Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: WdMKeNPt2N0RUuV2tw9yXI8VjSLPtkCY7YdU5Mtws4k=
Subject key identifier: C7:65:B1:CD:8E:06:FE:EC:96:99:A0:9B:5A:8C:71:BD:B5:BC:6C:37
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 0198D4A7A9FD979C8929619CEB386BDAF63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0DB9
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: +CVMberYhxF1gsDULXsNP5g1LKr3aVQnHt2Q7Okyif4=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a9:fd:97:9c:89:29:61:9c:eb:38:6b:da:f6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=c765b1cd8e06feec9699a09b5a8c71bdb5bc6c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:cc:1a:60:27:02:9a:0c:29:fa:30:72:8d:
c4:fa:27:0f:85:4a:5b:5a:99:33:c2:f5:0e:3a:6c:
96:d2:a9:df:ca:e1:16:f9:7f:f5:79:cb:9d:79:f3:
ed:d1:aa:f2:c6:f5:ff:c6:ef:74:7f:da:c7:88:2e:
12:b8:55:ba:f5:df:04:6a:2c:4e:86:ca:d7:47:09:
b0:a1:98:28:d9:9c:e2:32:ee:48:e0:99:31:34:7e:
ac:7b:6d:52:80:f2:8f:a8:9a:1a:4b:26:87:b9:f0:
67:75:a6:d1:21:a2:c4:56:fd:40:55:9a:14:05:ec:
4f:9d:34:5d:6f:40:09:9b:ad:56:15:36:b6:34:78:
25:8f:85:09:bb:80:88:1a:29:13:68:ec:c8:e8:04:
03:8b:41:4d:ba:c5:69:75:b6:bb:d4:ba:bc:3d:a9:
08:04:65:c0:e3:26:89:ed:0c:08:ee:c0:5f:d8:49:
ba:70:68:fb:2d:cb:10:ca:1f:10:90:e0:ca:42:f6:
e8:5b:b9:ff:6e:f0:33:e2:20:8b:29:64:e4:1f:20:
66:fc:1b:0b:ba:c2:9e:77:c8:fd:f9:30:20:3e:0e:
36:eb:9f:f6:6f:ce:e0:42:5e:9c:3e:24:ff:ca:74:
66:de:0a:d8:27:6b:c0:0a:da:dc:68:52:39:dc:3b:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:B1:CD:8E:06:FE:EC:96:99:A0:9B:5A:8C:71:BD:B5:BC:6C:37
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ec:e2:27:82:9f:9a:d1:06:56:60:d7:6e:bd:07:a2:01:17:
1b:43:e3:44:42:64:4c:c5:fe:d2:63:7a:97:d6:04:b3:ec:1a:
00:5e:8b:af:b0:6e:e4:58:53:a2:ec:9a:ef:92:25:29:87:14:
1b:cc:7a:38:66:c5:06:7e:cf:b0:e4:54:9f:d5:4f:4b:d7:a9:
fd:92:1a:92:5c:e0:e8:76:82:bb:9c:a5:d7:18:5e:a8:58:aa:
d7:2f:f2:39:ce:48:9b:3f:78:1c:84:a5:89:79:33:44:9b:55:
c3:33:0b:15:64:c9:0b:fc:2f:69:58:13:dc:ad:5a:53:df:1d:
02:7e:31:2c:b5:33:aa:05:22:f9:f6:5d:c8:a8:27:7e:69:83:
84:c7:fb:9b:db:4a:bd:cb:27:a5:d5:82:c2:c0:f9:59:2a:c0:
68:74:b3:97:bb:c1:69:a1:95:74:66:87:0b:27:2d:28:f2:fc:
e4:bf:a3:de:90:22:3a:49:29:12:26:b7:80:a3:a9:c7:97:28:
b6:bb:67:56:a7:6e:9b:bd:a3:bb:23:3d:2d:9e:cf:ce:33:88:
78:79:33:a3:7c:6d:a9:f7:9b:85:c2:7c:42:3e:d1:d2:5c:7f:
64:71:ad:19:f4:16:03:bd:32:4a:18:c7:fa:e0:40:7b:0a:d9:
ee:50:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:51 2025 by rpki-client