Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: 3i+1o/le6ULRf+3LKnI0Y18JD6nvx1eY9eBm7YSFtZI=
Subject key identifier: 7D:FF:4B:E4:8C:9D:E3:32:4E:8D:4D:1C:B2:53:BF:C9:78:65:4F:DC
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 0198D73ADD2EAA20F18942CE197040021970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 14:00:15 +0000
Manifest this update: Sat 23 Aug 2025 14:00:15 +0000
Manifest next update: Sun 24 Aug 2025 14:00:15 +0000
Files and hashes: 1: DPZDlwC5lvIBjZjDv4jWEsMDlMI.roa (hash: JSJ9xva93NHEmD/GiUVFRsLxBb1tpR6rl5zNqgBI5EE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: LdRyaMGc6qKbRtbr7w8SOc0EO1qG5A0dRgfyHBsdUT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:dd:2e:aa:20:f1:89:42:ce:19:70:40:02:19:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Aug 23 14:00:15 2025 GMT
Not After : Aug 24 14:00:15 2025 GMT
Subject: CN=7dff4be48c9de3324e8d4d1cb253bfc978654fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:a8:f5:c8:dc:ce:a4:8a:84:7c:96:a5:c6:
f8:14:92:de:04:35:7e:94:87:71:b6:af:cd:99:5f:
fb:f1:ab:f5:3d:dc:03:21:d9:45:78:25:c1:7b:a1:
ab:30:eb:f7:07:68:8a:2b:03:f0:e5:fe:a3:68:51:
ef:6c:60:be:4e:49:6a:72:e0:84:b5:2c:01:be:aa:
27:77:5f:ef:d7:5b:89:fa:4e:2e:98:89:53:6f:ad:
53:86:82:f1:da:59:dc:3c:37:a3:a6:24:04:1e:53:
8c:35:f6:3d:59:84:d1:34:11:d1:61:f5:84:72:fc:
4e:fa:42:f7:d1:b0:d2:6a:38:55:b1:ca:8f:08:11:
4e:ea:5c:7b:bb:52:d6:cb:c0:13:99:1a:c7:7e:e4:
a3:5a:b5:91:2b:7f:be:86:3e:1a:34:b6:94:04:36:
ce:ce:34:40:c4:c5:11:07:b5:e7:05:0f:44:92:82:
90:25:21:3b:49:28:e5:35:84:1d:e5:ca:3b:7e:3e:
fc:fc:43:15:b6:2a:5b:d7:09:fd:46:09:72:4d:c5:
93:e6:04:98:46:1b:2f:bb:67:f7:42:40:d0:95:c7:
c7:3d:46:86:4f:50:fe:30:b0:05:de:16:57:35:a2:
80:88:bf:78:9f:e2:b3:92:a8:eb:42:87:65:6f:3b:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FF:4B:E4:8C:9D:E3:32:4E:8D:4D:1C:B2:53:BF:C9:78:65:4F:DC
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cd:12:41:7c:47:4c:14:f0:a1:86:04:2b:7c:f0:70:6f:c4:
42:17:0c:a3:d1:b1:81:d3:56:a1:2d:87:0e:b9:20:89:0c:ff:
9e:e0:77:87:17:2b:d3:f8:60:72:8c:89:58:ef:71:b9:67:98:
d6:f9:f3:0e:9d:6b:e2:16:67:65:8b:b5:77:41:d4:97:4f:42:
c4:ec:7b:c5:32:57:66:2c:dd:ec:2d:b7:9b:a9:5d:88:3d:c7:
61:e1:90:96:e6:c9:64:1b:10:91:30:dc:e1:1d:bc:5b:9b:1a:
7a:0f:77:e0:a4:fb:c9:86:43:c3:42:d7:5f:29:b3:0e:8d:a3:
fe:ce:13:c4:dc:65:af:bb:4b:c2:25:e6:95:7b:80:f7:da:b0:
72:21:20:27:49:0e:99:b6:56:59:24:0c:5a:e2:51:e4:60:1f:
4f:d6:53:05:a1:d8:6b:b5:86:ba:64:83:ed:10:7b:fa:f9:57:
20:03:3c:c9:1c:7c:26:bf:8c:28:7d:8f:d2:55:bb:62:91:4e:
f8:2f:dc:57:18:c8:5c:57:7d:9e:da:9c:58:d8:b2:01:2d:24:
f4:74:51:93:a4:0b:86:d9:c8:31:e1:bc:23:37:1c:a8:79:35:
78:5f:db:96:7d:71:9b:35:27:1a:c0:14:f6:91:49:a5:34:3d:
c7:7b:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:22 2025 by rpki-client