Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier: +KJEawIx5tN8NcoH+a7HICXtrIrp+TWJNg34s4qYwlg=
Subject key identifier: D4:B5:55:0C:B7:B4:CE:D7:01:3A:CD:7F:EE:1B:A6:25:C0:BE:32:F7
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial: 0197B820DD442B68CD94EA588F8727D98954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 20:00:50 +0000
Manifest this update: Sat 28 Jun 2025 20:00:50 +0000
Manifest next update: Sun 29 Jun 2025 20:00:50 +0000
Files and hashes: 1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=)
2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: hZUY/61Q+k5GteNCjNZ48niUGmxiPBdHZ83pFOIZ55I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:dd:44:2b:68:cd:94:ea:58:8f:87:27:d9:89:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Validity
Not Before: Jun 28 20:00:50 2025 GMT
Not After : Jun 29 20:00:50 2025 GMT
Subject: CN=d4b5550cb7b4ced7013acd7fee1ba625c0be32f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:16:0a:d0:60:a7:c5:79:de:dc:92:0c:5e:
cd:ed:a3:3e:76:7a:88:18:3d:2f:ec:2e:13:17:ca:
70:9d:4c:aa:91:18:4b:d3:53:58:1a:5e:b9:eb:c5:
83:e6:7a:41:44:b3:d9:17:ef:6b:2b:7c:be:72:68:
08:47:45:23:5f:4c:e1:4b:c6:cd:53:76:96:d6:c9:
15:48:68:28:8b:5b:e3:c3:7f:9a:65:49:6a:f4:68:
44:cc:d7:54:3e:af:fb:ae:92:d0:bc:aa:2c:aa:d4:
a8:ab:7f:ea:f8:1e:e5:4b:76:23:34:e9:f4:c9:54:
95:fd:93:65:4e:c0:60:f3:2e:6e:c5:bf:a1:b0:3e:
19:e2:a9:23:d0:96:f1:ad:6b:7a:1c:bd:65:fb:4d:
4b:55:a0:69:c4:de:51:84:eb:1e:d0:8d:cc:53:5a:
bb:76:f0:46:bf:6c:0d:9b:7b:bb:f4:46:ec:66:95:
af:42:a2:e4:65:08:da:83:f0:d9:e8:7a:db:bd:78:
b0:cb:54:b0:15:ae:84:34:ba:c9:92:06:c2:1e:7c:
26:94:f5:5e:2d:f7:e1:a9:22:98:b7:e3:90:29:4b:
5e:ce:f9:ac:bf:3b:bd:25:3b:13:15:fc:92:96:33:
4b:72:3e:76:f1:b0:7a:56:8b:5a:18:78:d3:64:3c:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:55:0C:B7:B4:CE:D7:01:3A:CD:7F:EE:1B:A6:25:C0:BE:32:F7
X509v3 Authority Key Identifier:
keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b5:9f:8f:41:1c:98:13:f9:fe:2f:0c:3a:08:92:c2:29:ec:
43:3f:2b:2f:2c:6a:0a:b7:9f:41:c7:10:04:4e:86:7b:0e:15:
f7:fc:c4:fe:96:e1:73:98:bd:f3:82:3d:99:69:3e:69:7c:1b:
8f:c5:03:a6:b0:2e:79:7a:07:bd:8b:40:8d:14:fb:4a:d8:41:
ef:7c:ae:af:17:39:68:20:af:6f:1c:a1:c6:37:f0:49:40:29:
66:cb:03:6f:46:dc:2f:3e:04:7c:85:cd:7e:18:21:46:c2:98:
28:21:f1:d7:37:36:1a:41:04:96:a2:81:6a:96:95:a9:48:a5:
46:54:f9:a5:dd:e9:53:0f:fa:49:ef:76:44:44:f8:8e:0e:e3:
ed:b7:b8:5f:03:a0:40:19:17:49:fe:8e:26:00:71:50:d3:dc:
89:85:a6:06:44:f3:23:5e:ab:b3:09:d7:db:cc:62:0d:e4:fb:
5c:7b:ce:fd:c3:de:78:c2:1e:a2:04:2b:34:f3:c0:bd:2a:f7:
2a:5c:ac:d3:a4:8a:19:9d:16:0c:b2:f2:85:5c:54:e3:8d:9e:
a8:94:c3:f9:f4:39:dc:33:ab:d1:1c:40:f7:b2:96:82:a8:17:
b7:8b:bc:78:e0:b3:4b:2c:32:36:76:93:ef:25:47:23:f0:75:
63:be:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:57 2025 by rpki-client