Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: PdHR0sR1BnqaoHN7JN1WyT8O76rgS16YY3oWnRdqz6Q=
Subject key identifier: 61:5D:98:26:6B:D7:4F:95:30:89:1A:D3:6A:01:E9:AE:F3:B4:9B:08
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 0198D583DEF9F482CF2553F6D94C27A1A7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 77
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: HRoRP4XhhYpU785BEKhZ1q4e20g.roa (hash: G6jwo30XwlnomMCEKD4f2VAkjCPOzmiVIHus+OyycRI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: jIanpSC1P7Hk0XhMk4NFGU7vh5fJI5UclQDsFzJMPNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:de:f9:f4:82:cf:25:53:f6:d9:4c:27:a1:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=615d98266bd74f9530891ad36a01e9aef3b49b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6e:87:73:70:c3:d4:5d:b3:52:3c:ac:dc:ee:
10:35:bb:46:19:96:f4:bb:59:06:34:f4:b8:cc:e6:
51:a2:d2:17:b9:ea:0c:43:6f:4a:58:bc:52:38:f4:
07:5b:71:07:7a:af:c7:2a:ad:7c:e1:1b:dc:00:35:
e0:67:69:79:96:18:bc:96:c3:44:72:72:ce:52:b3:
35:a9:8e:be:fe:49:20:a9:a9:e0:fa:bd:43:cf:de:
d7:70:51:c7:68:5c:8c:f1:01:8e:a4:fa:45:b4:c1:
d2:ca:12:5a:af:e4:0f:99:16:f9:02:82:ff:a5:ca:
cb:ab:e9:2b:8a:8d:d8:b1:c2:2d:f1:16:c5:52:0f:
89:1a:aa:d7:50:08:f3:a7:87:2a:3e:d7:b8:7d:f2:
78:38:f0:cc:70:53:12:0c:46:38:cf:87:b5:7d:5e:
01:6a:a3:fa:4e:a7:7d:f9:d4:42:8b:b3:42:68:b0:
9c:45:01:be:4e:1c:8c:e5:03:65:0c:bf:ad:c3:16:
40:88:a3:5c:6a:7c:61:cd:1b:84:67:48:57:62:0f:
46:53:91:bf:fb:f7:1a:ae:c6:34:e9:36:b0:e0:cb:
e0:6f:60:07:95:0e:48:cd:91:cb:40:c4:ec:6b:0a:
54:95:6b:52:57:8d:8d:94:23:68:63:db:01:05:42:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:98:26:6B:D7:4F:95:30:89:1A:D3:6A:01:E9:AE:F3:B4:9B:08
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:3e:aa:64:da:a2:e2:73:72:d9:72:bd:96:7b:8b:d7:de:
66:83:22:72:8d:52:ff:ae:f5:96:91:ab:11:9d:3d:02:21:58:
38:be:3c:1f:30:73:2b:d0:90:ea:c1:2e:21:44:c4:48:0c:de:
69:31:89:99:b6:a6:db:d1:57:05:c3:70:b4:18:43:b0:0a:1c:
60:4e:b6:d2:83:bb:32:27:6c:23:56:22:da:96:b4:dc:46:65:
49:72:94:b0:b0:c6:87:7a:d8:e2:81:1a:cc:db:16:22:98:3a:
7e:9d:fd:e2:72:92:7e:65:c8:bf:3b:a3:53:2b:c0:64:f9:6a:
13:21:43:70:8b:f6:71:fa:6d:3c:cb:a6:ae:8e:a0:95:ad:66:
50:d3:ba:e7:a5:dc:76:ee:0d:69:4f:61:d2:ff:44:6a:76:49:
b5:4e:a3:68:3e:b6:b7:3e:0d:d0:6d:7c:c2:55:68:97:67:eb:
25:91:31:51:58:9a:31:47:e7:f5:5d:64:1d:dd:d4:04:8f:8f:
d3:e2:d4:35:38:4c:e7:8d:ca:9e:c1:af:78:da:1d:65:16:95:
b1:ff:dc:17:0e:0c:44:31:03:a1:d8:ee:2c:0e:ea:1e:ec:4b:
61:49:48:64:8c:10:ec:9e:bd:e7:3f:f9:18:96:4a:16:18:54:
77:1a:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:48 2025 by rpki-client