Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: D9A6WfsEG7BzSiDgnCXD33bQVKW0qiDwow3qMdmBIF4=
Subject key identifier: 53:27:61:B4:E2:7E:D8:F4:E6:A1:B3:79:FB:02:4C:68:B0:BF:64:5C
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 0198D583C6D77E7DD8B443C7D4B90AEF061C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 057F
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=)
2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: rGakwKvyMIBe7e+Cth5OX45bkuLNwsN+F2Txe6oklI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c6:d7:7e:7d:d8:b4:43:c7:d4:b9:0a:ef:06:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=532761b4e27ed8f4e6a1b379fb024c68b0bf645c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a7:58:50:cf:14:44:4b:c9:83:65:e8:4f:85:
10:ed:a7:20:57:ac:77:a5:eb:9d:00:1f:9f:da:70:
04:ad:c8:bf:c4:af:24:c4:9a:5d:99:c4:86:76:4b:
7f:9d:38:39:60:59:a3:68:81:e9:52:6d:06:c3:f2:
94:0d:d1:55:59:e4:dc:37:d3:9f:06:12:c2:51:f1:
4d:ca:3f:ea:45:8e:2d:d5:70:60:e8:93:fc:2c:c5:
bf:3e:0d:ee:aa:c8:2d:83:f2:ec:b8:62:11:0d:43:
f1:0c:1e:c8:af:0e:7b:78:9e:3e:2c:c6:b5:3e:7b:
88:a5:7f:cb:eb:3a:0d:19:a5:b4:fc:5a:d0:d2:11:
e5:83:93:ef:3d:7a:68:bd:28:52:ff:ea:cc:66:c1:
9d:6f:b2:ed:2c:a2:e1:46:af:90:c3:30:3c:1d:44:
b1:74:5e:9f:cc:5a:3d:88:53:47:90:10:5b:ac:79:
91:42:40:9d:48:e7:1f:38:fa:10:d0:cf:bb:8b:13:
30:a7:bb:00:c2:36:74:a2:cf:a7:bb:1b:d3:a3:84:
03:b7:da:92:50:5e:4b:3b:91:d6:13:b3:02:d3:a5:
1e:78:76:20:3a:30:a4:d7:8b:6d:46:31:2a:3f:cf:
05:53:4e:15:6e:7d:05:e5:15:df:9e:69:b8:19:c0:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:61:B4:E2:7E:D8:F4:E6:A1:B3:79:FB:02:4C:68:B0:BF:64:5C
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:2d:7d:c3:19:e8:49:9b:e7:c9:aa:d2:db:68:df:e3:20:
8f:d5:c7:62:e5:8a:cd:08:ae:41:7e:16:8a:a0:53:8c:f5:c4:
d1:56:89:b8:4e:db:b9:e0:d6:31:51:b6:0e:0f:e8:48:b4:64:
75:5d:c5:ae:88:0b:a0:ae:6b:1a:a7:12:dc:9b:f6:81:b3:da:
dd:9d:d2:42:07:65:16:19:fe:be:3d:3a:b8:7f:21:20:66:b7:
49:56:41:5f:fb:f2:e5:1d:4f:6b:c1:8b:ae:31:bc:1d:45:f8:
31:d6:d9:90:c0:55:48:c6:97:30:81:17:11:c0:25:03:d4:7f:
bd:fe:6a:25:8c:9d:f4:17:52:4a:66:0d:ef:a3:f4:5b:3e:71:
2b:33:78:b0:dd:b6:c4:48:eb:bd:dd:1e:1d:41:17:37:de:a4:
07:cd:2d:00:4e:ef:03:55:94:4e:b4:4a:b1:22:a8:40:c3:23:
e9:96:f8:83:0b:ea:1e:ca:d6:93:94:f1:f9:6e:44:ad:fd:26:
90:40:1c:f4:b0:84:68:8a:c0:30:8f:74:84:9b:7f:bb:a6:df:
4a:7f:62:3f:e2:3c:82:9c:cc:1d:0f:74:33:c2:ce:3f:4d:05:
7b:ee:d6:9b:30:50:93:5f:4c:1c:68:45:2d:08:69:22:3d:08:
bc:39:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:07 2025 by rpki-client