Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: BMjhRyKuhZRI6WRJei4NEZ89O0tG1WYpaz3fLSSRwGo=
Subject key identifier: 48:A3:50:5C:F5:61:FA:77:AA:36:EC:9A:66:EE:1B:02:37:D0:2D:56
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 019873E2D692E05F5841183F73AD01E43A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0C17
Signing time: Mon 04 Aug 2025 07:01:42 +0000
Manifest this update: Mon 04 Aug 2025 07:01:42 +0000
Manifest next update: Tue 05 Aug 2025 07:01:42 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: GFl09BhKsxkYPbVU3kCktRLr6giUY9zNT83bDC+NYN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d6:92:e0:5f:58:41:18:3f:73:ad:01:e4:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Aug 4 07:01:42 2025 GMT
Not After : Aug 5 07:01:42 2025 GMT
Subject: CN=48a3505cf561fa77aa36ec9a66ee1b0237d02d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:4d:f0:dd:5b:eb:2b:91:59:c2:32:b0:91:
79:9d:9f:18:f7:6c:b6:ab:47:ae:36:24:5c:c5:45:
d5:a5:c2:1d:18:86:ec:23:ff:2f:95:7a:f0:7d:8d:
5a:a5:ba:0b:d2:93:ca:f0:78:95:7e:d6:68:a9:47:
3c:21:7f:3b:c6:63:e4:23:fb:29:85:6b:56:16:d0:
5a:d9:39:f4:3c:00:ab:a2:41:f1:58:9c:77:a7:b3:
f8:c5:e5:a7:89:f2:52:50:53:e3:6e:62:00:4c:64:
56:6d:14:43:bf:6f:ef:3e:cb:47:cf:23:cf:44:dd:
34:13:de:ec:de:19:f7:1a:ca:2c:37:0a:8c:ac:5a:
88:41:e0:cf:aa:63:75:c1:f4:51:8f:a5:93:f3:14:
a9:6d:cd:af:38:05:88:05:43:32:5c:a0:63:5b:f7:
4b:f1:85:9e:37:6a:38:11:4f:1a:02:cf:3c:79:84:
25:42:25:f6:c6:72:45:d0:e9:72:15:bf:75:aa:b3:
59:a5:c2:ed:a2:dc:4f:57:78:8f:d6:a0:8d:2a:ec:
e6:f9:8f:fe:cd:b4:4e:d8:15:b1:21:b5:29:18:d4:
81:23:7c:30:15:f3:f0:19:80:23:85:c8:34:cb:f6:
4d:61:4e:eb:5f:36:c9:28:7d:ce:07:a9:3d:cd:5f:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:50:5C:F5:61:FA:77:AA:36:EC:9A:66:EE:1B:02:37:D0:2D:56
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:78:1a:ee:c5:0c:1a:94:dc:e9:b9:ec:1c:a2:9e:21:68:
73:62:9a:bd:fd:1e:ce:f5:ca:81:f1:41:ad:58:10:15:d5:3c:
60:33:8f:ca:fe:cb:28:f1:53:e8:1d:e4:ad:ec:0d:a3:e7:02:
be:58:c4:e2:65:b1:c5:4f:0d:ca:6d:da:92:fc:b9:92:2d:ca:
9f:ba:d5:45:e3:65:0d:21:5f:43:cc:6b:3d:7d:cc:2c:80:2b:
f4:11:b1:20:c4:eb:7c:27:39:f5:1e:4d:58:50:bd:c3:26:3d:
7d:49:42:be:3e:4e:87:25:0d:fd:60:9b:ee:dd:b4:72:d2:21:
47:b8:e7:82:9f:2d:9a:27:c3:e0:59:10:7c:be:9d:fb:a8:2f:
2b:e5:76:24:8e:1f:91:9e:da:33:06:f9:d0:fc:44:f7:68:99:
c3:dd:7c:4e:33:db:20:0b:7f:5f:5a:d6:89:ef:dd:45:ce:04:
99:cc:26:a0:58:ff:56:31:ad:4f:cb:ab:22:d3:63:64:d6:a3:
95:ea:a3:bb:09:d4:30:40:33:44:83:48:ec:a9:56:a8:b1:da:
a7:fe:13:af:59:81:d7:1b:ca:56:a1:45:8a:21:98:50:87:7e:
bb:81:bd:0b:97:82:d3:1d:3c:05:68:53:4f:fc:6d:1d:20:8f:
75:9c:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:46 2025 by rpki-client