Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: J26SHhESh16pcfxKOi5Bbeu28nBe56Hgdu5UhIy3pcg=
Subject key identifier: 71:AC:CD:A7:FB:C5:EE:7A:B2:F0:B8:3B:53:80:39:15:9D:A8:66:EC
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 0198D4A790652E49258612DD8FEA75AD3E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 0FAF
Signing time: Sat 23 Aug 2025 02:00:07 +0000
Manifest this update: Sat 23 Aug 2025 02:00:07 +0000
Manifest next update: Sun 24 Aug 2025 02:00:07 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: fD7BAMwIjqylc+43oPLnxzF+ozds1d47Cwxhy92pxGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:90:65:2e:49:25:86:12:dd:8f:ea:75:ad:3e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Aug 23 02:00:07 2025 GMT
Not After : Aug 24 02:00:07 2025 GMT
Subject: CN=71accda7fbc5ee7ab2f0b83b538039159da866ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:72:1f:8c:e5:4c:b7:fb:8c:38:b5:83:eb:
df:30:34:c9:a1:2a:61:27:f6:e7:04:b0:1c:7c:67:
17:c6:39:26:78:0d:7e:56:3c:68:d1:05:fa:0e:fa:
8e:ba:0c:08:60:fc:13:01:9d:dd:d0:59:62:24:9e:
54:01:60:df:60:e2:95:f6:fb:82:b4:fb:ba:9f:dc:
ab:3b:43:40:97:e1:6c:97:a1:99:9d:5e:db:a8:b0:
20:f9:d9:47:52:c1:2d:6b:50:4e:4b:ea:0a:83:97:
0d:c0:80:48:a7:97:66:c4:e9:d3:c6:e7:23:34:48:
fd:63:63:0c:27:bc:33:26:4d:4e:ed:92:43:d7:82:
6b:44:48:c7:38:b0:68:79:be:86:6e:89:f2:f3:1c:
d1:fc:b0:5c:0b:59:73:8a:e8:82:82:ba:3a:da:58:
ec:60:24:ba:b6:ca:7a:27:3a:40:2f:a4:f0:2a:86:
5c:51:85:87:67:f0:f2:37:56:34:e3:67:e3:58:cd:
57:0f:fd:69:a0:57:ca:fc:80:2b:0e:6c:64:56:84:
4f:51:39:aa:65:ce:5b:7e:5f:39:09:54:3b:51:02:
29:24:94:b2:10:15:e7:b3:a4:6f:f1:4c:fb:be:4a:
c7:69:61:dc:77:b9:66:7b:fa:3d:50:e4:17:29:44:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:CD:A7:FB:C5:EE:7A:B2:F0:B8:3B:53:80:39:15:9D:A8:66:EC
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:82:58:d8:7e:ff:4e:71:2a:fb:f6:a4:8f:ec:8d:7f:e9:5f:
7e:96:18:c5:a9:6c:94:29:92:4e:69:a3:82:65:7a:5a:6e:ac:
05:90:3f:e4:e0:38:7f:3d:a9:42:f6:23:2f:ca:15:76:47:19:
f5:89:d8:ba:8d:22:64:0b:67:c8:ef:e5:a2:94:df:b6:6e:3b:
84:33:fb:3d:38:22:00:2c:30:ab:d9:57:a7:cf:50:1e:e8:e1:
7a:ae:56:1b:32:36:94:ce:78:94:8f:6a:d8:f9:3f:80:8a:44:
e6:97:18:eb:bf:ac:64:ca:f0:87:dc:5a:71:70:ab:c3:1f:47:
95:d3:b7:7d:81:cc:04:65:a6:bc:81:00:ee:97:38:85:ea:9b:
fc:88:4d:12:51:f5:88:96:ea:fc:1a:e9:65:19:19:9b:b0:27:
eb:6c:77:3a:23:c1:f6:30:09:b0:e1:61:62:1b:29:94:98:58:
53:eb:29:8f:19:a1:07:27:cc:ae:11:31:2f:17:9c:31:59:c3:
19:81:a0:0f:61:0f:61:7b:74:be:3f:9b:3c:18:20:15:90:04:
03:f3:54:cf:40:65:7b:71:94:db:55:71:7c:cf:28:30:4c:34:
63:ea:f4:71:bd:60:51:a9:c4:85:ed:f1:27:8f:ab:a9:e3:d5:
97:36:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:32 2025 by rpki-client