Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier: 4xWSNXlMHTRek9yeZ/XI9Bi16oPeeqnolf+mW2aYDdw=
Subject key identifier: 79:7C:4D:7C:EB:9F:29:B5:AF:60:1D:BF:55:AF:7E:17:48:28:AC:0D
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial: 01992255784FDC3B00D3E7BBD0588E9FD0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number: 07A6
Signing time: Sun 07 Sep 2025 04:00:50 +0000
Manifest this update: Sun 07 Sep 2025 04:00:50 +0000
Manifest next update: Mon 08 Sep 2025 04:00:50 +0000
Files and hashes: 1: R-wXA-kWQa5PdCJfUeOG1Bar_7E.roa (hash: eg3vfMOt4/2VviBbur6gIcbu+ezOh6ft9BbXqbZkqec=)
2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: MTgOQtVWAONhXkhP225mc7CTTCzQhxZMRNHrDJ6uWHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:78:4f:dc:3b:00:d3:e7:bb:d0:58:8e:9f:d0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
Validity
Not Before: Sep 7 04:00:50 2025 GMT
Not After : Sep 8 04:00:50 2025 GMT
Subject: CN=797c4d7ceb9f29b5af601dbf55af7e174828ac0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:46:bf:40:1f:90:47:07:71:15:b7:ee:1b:
e7:81:30:09:6c:ab:ec:f1:b6:87:18:fa:b4:60:6a:
40:72:40:eb:06:bf:0d:69:d1:1c:67:2c:16:b2:50:
b6:dc:3f:7e:f3:a5:1c:a2:60:c9:7b:b2:db:20:b1:
d2:66:c7:5f:d6:fa:55:99:ef:8f:98:ba:2f:34:73:
98:2f:50:d1:0b:2f:50:bc:7b:5b:58:e9:31:87:e9:
6e:18:1e:f2:df:1a:e4:c9:95:c9:48:a7:7e:0d:9b:
05:78:11:a0:75:50:fe:e5:d5:6f:0d:ca:cc:75:3f:
80:20:e1:36:7d:f7:78:44:fb:bc:50:62:9e:78:c6:
6d:07:fe:d3:b3:66:aa:13:41:ff:f0:4c:c1:46:d2:
45:b0:62:79:81:20:a1:f3:f8:1d:81:e4:15:ff:73:
5f:13:47:fa:33:ca:c8:6e:85:ad:16:e2:2b:a7:a9:
aa:d8:0f:95:8f:1a:b8:f4:16:9e:af:1a:b6:a6:59:
8f:63:93:ae:4f:62:80:12:f2:d2:06:58:7b:04:e3:
d8:d2:4a:f5:64:94:e0:d1:ef:5e:c5:2f:3b:08:f7:
0d:7c:d0:30:c9:c0:b5:1c:d9:84:06:6e:f3:9d:39:
14:db:66:5c:fe:a7:bb:07:4c:f2:0a:34:06:d2:73:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7C:4D:7C:EB:9F:29:B5:AF:60:1D:BF:55:AF:7E:17:48:28:AC:0D
X509v3 Authority Key Identifier:
keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e3:60:7a:83:a0:8b:23:91:e4:c0:17:e5:6a:38:b2:8c:0b:
24:4d:1e:d1:15:76:02:81:55:ec:1c:c7:dc:85:8b:5f:50:05:
4b:ed:a7:4e:bb:78:59:af:07:45:96:12:ac:42:25:9e:d3:67:
0f:02:f5:9e:53:92:3c:5d:2c:a6:dc:86:38:8f:bf:bc:14:d7:
bf:ca:8d:40:79:b8:26:9a:58:08:f1:a1:08:fe:6f:83:66:ec:
97:37:15:5a:91:7b:d5:2f:26:6e:a6:ea:7f:e0:86:b9:c3:84:
96:d6:92:65:85:9f:d3:3a:06:62:c4:ab:93:e4:33:cb:0a:2e:
4f:d6:f4:0d:65:97:35:16:5d:fb:2a:bf:a4:9a:90:45:0f:bb:
41:3e:f7:b1:5f:a7:d8:64:e8:57:a4:5e:a8:27:8f:e1:24:0a:
d2:e6:83:ff:38:a8:4c:a1:e6:6e:61:b1:5c:55:9e:0a:bd:3b:
93:80:90:43:68:7f:5c:33:a2:62:57:59:1a:ca:3f:cc:46:f0:
a6:2e:d6:48:37:9f:f0:ec:bb:f1:f3:87:73:f2:35:a0:4a:73:
9d:c2:1d:f4:4d:57:89:bb:21:b5:3c:26:b7:02:de:94:78:b8:
b0:3a:1b:21:5b:61:ec:a7:25:6e:fb:83:24:a3:b4:cd:2a:e0:
ed:30:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:17 2025 by rpki-client