Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: q40Cl7fa8laN98fLSB/mExT5yWhEKsa2WmR4EW9YW9I=
Subject key identifier: DA:1B:DC:7A:4D:27:2A:7B:2C:D2:D3:D1:9E:CE:7B:77:BA:C1:62:99
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019891EC793D10D451E8A1736D1F15DEAD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 1024
Signing time: Sun 10 Aug 2025 03:00:50 +0000
Manifest this update: Sun 10 Aug 2025 03:00:50 +0000
Manifest next update: Mon 11 Aug 2025 03:00:50 +0000
Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=)
2: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=)
3: Ajg1evwXtbOwH8JbxtFbskFgAik.roa (hash: iHM/YIdefBXDCl4eoKU+a8Pl/9qUhEUpDTRYLpSYF+k=)
4: BzIUJhUJbKG8FJ3ZDsR0CAFvEys.roa (hash: Wo3BYY5cyZkRMqsE1puPM7lM2g8GnmQ0M7pog+XPkLo=)
5: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: vT77gugMtc371SrMa+aGzPDEuZgGAOM9CxdPLwdF9z4=)
6: aFy58PHjeTiC7YW5IzZTdEFHuKs.roa (hash: cjyImwXHrtyyKxwYqXgXS9BlQlxdv0TV4Z/cZYfi4dc=)
7: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=)
8: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=)
9: rSBf7m4QN8B8IdOa1QZkuz2yGzo.roa (hash: HK04u30OvyiqU+SoQ1bUDIZ6GpYsXVoMPcjWlJuPm+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:79:3d:10:d4:51:e8:a1:73:6d:1f:15:de:ad:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Aug 10 03:00:50 2025 GMT
Not After : Aug 11 03:00:50 2025 GMT
Subject: CN=da1bdc7a4d272a7b2cd2d3d19ece7b77bac16299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:63:e7:1f:cf:04:1d:4e:75:ad:d5:b2:6d:
33:fd:4a:47:21:23:d0:2b:a7:71:f6:7a:85:32:c3:
d9:ef:c5:61:b9:1e:3e:65:2b:c3:4b:ac:f3:23:73:
39:44:cb:a3:27:46:33:df:cb:5d:36:11:74:74:bc:
08:6f:19:73:70:e6:a4:f8:6f:54:4a:d2:ae:5b:c2:
12:34:31:ca:86:45:bf:9f:34:19:37:76:f6:62:b0:
fc:12:21:24:1b:7a:c0:c9:00:f2:5b:2f:5c:e5:d0:
e1:b1:26:33:50:cc:27:ec:5f:3f:2f:6c:8b:be:15:
3a:2f:28:b8:f8:4d:a3:fc:23:a8:55:c6:5c:40:51:
5f:d9:28:02:89:9b:3d:35:15:69:0f:82:c5:4e:d1:
19:05:0b:39:cb:0d:35:71:b0:a4:ee:87:ba:eb:60:
11:32:89:77:dd:d9:b6:49:f8:1f:a1:ad:67:7d:bf:
e5:b6:5d:b9:4c:f0:bf:2c:72:7f:fc:59:95:c2:e6:
83:c2:bd:2a:13:14:56:10:09:a3:bb:38:4c:48:4d:
20:de:09:9e:44:22:23:e1:79:84:3c:05:ae:24:b0:
24:ea:22:b9:83:ac:42:0f:b5:7a:e1:02:58:a2:36:
15:6e:6f:53:a9:16:1d:c5:9c:4d:22:0a:63:3c:e3:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:DC:7A:4D:27:2A:7B:2C:D2:D3:D1:9E:CE:7B:77:BA:C1:62:99
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:f4:87:3f:66:ad:a7:e7:e1:4b:77:5f:13:ca:b9:44:04:
cc:b4:b8:45:9a:d1:01:85:88:5d:9b:f9:88:0f:c2:79:a8:79:
86:97:de:27:db:99:7e:cb:d6:09:c7:ee:b6:05:20:95:2b:9f:
3f:44:86:9b:79:04:20:ea:51:52:59:55:c4:64:bb:4e:0e:80:
19:e1:66:23:dd:4d:4a:17:32:e9:f3:2e:a1:3a:77:4e:65:15:
dd:f3:80:79:c5:c6:f6:03:33:09:91:51:86:20:f5:9f:f0:6b:
bd:e6:50:12:01:45:24:cb:7a:a9:4f:80:ab:6d:5c:e2:9a:22:
04:cb:a3:75:70:85:ce:77:80:57:5d:74:0d:a5:81:41:d7:f8:
fd:89:e0:80:8a:28:ab:71:cf:20:71:83:aa:c8:1b:e0:7e:98:
bb:78:e1:e2:b6:63:04:3a:b6:e2:27:76:59:c2:74:97:c6:17:
6e:33:16:de:3f:68:4f:39:58:83:c0:fe:7e:3d:28:c0:23:8c:
65:43:6e:9a:58:f2:6f:02:78:ab:85:97:8c:9b:6a:ce:4e:7f:
c7:1c:50:b6:fb:53:69:06:60:ba:07:05:0c:87:09:0c:5f:dd:
29:93:bc:5d:e3:5c:8c:3e:b7:ba:89:c2:6c:07:e4:fe:c4:99:
2a:04:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:44:02 2025 by rpki-client