Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: t5UklU6qAdcFj3CR5Mnyv6tSFoTmdxgKYrrc7qvieM4=
Subject key identifier: F9:07:65:07:FE:6D:31:51:58:89:94:42:67:E4:D0:77:AF:7B:79:D0
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 0197CC83631C14B07D61487B20BDC57900AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 02B9
Signing time: Wed 02 Jul 2025 19:00:51 +0000
Manifest this update: Wed 02 Jul 2025 19:00:51 +0000
Manifest next update: Thu 03 Jul 2025 19:00:51 +0000
Files and hashes: 1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: 1hTDvhp7nmNlTEtsEgglbWFHvbJ/aR7FJJIPSVZfw2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:63:1c:14:b0:7d:61:48:7b:20:bd:c5:79:00:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Jul 2 19:00:51 2025 GMT
Not After : Jul 3 19:00:51 2025 GMT
Subject: CN=f9076507fe6d31515889944267e4d077af7b79d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:66:3e:90:fd:76:4d:5c:0c:0e:c8:b1:54:
11:95:24:b3:d3:46:0d:c8:d8:e1:aa:48:8c:af:4b:
7a:5b:9e:6c:ce:a9:a6:d9:7d:6f:b8:4a:97:be:70:
e0:37:fc:22:8d:92:07:80:23:da:95:ad:50:84:7b:
c9:b8:59:cb:f3:59:8c:09:78:27:05:9b:d1:82:33:
c5:67:f1:14:63:df:fc:22:1d:f6:e2:32:74:e4:65:
26:08:d9:d1:d9:cf:3f:09:25:7e:33:55:ed:61:c8:
fe:4e:2a:7d:10:e5:67:49:75:05:a9:90:2e:03:8b:
66:e0:78:86:02:ee:6a:cc:d3:ba:a7:38:8b:d4:3f:
15:31:5e:9d:22:b5:5b:a5:fd:f8:2f:b9:95:29:1d:
7d:40:fa:f1:cd:64:1a:86:fd:c8:19:01:7d:72:65:
94:78:b1:7b:9f:1f:a2:d1:74:65:ac:23:25:74:40:
19:15:2a:01:39:a6:37:8f:6d:55:23:c9:4f:d9:9d:
17:36:5c:5c:7d:a6:78:75:03:20:49:0d:0e:5b:f6:
71:22:ae:fc:90:5b:e2:90:eb:9f:c5:45:7a:0e:73:
cb:c0:d4:3b:b5:f5:57:7f:0c:b5:f2:97:26:22:01:
42:9d:86:5c:d7:19:63:af:1f:b6:06:cf:7e:f8:6a:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:65:07:FE:6D:31:51:58:89:94:42:67:E4:D0:77:AF:7B:79:D0
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c5:11:b1:ee:2e:fa:f5:66:95:90:58:9f:69:d6:bd:d9:e9:
24:e4:e6:51:7b:8d:9f:6b:9f:eb:3e:48:94:be:61:7d:bf:4b:
10:ea:a2:66:a1:4c:89:bf:98:58:9a:ad:a6:b9:76:a2:4c:31:
cf:58:5d:8d:0c:0e:b1:dc:a2:37:84:0b:df:96:9b:74:75:88:
f4:52:0b:b0:a0:62:b4:26:52:c3:c1:3b:a9:5d:98:aa:49:eb:
9a:37:aa:8d:03:4d:34:67:54:40:de:fa:2e:1a:8b:b5:34:02:
c8:89:15:a4:1d:be:38:98:9c:6e:ab:46:65:b0:8c:88:3d:57:
f1:bb:5c:a4:18:19:76:5e:56:08:3e:9a:a4:ee:ae:59:fc:e0:
4d:13:23:83:07:d6:be:ee:57:ab:cf:a5:95:10:94:46:1a:0b:
d4:cb:d3:58:95:90:74:e4:98:2b:90:89:f6:a1:2e:d1:4c:2e:
2a:a6:fc:ba:70:d8:0c:28:db:20:bc:05:ae:4a:9e:0d:5e:ad:
00:81:7f:b9:cf:0b:8c:cf:c4:75:22:60:89:26:44:3a:a1:ab:
61:1b:68:bf:1c:e0:ae:19:09:80:80:40:20:e9:27:9a:a1:b0:
8a:98:fe:d3:10:7d:4d:8d:01:14:53:8d:03:63:bc:65:10:b2:
2f:1a:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:52:29 2025 by rpki-client