Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File: f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier: BtmJW3LxrKLhYEJieQkOMrTUrB8Q05xYMe9Qf2kR56I=
Subject key identifier: 38:08:E7:92:22:0A:13:36:AE:11:C0:D5:E8:06:88:8A:F8:F4:A6:3A
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 0198D773D2C3BA66C2328988A4A2B00A68A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number: 0CB6
Signing time: Sat 23 Aug 2025 15:02:28 +0000
Manifest this update: Sat 23 Aug 2025 15:02:28 +0000
Manifest next update: Sun 24 Aug 2025 15:02:28 +0000
Files and hashes: 1: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (hash: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=)
2: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (hash: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=)
3: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: pMpqKRChpArK0JDZ632QNtNsMV+eyEXNrw6wioD2YQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d2:c3:ba:66:c2:32:89:88:a4:a2:b0:0a:68:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Aug 23 15:02:28 2025 GMT
Not After : Aug 24 15:02:28 2025 GMT
Subject: CN=3808e792220a1336ae11c0d5e806888af8f4a63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:02:6a:34:6f:5b:20:b7:57:3f:fb:a0:41:
9c:5a:3f:a4:33:41:45:ab:ec:72:4c:de:58:45:f6:
05:9f:8e:29:fc:3e:b3:7c:77:39:a0:c7:c7:99:d1:
36:18:8e:5b:fa:f9:e1:b7:28:08:14:ae:5a:4f:22:
b2:4d:f1:75:84:36:10:9a:96:79:39:54:61:ec:9c:
4b:f9:d1:05:c7:ee:32:37:39:6a:86:e0:92:71:b6:
36:d0:17:86:2e:70:33:10:fd:73:66:09:a0:13:49:
84:a9:38:51:df:62:11:3e:56:83:2b:14:97:49:03:
f2:f5:8a:eb:b5:9d:4c:69:f2:66:2a:d4:e3:6f:1e:
c6:fc:f5:05:61:47:31:3b:74:c2:c8:43:6f:2c:eb:
47:08:b4:f5:23:c7:13:12:6f:58:1a:89:80:1a:f5:
a3:f4:ac:3b:3c:3b:ce:a2:12:35:0a:49:e8:e7:65:
52:c5:c3:6e:5d:77:6b:c7:01:a0:74:89:98:f1:49:
33:8f:c5:dc:aa:4d:5a:86:14:c8:0e:9c:b1:e6:ff:
50:d3:85:55:7f:16:24:99:34:8c:0e:82:1d:00:4c:
5f:b4:55:cf:19:5c:ad:53:60:06:63:c0:9f:2e:ca:
e8:56:6c:25:cd:b9:9f:ee:97:c1:06:7b:71:3d:f5:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:E7:92:22:0A:13:36:AE:11:C0:D5:E8:06:88:8A:F8:F4:A6:3A
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b2:1f:7b:5f:a6:83:61:58:91:35:ab:c0:f1:ce:f1:e3:55:
7c:69:28:9a:86:c9:b5:bf:43:47:d2:68:bb:a2:8f:44:21:13:
f7:4e:c6:4c:a2:7c:27:90:32:c9:50:f7:c8:40:b0:f5:81:c0:
b4:7a:4e:8b:0c:f0:00:93:eb:56:56:7b:1c:ce:ca:44:9c:af:
2f:35:ac:1d:ad:d5:14:fb:b0:0c:02:20:23:d1:e9:33:dc:af:
1a:85:1b:10:65:5b:5c:52:63:c0:f1:8d:62:d1:d6:a8:11:1a:
03:c1:b4:14:b1:f6:e2:6d:50:0b:c3:d5:10:77:a7:46:93:45:
00:7f:e1:a9:6a:70:78:2a:9a:b0:3a:5b:34:b0:f8:e3:47:46:
a2:73:4b:a5:ad:83:e3:d5:55:e2:de:00:41:fe:b9:20:3e:99:
db:51:d2:21:71:77:71:ce:d8:0b:f2:cc:25:fd:3b:ab:f6:0e:
aa:89:be:58:9f:fa:a6:ab:12:26:4e:1f:02:6f:9d:50:21:41:
f9:b3:92:bd:64:ee:c7:25:47:e8:66:d1:ba:53:21:29:ad:a5:
77:b4:6c:96:36:57:e5:96:b4:01:24:ab:ea:82:54:1d:fd:77:
ac:6f:2e:d1:82:3a:1c:66:4a:52:86:1e:ed:2c:c4:25:cc:41:
51:30:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:07 2025 by rpki-client