Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: MV++Ye6lMK9/BYPRmBzXRuasQs2TQbbU9Z50anc0u18=
Subject key identifier: 09:11:09:E9:16:8A:37:11:05:E7:6B:00:5F:02:14:2B:A8:FE:49:61
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 0198819DF81086E3D8F889F292FBA24D2C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0D8E
Signing time: Wed 06 Aug 2025 23:01:10 +0000
Manifest this update: Wed 06 Aug 2025 23:01:10 +0000
Manifest next update: Thu 07 Aug 2025 23:01:10 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: ub4jMo8nL23iYaMWc9qESHloAn2/Bhfh8PHBrAUvSEc=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:f8:10:86:e3:d8:f8:89:f2:92:fb:a2:4d:2c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Aug 6 23:01:10 2025 GMT
Not After : Aug 7 23:01:10 2025 GMT
Subject: CN=091109e9168a371105e76b005f02142ba8fe4961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:92:4e:c7:be:2a:a6:aa:65:e0:67:e2:5b:
54:c0:e9:c7:ad:ba:e9:83:6c:2b:55:e9:ee:9d:c2:
b5:64:1f:4d:33:96:aa:b3:e1:27:da:97:d7:1d:0e:
7d:30:2f:d9:3e:91:7b:3e:6b:f8:51:80:cf:38:e5:
96:62:64:c6:25:75:b9:e0:28:a3:c9:0f:b1:67:db:
d6:fd:ed:8d:f8:5c:d0:40:fa:f1:f8:c9:ed:5f:f6:
26:54:e4:40:e2:b6:75:d1:d0:dc:53:a9:7e:6b:85:
95:cf:14:66:79:d8:3e:88:68:da:c6:30:d1:3a:50:
72:43:ac:69:4e:de:98:6b:d6:46:4b:0d:8f:25:8b:
6f:ce:47:77:ca:24:5e:32:ea:c3:ee:7d:2f:7e:e1:
73:dc:9f:3f:c3:f9:ec:7b:e5:cb:54:10:7b:12:16:
2d:54:1c:78:5b:fa:61:08:2b:4e:8c:99:e3:53:17:
f6:ee:3a:f7:40:58:06:53:06:f2:ed:df:90:ac:b3:
fb:1a:45:f1:c9:f2:50:4e:81:50:0e:40:4e:01:2c:
b4:41:8e:45:db:22:c8:6a:47:59:99:5f:24:28:9b:
82:ad:83:40:b0:7f:07:47:3e:c4:2f:e0:c1:5c:49:
bc:1f:54:af:7a:b2:8c:98:4f:e8:9c:d9:f2:22:9d:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:09:E9:16:8A:37:11:05:E7:6B:00:5F:02:14:2B:A8:FE:49:61
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f4:6c:51:d0:b5:b4:17:70:26:e7:b6:6e:02:ab:20:ca:f5:
73:2f:f1:7a:82:ce:bf:8b:73:d1:5f:d3:7a:89:40:35:d9:ff:
0f:28:7d:7d:5f:f6:a3:5e:8a:5d:2d:ab:68:94:7b:9b:9b:a6:
98:93:81:7a:c5:82:09:35:a3:fd:d5:df:ae:28:74:ba:06:92:
10:ee:04:14:f3:fd:7c:45:7c:ae:23:12:27:f8:47:63:83:8e:
82:5f:44:7f:36:93:4b:77:19:b1:4d:5b:26:78:41:2d:84:5b:
5c:a5:d3:42:49:d9:c3:37:92:5e:18:32:c4:61:1a:dd:0a:b0:
2e:ac:d9:62:99:b7:2e:0f:13:ce:af:08:2e:40:b1:2d:5c:81:
d1:a9:5f:59:ae:74:c2:2b:f5:94:55:66:7f:cd:6e:29:5d:89:
e6:e8:f3:2a:34:f8:8a:f8:3d:71:fd:35:37:5f:d7:92:3e:82:
0d:54:cc:36:7f:ae:78:5f:a0:7a:ea:0e:b7:e5:a9:e8:b8:04:
ce:bc:e6:ea:2d:43:82:de:7e:85:d9:31:f4:89:98:e3:c9:f6:
68:c8:12:fb:39:cd:40:88:a4:79:3a:a9:86:b8:93:13:5e:45:
e2:4a:d3:e1:9e:7e:2a:9e:d7:e1:f1:1c:28:e0:37:01:3e:08:
56:28:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:11 2025 by rpki-client