Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
File: 79kZGXhjH8lVrA9RBi1c6YROrgM.mft (raw, json)
Hash identifier: cfDQmlYdEt5jkyyXAkstlQCttyZdQE6ksn/yX+cCak4=
Subject key identifier: CB:90:F2:6D:A5:BD:A4:1C:1C:1E:86:C9:74:51:1E:E2:44:C5:F9:2C
Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
Certificate issuer: /CN=efd9191978631fc955ac0f51062d5ce9844eae03
Certificate serial: 0198CCEE4E2C15A496AD6CD86A6DAD5ED07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
Manifest number: 1643
Signing time: Thu 21 Aug 2025 14:00:26 +0000
Manifest this update: Thu 21 Aug 2025 14:00:26 +0000
Manifest next update: Fri 22 Aug 2025 14:00:26 +0000
Files and hashes: 1: 79kZGXhjH8lVrA9RBi1c6YROrgM.crl (hash: GnaS810tf7S2ULDHgmwqL87F/NgJy6Ky6fC/SI39wDU=)
2: arsEMbCDi2wvIB9pruDthcas_84.roa (hash: ilM4++SMMDRks/dY7/gazwzm3WAh1QbyvXCjkzciULs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:ee:4e:2c:15:a4:96:ad:6c:d8:6a:6d:ad:5e:d0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03
Validity
Not Before: Aug 21 14:00:26 2025 GMT
Not After : Aug 22 14:00:26 2025 GMT
Subject: CN=cb90f26da5bda41c1c1e86c974511ee244c5f92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:04:5c:b9:93:e0:ab:08:9e:5b:fd:f1:f7:
68:f9:ef:72:bf:07:74:bd:43:8a:27:de:e4:69:e6:
65:0b:70:4e:26:e4:84:bc:9e:47:e6:9e:18:ad:dc:
d7:94:41:82:0c:29:cc:07:4a:30:51:4f:90:ca:2a:
c0:c7:ee:e7:4b:6d:45:9a:0f:30:27:2b:12:53:a9:
5c:b1:82:d1:03:0e:da:15:81:9d:a7:7c:1a:bf:a5:
48:2d:5c:fc:3c:ea:6e:6b:4b:a9:d0:4b:3e:90:18:
45:e5:4c:3d:69:2d:77:97:6e:73:06:85:ad:e2:02:
5e:1d:2e:fd:84:7c:73:d7:d3:73:39:2e:57:52:32:
49:16:ea:59:9e:4a:5f:a8:e0:72:69:5b:28:48:14:
12:a5:3f:a1:a3:e9:26:76:12:72:f5:de:da:a3:22:
10:46:b5:08:2a:12:14:69:a8:fd:a0:7c:da:a0:fe:
ed:94:1c:8e:78:73:db:8d:73:3c:59:ec:0e:37:44:
28:03:ea:9f:da:88:46:19:bc:de:c4:2a:b7:3b:45:
a5:0d:5f:e4:6a:ba:05:fc:6a:13:d2:a6:71:22:48:
44:b5:ef:af:f1:e0:cf:c6:5d:7c:ae:d0:85:31:f2:
84:be:e0:91:71:f1:41:75:20:19:f9:fe:c5:09:fa:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:90:F2:6D:A5:BD:A4:1C:1C:1E:86:C9:74:51:1E:E2:44:C5:F9:2C
X509v3 Authority Key Identifier:
keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:64:be:6e:76:a1:20:ac:34:c1:23:71:53:3a:41:e8:15:5a:
75:e5:0d:2c:16:92:9a:61:f6:8c:f4:63:ea:63:ad:00:d1:c2:
a3:6d:76:f0:09:53:dd:9f:02:31:c6:14:61:61:a3:8a:b2:47:
b3:20:28:16:b7:74:df:6e:d7:9c:19:47:04:a3:c9:b8:54:8a:
01:2e:fd:a8:e7:c4:98:74:b7:77:56:e2:01:ba:58:c5:37:2a:
e5:d7:37:5d:44:be:bd:c1:02:ac:9b:a8:a4:ec:e7:c6:b5:79:
36:11:60:48:75:fb:41:17:69:b2:61:23:43:3c:e2:ce:ce:9a:
e9:e3:22:81:53:e3:5a:56:c8:05:e1:8d:d9:3b:e4:fc:ed:04:
1f:2c:8f:0a:88:45:f9:82:bd:87:b5:cd:a7:19:1d:3b:05:dc:
a7:53:a7:c1:63:1e:c3:56:8f:c5:9b:36:3f:f9:7b:de:7e:ae:
8b:ba:b6:5a:2f:1d:68:b9:1e:8e:4d:e0:5f:63:72:ff:41:c9:
9b:2a:9c:92:60:d4:6b:ea:ac:6e:d1:67:2e:d5:5f:dd:16:4a:
fc:03:0b:e7:61:bd:e3:8a:49:77:7d:8f:23:b6:ce:c6:d7:18:
b3:7b:a9:f6:9f:d7:eb:7b:68:72:14:ba:71:6a:8c:07:2a:50:
60:b2:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 18:31:32 2025 by rpki-client