Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: Rc5j5oeJGpbq0m5hbARSNme0tOd7WPj2hsPBWdki8xA=
Subject key identifier: EA:67:58:0D:CD:8D:E0:02:14:20:E2:FD:6A:79:13:A6:DD:5C:EF:CF
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 0199239F8565693E19754E3FAE4897245742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 1002
Signing time: Sun 07 Sep 2025 10:01:20 +0000
Manifest this update: Sun 07 Sep 2025 10:01:20 +0000
Manifest next update: Mon 08 Sep 2025 10:01:20 +0000
Files and hashes: 1: MLxgcAFNN-a_n0hgMIOfT5C141o.roa (hash: ewiYdgPU3ZjjkZdT9FRRd/GKYeBkT/vZjdgs+F+3aZo=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: ywT745hZuswZyWgcUSy2P7lgL0y0SRo/xD7j3ZCPTJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:85:65:69:3e:19:75:4e:3f:ae:48:97:24:57:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Sep 7 10:01:20 2025 GMT
Not After : Sep 8 10:01:20 2025 GMT
Subject: CN=ea67580dcd8de0021420e2fd6a7913a6dd5cefcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:0a:65:0c:56:41:a4:f7:d1:d0:b5:2d:42:
ae:31:05:70:5b:4b:21:32:f8:1a:4a:55:e5:6f:ba:
f2:69:21:16:c4:ad:be:c2:9f:5a:e5:3e:7f:08:2c:
66:34:40:46:88:f8:37:e0:21:6d:5b:24:b9:65:db:
54:93:56:a7:6a:b9:1f:4c:2f:3e:d0:a9:d4:8c:c7:
56:bb:8d:4c:73:43:97:15:f0:51:ed:9c:80:2b:12:
a3:69:0b:e3:a2:63:7e:94:53:58:9b:bf:a5:38:e0:
d5:64:72:e5:80:76:7a:13:03:d7:04:75:f8:e8:e0:
61:a8:54:1a:af:57:45:6f:de:2c:ab:cc:56:9f:4c:
6a:1a:4e:6e:f4:00:40:79:7d:31:76:11:c3:75:dc:
97:9f:00:d4:da:7b:2c:89:24:ea:81:a4:32:1c:5d:
3f:a7:19:fe:e4:f0:7c:ec:c8:ff:28:c3:3b:e6:26:
8f:5f:cf:77:a5:d5:92:59:b7:6e:f3:b5:f4:19:28:
d6:4d:6c:65:65:5d:92:ca:cb:ea:68:05:d9:0a:26:
35:bf:b4:95:51:e6:07:3b:fd:45:4d:8d:d5:06:5f:
4b:0d:2a:3a:8e:13:27:0b:8b:71:b1:4a:b7:0f:6a:
d5:1b:d4:cd:f9:1d:71:5e:da:e3:5a:04:56:9d:ac:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:58:0D:CD:8D:E0:02:14:20:E2:FD:6A:79:13:A6:DD:5C:EF:CF
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:36:56:e9:e2:45:9b:69:7b:cd:1e:cc:ef:1c:49:03:21:bb:
07:ae:64:38:b4:0e:f6:0b:6c:f6:b7:f9:9c:a0:65:27:e2:1b:
f9:bb:a6:06:13:94:ed:22:55:89:2f:fd:61:ae:cc:57:90:c5:
0e:d9:53:e3:84:9e:e2:7f:4b:a9:17:5c:a3:10:d6:0c:7e:8a:
de:55:48:ed:84:e4:54:f1:60:22:cd:26:57:2f:fc:a8:a2:b1:
53:ff:55:ee:96:f8:35:0c:6a:44:e1:0e:48:07:73:1a:48:bf:
cc:05:07:b8:c2:6b:9d:ef:ac:8b:ed:ac:1c:7b:d8:99:e6:af:
4b:1e:33:0c:7c:42:a1:0a:87:2c:ba:12:64:38:5c:4c:43:82:
7c:dd:f5:c6:75:08:6c:f9:c3:02:16:2f:20:b0:42:b4:d6:f1:
97:ef:70:49:5b:21:73:2f:64:9a:9e:c3:31:b4:f2:4a:70:da:
a9:6f:55:1d:51:41:f1:02:55:db:4e:9d:30:4f:11:a9:ea:cd:
61:ad:2a:5e:29:dc:47:bd:84:ea:10:20:b4:76:82:02:6a:3f:
37:3f:73:74:13:02:d3:b2:e4:d1:40:8c:c3:52:6d:c7:d8:ee:
e5:e3:42:d5:29:63:6e:ca:10:e0:4d:c5:c2:24:bf:db:ac:f7:
32:6e:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:15 2025 by rpki-client