
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json)
Hash identifier: R9TiZulA6ls3a/6hh5qch2zMsrC6+TsPBnkc0yMU8bg=
Subject key identifier: CA:A6:E2:BA:00:85:96:D3:08:36:19:4A:65:48:2F:0B:27:51:1F:63
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 0198D515BAAB48490813CCF1BAF9FC4F771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
Manifest number: 04EC
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: 9RdZIw-S-FYoTEGCNtUVTMr1UI0.roa (hash: cuWu4zoZh39hHnMbQsbn1GavX5fkwgR9EpdjwPAYmFM=)
2: C36HYE9g7Segc4lKsITQsAPbk3A.roa (hash: xJXCT5dY3X53zr13t7CE1ukR4VVrDp6NvKtvl+FjEKs=)
3: J9sdBRndgWMXRbtrEj6DzAaduFM.roa (hash: 1mU1gIeMkOu38sOl5UhcF+y7DrqaJPBXlv7kx0JqTAw=)
4: K6r4JbxghClQGiOJgPHD3qM06uA.roa (hash: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=)
5: WLnNiHQkhlfgINfxpD2br98XvwA.roa (hash: meEdE8yNwOSarbCrMNr+5gmR/PbuI8v0hmQMO5QzIaA=)
6: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: y6LhSKW2b70iAyU6ExKgQSjj4N0jWyNHq3nuwQ3ILCU=)
7: jrWoUX2I08t96DUAzMXpfrjbImw.roa (hash: 5fZxekpC+R8XTkzuMqL1WK63VlO9GSurjZzzW/k5L60=)
8: nWYHniVnDldwYunEGsc0VWWiVYU.roa (hash: VRa9zgOVZdpaRaM8P3APLwpP4Czcpn3M9s3Qb5fNEps=)
9: pF_pVy2TIwjzEOlTFDghAKXtbzQ.roa (hash: hczSlLK7qtHA0sxQPsDXkLAUtpEz88IsWfA1PqBcBfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ba:ab:48:49:08:13:cc:f1:ba:f9:fc:4f:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=caa6e2ba008596d30836194a65482f0b27511f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:91:20:4c:fd:62:78:5a:81:13:8e:af:92:
ce:52:3f:48:7e:c0:87:18:99:9a:16:cc:2b:e8:08:
67:69:e9:c6:a6:7b:d8:97:ac:3f:06:e3:1c:3f:69:
4e:a2:2a:9e:96:7d:22:0b:fd:f1:19:bb:8d:03:ab:
a3:0a:8b:b1:55:78:fe:6f:c2:5c:47:34:5f:12:59:
d9:72:27:b9:64:f9:f3:d9:e9:d4:63:22:a0:af:a7:
44:ea:c0:ba:86:e3:ea:1d:53:e5:92:e0:9b:af:4f:
a1:75:be:9c:b9:f2:a4:83:38:a7:1d:d0:29:f7:99:
43:c8:04:da:b7:2c:0e:25:b3:66:a9:21:ba:31:16:
50:bc:9c:4b:a0:27:c0:c9:0d:f2:25:bb:fb:65:ae:
d3:2f:3a:4c:68:06:94:6a:02:87:53:37:55:b3:cd:
f3:1a:03:1a:19:b8:7d:08:a4:44:d3:3d:e6:75:02:
f1:92:27:60:35:8a:2b:ea:49:0b:c0:b1:81:a6:89:
9d:80:1d:35:b8:da:69:01:a9:c5:b8:4f:56:ba:dd:
e0:70:f7:98:4d:da:be:33:69:b7:ea:c1:c9:4f:41:
34:03:2d:04:a6:e2:0e:4c:7a:d3:1e:aa:b4:81:aa:
63:d8:aa:58:81:d7:99:b2:ec:a3:75:8c:d9:c4:74:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:E2:BA:00:85:96:D3:08:36:19:4A:65:48:2F:0B:27:51:1F:63
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:28:f4:b0:a1:10:18:d2:a2:75:5d:8a:62:05:6d:6d:00:46:
a5:4e:74:37:41:26:86:fc:39:bd:7e:26:4d:ee:48:04:ea:27:
a9:e3:89:f1:ed:9b:e0:81:a5:1d:8f:a1:4f:1a:db:41:fc:2d:
d6:6e:e2:45:78:30:e4:56:1f:09:cf:b4:82:f9:cc:c3:b4:6a:
e1:f4:8e:be:82:26:8f:55:5f:99:8f:54:87:d2:24:4c:86:d7:
cf:3f:47:6e:81:6c:20:40:e8:7d:7b:1a:2a:63:c2:29:1a:5e:
5b:1c:2a:43:50:9f:88:c6:f9:a5:b2:79:f0:cd:c8:79:76:0d:
e3:9f:90:c4:11:00:45:09:b4:b2:65:2d:d6:31:14:9d:c5:85:
60:c3:34:35:17:59:60:f4:f9:40:5b:56:1e:3b:c9:ef:86:6e:
4b:27:59:7e:21:a4:54:71:89:a4:38:e2:eb:69:4a:52:c6:fd:
4d:a7:ad:45:6d:10:ee:3f:b7:73:35:aa:0f:7b:b0:d7:57:4f:
b1:00:06:85:6b:3a:5a:75:43:90:7f:ae:e6:99:cd:7c:72:ef:
dc:90:6e:c4:bb:15:41:80:23:95:db:ad:2b:61:68:db:e2:ef:
39:cb:bc:af:16:40:13:f7:38:f8:2a:1a:2b:b3:05:99:52:4f:
3d:33:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:02 2025 by rpki-client