Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json)
Hash identifier: rOMUqOjkvCJLfQI5QHsOzIgfF/CVBAg9DmonKv+FW4w=
Subject key identifier: 88:1B:20:19:D5:52:0F:F8:95:16:BE:73:D0:05:B9:3A:B3:D0:56:8C
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial: 0198D65FBDDDF27EEA2A462B1C2459BBC0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: I32dN6KwFoewNSfpS4XBjG5myXU.roa (hash: PHYrnIWI7dP/AROY19OnK6Q0ENbOWp8OyZchyzmlbds=)
2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: wGmXDdrGdw2r+dUOJMkaA5RARo12JQ7vmMh7JEDeWGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:bd:dd:f2:7e:ea:2a:46:2b:1c:24:59:bb:c0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=881b2019d5520ff89516be73d005b93ab3d0568c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:47:32:5b:7b:5c:4c:ab:fd:86:b6:2a:1a:
66:08:08:e4:ba:a7:63:b3:c3:c2:71:37:f0:7f:51:
e0:25:c1:41:2a:77:06:42:9e:1c:cd:f8:86:95:b4:
95:c5:30:c3:72:82:8e:7d:eb:2b:d7:98:03:5a:28:
61:8e:0a:26:1a:78:bc:6f:3f:a4:b9:c8:98:b2:a8:
d6:24:67:1e:fb:25:5b:11:ab:ab:fb:90:1e:bc:c7:
07:e5:02:d9:bc:6b:bb:e2:b4:46:1c:77:95:85:2e:
58:0b:01:c6:57:9b:82:19:98:52:c1:58:4f:1c:40:
ea:33:eb:61:59:a3:41:fd:5f:cc:bb:12:4f:b9:36:
36:7f:25:5a:8d:1c:ee:5e:aa:7c:0b:28:d5:bc:d9:
02:45:a2:23:d4:c4:65:8f:60:5e:0d:ac:7b:de:9e:
af:e8:a1:b8:5f:be:18:b1:14:72:fb:97:ba:5e:5c:
f5:e9:9e:a7:f6:03:60:9f:fd:e4:46:c3:03:70:d6:
47:d3:e6:b0:7b:7a:11:89:fa:57:4a:1e:09:bc:4e:
70:b3:37:1e:bb:05:04:7f:ac:d5:5b:5a:92:21:e6:
4e:f0:9e:62:0f:49:96:8b:34:52:68:36:11:7e:a5:
9c:f0:7a:55:00:61:25:03:a8:43:71:5b:33:33:0a:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:20:19:D5:52:0F:F8:95:16:BE:73:D0:05:B9:3A:B3:D0:56:8C
X509v3 Authority Key Identifier:
keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8a:a8:d8:42:cc:82:25:4b:ec:13:16:21:6d:25:89:93:21:
e2:88:e1:6d:7f:8c:75:20:ca:97:41:f0:c6:8b:6a:69:12:06:
39:76:a6:b4:12:a3:2a:0a:f5:73:2e:ae:ef:02:18:68:75:6f:
01:8d:14:15:f0:12:39:db:69:4d:42:cd:3a:4d:d6:14:8b:24:
7a:19:f1:db:82:c6:26:54:0f:52:e5:07:ef:09:fb:5f:9b:68:
4a:90:63:31:81:97:18:aa:5d:53:fb:ba:93:e6:e5:4d:f0:89:
58:25:a8:74:1a:bb:b7:eb:29:a1:16:d9:c8:dd:c8:5b:35:03:
d9:3f:65:e6:f2:1b:bc:80:54:1b:e6:59:98:8f:b5:47:bf:45:
75:71:18:99:8a:0e:a9:2c:6e:cb:27:07:f5:5f:2e:b3:cd:18:
21:49:c4:3b:d3:10:2c:ee:15:35:f9:97:08:f1:f1:37:af:e3:
1a:da:01:aa:c5:ba:b3:92:e8:58:bc:7c:61:12:74:c7:94:41:
2e:e7:7c:bf:08:a8:01:16:83:eb:29:74:19:fc:c4:1a:4d:bc:
46:cb:78:a6:5b:ef:44:92:74:23:95:99:67:f9:04:9b:17:2b:
be:bb:94:ea:d2:c2:51:5c:57:bf:4d:3b:d6:40:f7:c0:a1:b5:
02:a3:49:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:59 2025 by rpki-client