53zr13t7CE1ukR4VVrDp6NvKtvl+FjEKs=)
3: J9sdBRndgWMXRbtrEj6DzAaduFM.roa (hash: 1mU1gIeMkOu38sOl5UhcF+y7DrqaJPBXlv7kx0JqTAw=)
4: K6r4JbxghClQGiOJgPHD3qM06uA.roa (hash: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=)
5: WLnNiHQkhlfgINfxpD2br98XvwA.roa (hash: meEdE8yNwOSarbCrMNr+5gmR/PbuI8v0hmQMO5QzIaA=)
6: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: FAT0sjWT24y8Wdj5E634gMat1PQY/N0vdoiE9ITn0xU=)
7: jrWoUX2I08t96DUAzMXpfrjbImw.roa (hash: 5fZxekpC+R8XTkzuMqL1WK63VlO9GSurjZzzW/k5L60=)
8: nWYHniVnDldwYunEGsc0VWWiVYU.roa (hash: VRa9zgOVZdpaRaM8P3APLwpP4Czcpn3M9s3Qb5fNEps=)
9: pF_pVy2TIwjzEOlTFDghAKXtbzQ.roa (hash: hczSlLK7qtHA0sxQPsDXkLAUtpEz88IsWfA1PqBcBfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:90:85:c7:7b:56:e7:5e:55:00:c9:e8:89:8c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Sep 8 07:00:46 2025 GMT
Not After : Sep 9 07:00:46 2025 GMT
Subject: CN=18e793635f8b508930f479b7a5f66d39de9d8069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:78:0f:34:cc:09:f3:3a:4d:75:d2:92:3c:
d5:b8:35:ea:e4:94:65:7f:1d:77:c8:9f:a9:b4:47:
f3:1c:3c:33:b0:05:ff:61:b8:66:8b:ea:e1:f3:27:
18:3c:19:99:33:39:64:58:87:7f:f0:b0:64:2c:d5:
84:fc:89:49:54:3a:19:f2:d6:e6:3a:30:38:16:69:
cb:e4:05:16:6c:e8:73:2f:87:5e:bc:c9:16:0b:34:
75:50:31:2e:18:48:23:73:43:1a:5d:d2:fa:84:f0:
b4:15:44:66:62:8b:3f:5c:d5:c4:73:84:4e:35:5e:
27:1f:7b:3d:0f:e0:70:df:bf:4b:fa:ea:e5:bf:13:
e5:df:4a:75:4a:e1:4a:41:7b:14:5f:56:03:43:d1:
87:78:51:d3:e9:07:cb:b5:37:ae:51:73:1a:81:cb:
65:6e:f6:00:5d:9e:1a:a5:7b:b3:1f:70:50:c4:27:
2c:bc:d0:9b:17:98:cd:71:7f:60:0c:79:c6:99:93:
ac:5e:4c:ee:06:74:bb:1b:78:2f:4e:45:39:f7:60:
ab:24:63:e8:e3:19:51:63:e0:d6:34:5e:81:eb:63:
9a:4a:9a:67:32:e3:6c:73:2a:c0:0a:d8:71:71:df:
3a:51:ac:0f:41:2f:99:43:29:ab:18:0e:88:ce:03:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E7:93:63:5F:8B:50:89:30:F4:79:B7:A5:F6:6D:39:DE:9D:80:69
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bb:82:9a:85:29:81:15:3a:ba:b5:de:00:a5:4e:8c:e5:39:
6f:d4:9d:2c:ab:b3:02:7f:13:19:7f:ac:62:52:b0:b3:c2:67:
41:4f:10:0a:fe:6b:c0:95:25:c3:2f:4c:b7:6c:b9:05:e5:6b:
ba:cf:b8:48:f6:e5:1e:2b:a0:e3:7a:cd:9a:fb:7c:e6:e6:ad:
21:c7:bb:18:df:8d:55:c4:b3:33:7c:57:2f:e1:47:25:ff:67:
dd:b8:db:4b:e1:49:96:c8:09:b6:7f:4d:c5:8f:1a:64:83:4e:
ec:5f:a7:63:2d:86:21:78:5d:d1:9a:b5:82:0f:7e:62:10:6a:
bf:e1:70:0f:12:b0:2b:d4:39:15:2b:2b:a7:5c:e4:47:c0:10:
f3:6a:ed:44:7c:9a:e6:97:19:76:da:ff:38:e7:a3:a6:50:85:
d3:34:34:5d:d6:72:88:8b:f7:29:f1:a2:05:ef:81:75:51:7f:
c4:de:3c:a9:12:f1:55:bb:76:b1:b9:45:78:3f:35:22:8f:92:
39:b3:17:03:0f:f4:77:c9:2d:43:5d:6b:d9:5d:05:a2:19:0b:
e4:68:b1:75:ec:5f:ed:dc:f6:d7:b0:52:c0:42:74:25:cd:50:
c2:c7:6b:5f:15:57:cc:92:b0:33:89:6e:c5:a1:16:cc:3a:6b:
1f:aa:3a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:58:14 2025 by rpki-client