Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: UAM+hkdK+92AscMFYyd+Bc7jjtLOuZA3gP7m7jChulo=
Subject key identifier: A7:B8:F7:87:9B:3E:50:1F:C4:16:C5:6E:5D:F4:8E:82:98:CD:FE:22
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 0197B88FACD6B6587492335E1584DE2DF004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: FC
Signing time: Sat 28 Jun 2025 22:01:52 +0000
Manifest this update: Sat 28 Jun 2025 22:01:52 +0000
Manifest next update: Sun 29 Jun 2025 22:01:52 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: Dgmtk2+4DYIpAcTj9hRLbQNbVyAwlnzmCKq5pgU3oKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ac:d6:b6:58:74:92:33:5e:15:84:de:2d:f0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Jun 28 22:01:52 2025 GMT
Not After : Jun 29 22:01:52 2025 GMT
Subject: CN=a7b8f7879b3e501fc416c56e5df48e8298cdfe22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:0c:9d:6e:ea:3c:41:9f:10:f6:16:7b:d0:
2a:a5:32:ae:99:f4:42:33:5e:a7:92:d0:76:45:8a:
06:a3:6a:e4:92:9e:8b:5f:66:1a:b6:d6:2a:d6:d4:
aa:6d:90:8c:2a:b6:0b:1d:24:af:8a:2b:74:ee:c4:
95:ab:0b:70:53:1c:4d:6a:2b:41:8e:8a:2d:cf:32:
68:3b:76:1c:5e:3e:24:be:b0:17:dd:69:09:02:e3:
36:e0:2d:19:e2:ff:9a:87:9a:1d:67:76:54:15:cd:
46:d7:c0:cc:7d:6f:a1:62:4b:af:1d:f5:6d:43:97:
38:58:58:b8:68:32:91:4f:db:95:95:95:c5:a1:57:
0c:5a:70:4b:53:50:e3:32:07:51:3a:a3:03:f2:b8:
fc:0f:b6:8b:5c:fc:11:26:bb:bf:ca:4d:30:a8:ab:
69:c7:f8:c2:6a:19:54:fd:dd:81:41:9c:4b:5c:8f:
68:f7:39:2a:03:65:13:3a:76:74:5f:ea:4d:de:4e:
4c:65:b2:e9:98:46:b5:b2:c4:bf:54:12:9a:76:38:
d1:17:95:5f:8d:05:cb:66:8c:11:0d:96:aa:ac:e6:
39:28:54:56:c0:fc:c9:e8:cd:f7:ae:93:f1:3c:78:
09:1f:e5:8e:99:ed:66:53:2d:00:de:6d:b4:f0:78:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:F7:87:9B:3E:50:1F:C4:16:C5:6E:5D:F4:8E:82:98:CD:FE:22
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:04:1c:60:93:b5:a7:bc:8b:90:b7:b9:ff:a0:01:df:9b:27:
25:dd:84:d4:c9:b6:ff:e3:5a:9e:97:3c:d2:8a:f4:a4:f5:9a:
89:aa:84:39:08:1c:48:04:8f:b3:de:3f:0b:b6:9f:8b:cf:81:
0a:0c:d6:a7:b1:13:1f:7c:29:07:65:5e:57:9a:21:f2:09:36:
e6:dd:86:30:70:dd:f9:01:08:48:53:a4:53:45:38:8c:16:31:
4a:6f:b4:75:86:88:50:b9:e5:c4:36:59:98:9b:a4:35:6d:05:
41:05:8a:87:54:9f:55:71:e7:da:42:9f:26:b6:9e:9d:bc:ce:
24:ba:d0:61:88:84:13:60:b2:65:2e:e6:75:c5:d6:7c:fa:0a:
d8:0e:b4:9a:73:ae:ab:39:dc:95:02:89:13:72:39:b1:6a:07:
a7:b0:1e:86:9d:59:9d:3f:67:75:63:70:78:1e:50:07:86:a3:
92:ac:d1:09:3a:ad:60:18:27:e0:1d:e0:af:67:c7:d7:cd:1f:
74:bf:96:5f:8c:9f:f3:7d:e4:0f:b2:f4:e0:24:2d:1c:bc:1e:
2b:8f:f7:23:d9:e1:be:3a:51:8a:7c:a5:01:1f:dd:82:c6:00:
46:b2:0c:a1:7a:92:5a:c2:1d:db:fc:ce:ea:a4:0d:06:68:89:
b3:3d:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:28 2025 by rpki-client