Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: q4Yq1ktsC4VqFA+miJoVo7BNAOiisP7uZ+R0CeNNIg4=
Subject key identifier: 12:5B:7C:9C:EF:A0:CB:D1:72:43:5F:A7:5B:56:48:52:2C:F1:F6:A5
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019873E1C38D7DEE4C388F4300EDC636DBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:00:32 +0000
Manifest this update: Mon 04 Aug 2025 07:00:32 +0000
Manifest next update: Tue 05 Aug 2025 07:00:32 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: 0cZkugfd5PgCFwoh7Br0GfoqH7ME9a92jigs7ofIfI4=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c3:8d:7d:ee:4c:38:8f:43:00:ed:c6:36:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Aug 4 07:00:32 2025 GMT
Not After : Aug 5 07:00:32 2025 GMT
Subject: CN=125b7c9cefa0cbd172435fa75b5648522cf1f6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:3e:e1:85:a7:f7:f7:2a:65:a1:0c:75:91:
76:d1:fb:fb:ce:4f:b0:ea:75:db:ce:22:5a:be:3d:
1d:59:88:4e:97:07:d4:ba:70:ad:97:2f:5e:37:5c:
02:ac:f8:33:01:26:f3:1f:39:a1:3d:0c:6f:56:9d:
b1:06:7b:db:0a:2d:77:24:23:85:31:5b:cf:3d:6a:
8a:4c:67:74:f8:c0:d1:c7:0f:f9:88:e3:02:98:4a:
09:53:96:d6:aa:f7:4b:aa:ef:e1:f6:5f:4f:38:b7:
23:f9:b8:db:b7:7a:5d:a4:05:f1:9b:58:0e:c8:fa:
9a:f4:85:18:ae:3b:fc:32:29:de:e0:c3:64:4b:d4:
b3:e1:71:1a:00:51:a8:6c:b5:e2:72:99:7c:e8:5b:
b4:b5:a1:d7:f8:c1:c0:48:a8:fb:22:a3:af:57:e5:
66:b8:76:43:26:15:bb:b6:6d:48:67:2d:99:5a:a2:
b4:9e:95:14:71:8e:81:d7:63:db:f2:9b:1e:69:50:
16:9a:dc:ac:f0:09:d1:99:b7:79:e4:da:d4:51:6e:
44:b4:ec:ea:c3:e2:bf:f9:b4:2b:e8:d5:f5:12:76:
53:d2:f8:d7:fb:1c:0a:13:55:b5:26:71:7b:6c:31:
fa:15:3b:f5:c4:07:80:53:44:54:df:dc:5d:11:dd:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:7C:9C:EF:A0:CB:D1:72:43:5F:A7:5B:56:48:52:2C:F1:F6:A5
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:65:bf:36:e3:a9:8a:56:a3:c9:b1:fa:82:5f:3f:f0:18:e8:
06:95:d6:ca:26:7b:6e:b7:21:6d:ca:d0:8d:2a:81:e8:29:a0:
5a:9e:47:9a:80:aa:aa:1a:1a:10:a2:0a:90:0c:85:55:ba:2c:
47:a4:30:51:99:d0:66:d4:b2:dd:68:da:17:35:95:93:99:18:
cd:41:b0:dd:0d:6c:99:05:db:80:28:83:af:2a:f4:3f:f7:69:
50:b3:76:eb:13:06:39:1b:59:23:d1:e5:94:78:26:26:42:07:
96:ea:f2:17:25:31:08:b5:9a:5e:71:9a:b8:6c:ae:9c:7a:30:
ba:47:c7:9e:d4:f8:b5:95:40:01:e6:10:26:c3:7f:8b:8c:81:
a2:e5:e0:48:e5:37:7e:c1:bf:d8:9f:cf:4a:e3:44:16:53:07:
ed:71:3e:0a:28:d2:30:2c:09:ec:aa:0a:ac:d6:ee:71:3a:36:
e2:60:8f:ed:e2:76:12:c5:e0:45:1b:14:94:86:33:cb:fd:75:
ef:ee:69:55:98:e0:4c:5d:15:6a:2b:da:bb:f5:45:5b:20:56:
3e:0b:c0:a7:c4:d3:3a:2e:98:a2:bd:e0:28:65:9d:e8:0d:ba:
03:49:d6:1d:77:e8:b2:28:02:c1:f3:cf:c2:98:7a:13:aa:3a:
f2:58:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:34 2025 by rpki-client