Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier: KmxUM2frPC1+FMEXak4I/HmN5qYLXoHE52lBTZ3APzE=
Subject key identifier: 80:C4:E1:8A:7B:41:CF:39:04:4B:F1:28:A1:68:2D:23:AF:82:C3:E7
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 019874BDA6DB4F8DD8E57BFE7744FA548E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 11:00:42 +0000
Manifest this update: Mon 04 Aug 2025 11:00:42 +0000
Manifest next update: Tue 05 Aug 2025 11:00:42 +0000
Files and hashes: 1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=)
2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: neEb1y1DdSN1NPX3Tii28yPIlKNEypCd8b1u8IpbSAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:a6:db:4f:8d:d8:e5:7b:fe:77:44:fa:54:8e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Aug 4 11:00:42 2025 GMT
Not After : Aug 5 11:00:42 2025 GMT
Subject: CN=80c4e18a7b41cf39044bf128a1682d23af82c3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:05:91:9c:12:c5:4c:50:a7:16:eb:66:6a:
90:0d:2a:74:34:03:4a:12:2d:8e:dc:6e:bb:b2:78:
c3:44:f0:60:90:9a:7e:b1:2c:c6:0f:d1:2b:8c:39:
93:4b:18:87:cc:e1:ed:86:7c:70:cb:82:4f:0d:cf:
42:ba:73:d5:62:c2:1f:e9:7d:86:dd:8e:30:61:e3:
36:b2:dc:41:ce:d1:00:7c:21:48:67:33:b5:b6:ef:
1a:2b:33:44:01:3d:48:33:cd:94:a2:0f:12:62:86:
cd:15:07:4b:0a:99:20:b0:ce:af:64:3e:2e:21:6d:
a6:c3:c5:a7:20:7f:c9:e8:9c:6a:00:c4:79:58:d5:
68:c7:04:3d:a9:c2:34:ff:74:b1:79:a9:65:24:7c:
54:d1:6a:97:fb:50:20:45:c8:86:af:79:c2:89:71:
6a:1c:9d:18:58:00:c4:0a:2e:c0:98:38:b6:1e:7f:
c0:dd:05:fd:f5:15:a8:14:0b:72:dc:11:03:b1:29:
e1:37:ab:af:ab:8c:eb:53:b5:16:70:d1:5a:5a:d5:
0a:6a:5a:93:a5:14:5d:b1:8c:f4:66:52:c8:a6:77:
68:8f:c2:d1:cf:4e:38:32:59:7b:cb:d3:fd:8f:fc:
8d:e6:11:c8:f2:96:b6:b6:f6:d3:96:2b:35:29:8c:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:E1:8A:7B:41:CF:39:04:4B:F1:28:A1:68:2D:23:AF:82:C3:E7
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1d:bd:dc:a1:c1:4b:d1:19:28:b7:3f:20:7c:29:a8:10:98:
a9:e3:9e:16:0f:7b:19:53:3a:ce:e5:35:88:a8:fc:12:1e:3c:
e3:44:fb:71:af:59:85:16:a2:58:2f:68:4b:9c:ae:e1:3a:5f:
fa:46:32:8a:b4:fe:bd:eb:c7:ba:67:9a:10:92:5b:44:e3:9b:
26:0c:c6:d4:e2:a6:28:cb:17:d8:1b:94:cb:c0:a7:06:d2:18:
b9:c0:86:02:42:53:26:8d:a3:4b:e0:74:1d:85:a9:3e:b3:4d:
46:59:e6:a3:bb:84:a3:3c:43:70:09:d6:82:08:4e:53:99:00:
07:8c:99:54:7b:55:33:18:41:76:a0:25:e7:c2:60:71:c0:40:
b4:6d:50:12:e6:79:a2:d0:5e:2b:96:25:03:b1:da:ca:8b:44:
a3:ee:d9:79:d3:ff:dd:e0:b5:44:fc:7b:3c:d5:ab:30:d7:65:
c6:cc:0a:0e:b7:41:65:94:0d:72:a0:86:08:04:51:e5:fa:6f:
1a:1c:ca:10:6b:96:79:a2:15:8d:f5:30:e6:d2:45:da:01:5e:
21:cd:70:72:86:b1:dc:21:e1:68:9f:7c:a7:09:3b:52:95:34:
46:16:5f:1f:a4:07:e0:25:66:51:98:c8:45:6c:07:df:45:2e:
08:36:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:25 2025 by rpki-client