
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier: 0Iw4A7iaOOILFZOJZGFUj4PXX/XT92RgKlkGL8Qc+ZA=
Subject key identifier: 8F:29:59:4A:63:0F:21:5D:3B:80:74:2A:6A:B4:9F:5E:03:1F:59:7B
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial: 01995040CF2568AA3D2B49B76C0486D55C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number: 0A12
Signing time: Tue 16 Sep 2025 02:00:48 +0000
Manifest this update: Tue 16 Sep 2025 02:00:48 +0000
Manifest next update: Wed 17 Sep 2025 02:00:48 +0000
Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: 5pys3EAAp7shBWroloTx/bkdMrHp9UyOJhkXGiS06MQ=)
2: e64v2Sa7kZCTmVuIe0U1EA1y5UE.roa (hash: 4+uTyAtFS8DAUClwiFHwirOIVJLgQjU/10EzULT806g=)
3: hiAVbhcO1TwVpozBkcEWuw9CQcA.roa (hash: cM6xE/ZqL2V37JUXZnVYtBWEG50dOsPtinGWqXaIJmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:40:cf:25:68:aa:3d:2b:49:b7:6c:04:86:d5:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Validity
Not Before: Sep 16 02:00:48 2025 GMT
Not After : Sep 17 02:00:48 2025 GMT
Subject: CN=8f29594a630f215d3b80742a6ab49f5e031f597b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:47:46:2f:54:1c:ec:6e:d1:c6:1c:5a:af:
4f:31:53:a1:4d:90:98:89:fd:ed:db:61:3a:7b:22:
5f:7f:30:dc:91:b8:93:ab:49:59:02:6a:cb:ea:c0:
84:b4:43:e2:03:62:e9:23:1b:d5:1a:32:97:ce:f2:
ae:0d:7d:d3:80:9f:40:77:77:30:99:3d:a3:30:9c:
6c:46:7f:74:cf:1b:ff:b0:ac:37:97:17:44:73:4a:
5c:5e:2b:f5:8a:64:bc:d4:6f:f8:d3:53:8e:1c:8b:
37:5a:ab:b7:cb:20:0f:ad:1f:6e:5c:52:f4:d3:ad:
39:f6:3f:57:0b:5e:3d:99:aa:0c:04:73:50:98:b2:
fc:8c:90:42:89:f2:ac:d3:37:b2:83:86:20:3a:fa:
f0:22:52:dd:7a:df:39:3f:c3:d4:15:e6:9a:0c:7d:
6c:88:68:86:38:27:a5:a1:00:a8:c7:64:d7:72:39:
8a:3f:dc:7e:bd:6f:cd:64:75:41:d2:ea:23:48:e9:
23:70:ba:d1:6c:f5:66:ce:e0:0c:c8:93:40:17:83:
35:6f:65:fc:4e:b5:f9:2c:ea:14:af:b4:b7:95:f2:
e9:94:9c:aa:32:55:37:d7:bb:1f:ae:57:64:1e:1c:
e1:e4:bd:a8:58:8c:eb:27:82:e2:57:26:5a:f8:65:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:59:4A:63:0F:21:5D:3B:80:74:2A:6A:B4:9F:5E:03:1F:59:7B
X509v3 Authority Key Identifier:
keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f3:75:f1:e8:ec:74:e3:cd:de:46:de:5c:d7:56:fe:ec:a5:
32:5f:2e:48:e0:cf:f5:32:18:d9:03:1d:8b:6b:a6:1d:15:f3:
3b:39:5b:aa:f0:62:cd:e6:76:d6:8f:56:ce:e6:ca:91:ba:2b:
c4:97:91:ea:cc:d6:23:65:79:7b:52:33:af:fd:10:ae:08:1a:
c5:31:1d:84:1a:55:aa:ee:63:e8:6b:b6:6e:19:ca:c9:9b:ac:
fc:a3:61:3d:00:7c:84:4c:42:c3:52:14:47:04:71:3a:45:65:
1c:b2:0a:8d:56:86:5e:c7:4d:19:ff:3f:68:f0:4f:d8:a2:4e:
12:46:c6:28:21:aa:36:1e:89:88:70:67:39:81:4c:5c:ac:69:
5b:80:76:59:3d:3c:d2:da:9d:1b:14:3e:1a:40:47:09:7f:72:
b0:e9:86:39:fc:f8:c6:bd:ac:68:8a:8c:73:16:ac:3a:cf:e0:
15:94:12:4c:a9:a4:d8:90:27:1f:d6:a4:30:09:8d:5f:8b:60:
36:05:e9:5d:3d:37:69:7e:1d:a2:ac:1f:1b:49:ae:a8:25:d6:
5c:b1:74:9a:08:e4:db:aa:0a:00:78:d0:59:ff:19:03:99:32:
c6:34:d5:20:40:03:86:d1:83:ad:d3:c0:0e:d1:6d:7a:fc:8f:
f8:06:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:55:24 2025 by rpki-client