Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: +3aOrS66ZtsOYs8N5yDAgU4+wsZuLbJBP7QKuNzX8VQ=
Subject key identifier: AF:A7:B2:67:77:90:D1:A2:47:EC:24:12:4D:81:43:B9:C6:A0:15:CF
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 019873066768E69F014C572F0DC8610CD222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 094B
Signing time: Mon 04 Aug 2025 03:00:56 +0000
Manifest this update: Mon 04 Aug 2025 03:00:56 +0000
Manifest next update: Tue 05 Aug 2025 03:00:56 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: aw31GTZOJfHnuMHBDDLIE8NVdlXkr/LfKKM8q7I0kE4=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:67:68:e6:9f:01:4c:57:2f:0d:c8:61:0c:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Aug 4 03:00:56 2025 GMT
Not After : Aug 5 03:00:56 2025 GMT
Subject: CN=afa7b2677790d1a247ec24124d8143b9c6a015cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:d5:68:92:78:37:02:03:72:15:16:62:8c:
a0:b1:52:30:0c:45:8c:7a:29:4b:5a:19:74:ff:c0:
bb:f3:f5:d8:d2:19:b5:d4:c7:06:f9:c8:87:5b:5c:
6c:d1:76:99:05:79:06:65:20:f4:93:a1:14:1a:92:
fb:44:ae:a3:3d:b5:d3:8b:cf:f8:10:9d:5b:4c:8e:
8e:ba:bf:a8:ed:12:9d:54:5a:38:9d:af:5e:8e:c2:
ff:89:3d:78:56:78:ad:29:43:c8:5f:bc:0d:3b:b4:
2e:40:c5:c4:6c:a4:59:68:b5:dd:d6:5c:d1:5e:60:
7a:14:fd:7f:68:ca:58:8b:84:dd:a2:5f:55:0b:45:
c4:36:a6:4f:ae:85:b8:00:99:f6:23:72:30:66:35:
66:fd:ba:4b:d7:15:d2:e7:c5:51:c9:5f:cb:92:e3:
7b:1f:9e:03:48:b8:36:04:13:a5:0f:78:c3:55:c9:
1d:e8:3e:dd:24:c8:3a:31:37:1f:9e:b2:e5:39:6a:
93:83:ac:22:9a:28:49:cb:af:f0:47:c4:60:ea:8e:
9b:63:85:7e:c7:b7:89:a2:00:84:05:34:75:b7:bc:
f1:56:39:a7:15:5e:fb:cc:1c:de:7c:47:8d:53:0c:
dd:45:b4:8e:88:d0:b4:fb:82:3e:f6:83:37:78:ad:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:B2:67:77:90:D1:A2:47:EC:24:12:4D:81:43:B9:C6:A0:15:CF
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3c:e8:e8:ce:a3:2b:cb:3b:33:ce:9f:9e:79:fd:48:6c:c6:
f3:d3:7b:01:70:50:13:76:f7:63:30:17:d6:8e:0d:7c:77:8a:
c9:f2:cb:e7:25:49:f1:90:a7:0f:87:8f:98:52:de:43:74:ec:
77:a9:7c:bf:d8:82:52:c3:c3:e6:cb:33:ff:93:3d:5f:c2:15:
1f:fb:92:2e:75:4a:2f:aa:92:13:f7:2d:ba:1c:38:89:ce:a5:
11:f7:c2:8a:0b:9b:3b:cd:f1:9f:7b:be:dd:49:1f:29:bb:48:
fd:80:35:e9:70:66:41:ad:72:68:56:2b:39:94:e2:07:cf:a9:
50:03:cb:f9:f3:8c:0b:b8:99:9b:1b:5c:f8:a4:1e:b7:f8:d8:
63:59:85:a8:22:0d:6f:04:98:78:0a:63:4e:f5:1b:ec:dd:b4:
50:63:32:56:25:08:75:03:f7:f1:2a:32:13:30:61:b8:49:2e:
a2:b1:55:7f:50:f3:6e:4e:9e:19:a6:9a:18:de:82:02:fd:d7:
72:1d:8c:29:41:3c:f2:ae:ec:96:8e:d6:5a:42:05:66:32:1e:
57:99:c0:41:d0:6d:04:6b:16:6b:45:86:15:97:ee:4a:12:cd:
66:99:e8:bb:f5:bd:2f:fe:0a:8b:94:21:74:30:3e:97:3a:2c:
15:4d:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:46 2025 by rpki-client