Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: bFFhUjzcDw8+uNQmtpFDditWEEnOp+iq62JM0A+NPXI=
Subject key identifier: 3F:06:E0:72:CA:B3:08:A8:8D:59:2C:28:9A:FA:AB:48:91:92:42:D4
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 0199191B11F817B514A1B5C3776360D5188F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 1692
Signing time: Fri 05 Sep 2025 09:00:28 +0000
Manifest this update: Fri 05 Sep 2025 09:00:28 +0000
Manifest next update: Sat 06 Sep 2025 09:00:28 +0000
Files and hashes: 1: 1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa (hash: 4fwNFjC/KzIgxsaWUD66CE+7p9ui38GyV7XXtJ3qf8o=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: mobSjgP12Yo5dPjZ2gsFQlJ0bREHQJUf0eBthVZ2hfw=)
3: Sza6sQo4SxIMxey9qB4eBTtIEPg.roa (hash: C/1FfNF+TmksPsjo5TVeKV1X6wR0pQ31deypiIvzO+k=)
4: V4pfu9jLQ6oLBdUsOWrdFcq1Yrc.roa (hash: yDY9y35s4pP3mOfRyxPkvU+qk+1wOvcB+DMBcM6XFjA=)
5: W7PWFrX-v5SaBlQz93CvawsAR8Y.roa (hash: YvmisDA3cqiQerchJ4ThrZ/s4MEmdOZ55Z/X5SC6qlM=)
6: hVN1Qld91f5dBJ9SSDlF23fJ2wE.roa (hash: fB256LdP6wo0MmK8V0JJWIWF+X7CQ/bXWoxB33HPuzk=)
7: jXuJH5XlRjh9NbnahdD8Y6zEokQ.roa (hash: uTge3zTxck7gBX+9co6u8laUzjU+YV+PjrgGrj8fBnM=)
8: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (hash: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=)
9: xWzjOiU4GIbFmqwyeVmah8vO8F0.roa (hash: S4iCzl3PC4M/IRKSKX7IIQOXaSNab8mVow5IXg2rGLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:1b:11:f8:17:b5:14:a1:b5:c3:77:63:60:d5:18:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Sep 5 09:00:28 2025 GMT
Not After : Sep 6 09:00:28 2025 GMT
Subject: CN=3f06e072cab308a88d592c289afaab48919242d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:ae:a2:d7:b6:23:f4:81:7c:13:fe:f9:6d:
a9:7e:0d:95:c1:93:75:38:52:94:d7:d1:4e:05:3d:
7b:1d:d8:48:0e:86:9e:d4:66:e7:af:16:f7:8a:2e:
32:f3:79:4c:78:df:3a:97:35:15:18:6c:fb:5f:48:
92:c9:f9:44:70:da:6d:8d:08:91:11:bb:64:64:67:
78:eb:92:99:50:89:66:2f:b1:fa:c2:8b:22:13:7f:
ac:f1:1f:cf:00:11:fc:fc:0c:ea:62:bf:b3:01:f2:
85:97:69:47:ce:4d:c8:4d:56:54:e3:5c:be:4e:a5:
62:01:df:fe:61:e7:bd:20:f7:db:64:7f:e7:a1:05:
f4:e1:0b:95:48:9b:03:9b:0e:e8:5f:f3:54:ee:06:
20:3e:e2:96:7e:b7:4f:67:3d:f9:00:03:df:45:18:
e6:7f:62:d7:a4:38:e4:4b:b5:a9:a5:03:ca:5c:d1:
dd:53:13:5e:cd:d8:b6:46:da:da:d4:99:92:83:2e:
6e:85:a8:97:4e:08:01:02:3e:9c:43:36:f0:25:12:
8e:e3:7d:20:d0:87:6f:34:15:dc:18:f6:48:18:7e:
47:6e:ff:8c:31:7a:7c:ab:2b:eb:67:4d:73:76:f3:
f8:7d:ed:f4:1a:cb:18:a7:09:8d:c4:49:60:31:e1:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:E0:72:CA:B3:08:A8:8D:59:2C:28:9A:FA:AB:48:91:92:42:D4
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:eb:ec:62:2c:e7:91:e9:97:b6:a4:36:d3:37:95:60:49:97:
de:ba:fc:85:94:98:01:b3:e2:58:89:97:0c:f0:73:c3:97:c2:
87:fd:fc:52:62:07:fe:c6:1e:7f:8b:9c:b4:47:22:c0:c1:c7:
d0:a8:b6:c9:e6:dc:d0:57:0d:14:13:ae:df:79:4d:76:24:c3:
e6:db:49:db:d3:4e:9a:08:65:55:32:38:32:10:8a:0d:fe:6d:
6f:a6:cf:25:a4:20:50:ea:5a:d3:fc:5c:32:d2:16:0f:ee:2f:
b0:cc:38:15:38:3a:7f:46:c6:58:c4:f8:65:6b:8e:24:63:4c:
63:7d:06:71:df:36:eb:df:44:2c:9a:6e:bd:91:08:85:59:66:
8a:bb:2c:7d:12:c3:76:b7:17:8f:91:55:2a:41:32:4c:83:94:
2f:02:dd:55:1f:c6:38:84:35:6c:d8:c4:43:ab:67:d0:51:19:
98:fb:45:e4:f6:4d:69:d7:b3:55:65:f4:4f:88:88:00:76:c4:
9f:6c:e6:3d:db:78:39:71:b8:de:59:58:df:46:41:3f:82:ce:
88:15:3d:ae:2a:15:44:b3:c8:13:39:72:2b:fe:9a:85:35:03:
23:73:ff:30:20:a9:a4:73:54:db:40:00:84:46:64:e9:54:42:
16:7e:9f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 12:09:13 2025 by rpki-client