Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: gGvTEILrD4wG64ots074KtiGjseLA6iGJb4eycrKpr8=
Subject key identifier: 5E:6C:9F:FB:56:0D:71:14:B4:D9:17:8B:C3:EB:DB:AE:B4:B6:48:58
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 0198744FA8E57EF5C11230072788C6134363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0ABC
Signing time: Mon 04 Aug 2025 09:00:34 +0000
Manifest this update: Mon 04 Aug 2025 09:00:34 +0000
Manifest next update: Tue 05 Aug 2025 09:00:34 +0000
Files and hashes: 1: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (hash: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: B7bZT2sC9/fI8+bQG7DDquRDxQfoOXLuNI+fWFpXikI=)
3: lCpE9-_9vA0HzQAwKrWQ7gX2Gi8.roa (hash: YkwTTveNH0IQGCLC0ZIMEDB0zjPdx3yFhcYm5gkoPpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a8:e5:7e:f5:c1:12:30:07:27:88:c6:13:43:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Aug 4 09:00:34 2025 GMT
Not After : Aug 5 09:00:34 2025 GMT
Subject: CN=5e6c9ffb560d7114b4d9178bc3ebdbaeb4b64858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:2e:7b:65:05:93:b1:a5:de:49:ad:d9:01:
52:dc:7c:05:72:99:1e:3c:b8:24:51:38:de:7e:54:
69:3b:83:41:09:06:6c:0e:b3:e5:07:bb:e6:ea:67:
d9:10:34:70:55:39:aa:d1:68:c6:79:13:ae:16:5b:
8e:8f:7c:90:b9:d5:5e:28:f2:a3:64:96:4f:fc:d8:
39:13:60:c4:a3:c7:de:b8:d8:8f:95:97:45:01:44:
09:d6:48:71:4a:ac:9b:38:ab:b0:42:de:01:52:a6:
d1:dc:fd:b2:3c:5b:ec:b7:29:13:c0:7a:42:db:f4:
cd:ae:5a:65:10:77:cf:df:47:9b:6d:6d:b0:58:6c:
9e:16:4f:53:8b:23:35:5a:5f:78:62:75:a6:72:e0:
2b:cc:21:14:f1:fc:61:06:98:97:d8:d6:b0:83:85:
e3:75:f4:a0:97:32:ef:47:7f:da:7b:85:e5:e9:73:
df:09:3b:ac:71:dc:ae:5e:3c:ec:b4:f8:db:a8:e5:
23:01:0f:e6:ee:04:72:a5:6d:3a:68:f2:d8:41:8e:
e1:8c:9b:ac:4d:cd:ee:03:d1:06:98:6e:a1:6c:61:
df:be:54:79:b7:09:0f:10:a9:bb:d8:5d:a9:36:28:
8a:d4:84:8e:c3:4b:34:6c:f6:64:92:5d:a5:f9:9c:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:9F:FB:56:0D:71:14:B4:D9:17:8B:C3:EB:DB:AE:B4:B6:48:58
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7a:8d:81:74:41:56:9d:c0:6f:19:f1:c3:19:17:8c:b4:4c:
cc:af:1f:df:76:ea:01:1a:84:20:84:cd:1f:cd:ff:c7:62:c0:
27:2f:f9:41:3a:77:aa:27:46:77:2c:0c:db:34:df:12:23:7a:
a1:2f:01:6f:c9:65:d3:50:9d:a4:a7:05:0c:cb:a9:3b:8e:2e:
2a:5e:71:39:90:20:87:51:df:97:71:71:3b:47:54:a5:4d:04:
a6:cd:8c:c6:08:8b:19:07:e5:45:ba:3e:6f:c7:94:e4:f2:fe:
74:e4:e5:99:7b:4f:81:3d:1d:5f:e1:2b:a4:01:98:25:f5:06:
df:6c:47:d5:34:49:cd:33:10:b2:82:02:15:34:39:ba:08:e2:
0f:46:de:aa:d3:1d:58:80:7b:c8:43:94:8c:fd:49:c3:34:7e:
d2:e6:96:32:1f:1b:41:5f:67:ab:2d:f7:a0:8d:f7:6a:c4:c2:
e1:f4:c3:f9:7f:9e:7d:a0:d0:7f:a2:b7:8c:70:b6:2e:ea:47:
97:58:82:35:4a:34:03:8d:6a:b8:d1:82:8d:e1:b6:42:14:57:
ad:12:2b:e4:fe:7b:01:65:0f:85:40:15:da:83:89:80:ce:39:
33:41:38:fe:71:ee:ea:ab:24:97:fb:9f:b0:a5:b3:d7:98:86:
58:6d:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:38 2025 by rpki-client