Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json)
Hash identifier: 1Zju7T9yg+Afs/yqjjzP4DjeSjpQ5NKfA2M9kB3Juvw=
Subject key identifier: AC:9E:14:29:23:EC:A0:61:F0:2A:E6:EF:AC:38:3C:B1:96:AF:A7:DE
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 019889C4D3CF53B98E94A490D7D7D397D321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
Manifest number: 04C4
Signing time: Fri 08 Aug 2025 13:00:34 +0000
Manifest this update: Fri 08 Aug 2025 13:00:34 +0000
Manifest next update: Sat 09 Aug 2025 13:00:34 +0000
Files and hashes: 1: 9RdZIw-S-FYoTEGCNtUVTMr1UI0.roa (hash: cuWu4zoZh39hHnMbQsbn1GavX5fkwgR9EpdjwPAYmFM=)
2: C36HYE9g7Segc4lKsITQsAPbk3A.roa (hash: xJXCT5dY3X53zr13t7CE1ukR4VVrDp6NvKtvl+FjEKs=)
3: J9sdBRndgWMXRbtrEj6DzAaduFM.roa (hash: 1mU1gIeMkOu38sOl5UhcF+y7DrqaJPBXlv7kx0JqTAw=)
4: K6r4JbxghClQGiOJgPHD3qM06uA.roa (hash: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=)
5: WLnNiHQkhlfgINfxpD2br98XvwA.roa (hash: meEdE8yNwOSarbCrMNr+5gmR/PbuI8v0hmQMO5QzIaA=)
6: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: 0p6l/kJ+R3PFV+P4QOEV+9APRChrwpGWcVuaVaWSv6s=)
7: jrWoUX2I08t96DUAzMXpfrjbImw.roa (hash: 5fZxekpC+R8XTkzuMqL1WK63VlO9GSurjZzzW/k5L60=)
8: nWYHniVnDldwYunEGsc0VWWiVYU.roa (hash: VRa9zgOVZdpaRaM8P3APLwpP4Czcpn3M9s3Qb5fNEps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:d3:cf:53:b9:8e:94:a4:90:d7:d7:d3:97:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Aug 8 13:00:34 2025 GMT
Not After : Aug 9 13:00:34 2025 GMT
Subject: CN=ac9e142923eca061f02ae6efac383cb196afa7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:62:6b:66:88:fd:8a:39:4b:33:94:f8:f6:
54:5e:3e:eb:ff:9f:40:64:dd:9d:50:04:98:c4:ed:
d1:73:d0:43:ff:38:3c:84:a6:62:74:fa:b3:e5:57:
e9:86:32:38:10:88:62:7e:9c:b6:3b:3b:eb:75:ef:
73:29:f2:cc:2e:26:21:cb:04:12:4b:70:4a:9d:e4:
ff:01:a9:63:57:10:4f:d0:9f:a5:d6:f8:e7:76:98:
91:01:25:76:03:58:ac:16:30:8f:29:9a:1a:81:a8:
9e:4e:b1:84:4e:42:45:45:71:94:26:a3:f5:ee:4e:
66:72:58:46:cc:8e:92:13:08:0b:36:be:51:a0:53:
67:8b:de:41:70:83:cc:c1:3d:b5:0b:7c:ea:42:74:
54:90:fb:76:e0:f5:d3:f9:0f:c0:62:e5:b7:93:d9:
65:0e:90:2d:c8:9c:7f:09:a5:62:b8:2f:47:6a:67:
ce:96:07:96:29:9c:a2:37:74:77:ef:30:49:a2:ca:
0a:07:f9:c6:00:b4:f5:bc:a0:27:03:b4:25:06:26:
a4:d3:61:f6:ae:da:85:00:51:30:2b:02:d6:c6:59:
e2:af:9c:66:a2:83:01:68:ae:c8:09:00:3c:86:49:
89:82:ef:9e:d5:d2:79:77:8a:d4:b1:6c:42:be:15:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:14:29:23:EC:A0:61:F0:2A:E6:EF:AC:38:3C:B1:96:AF:A7:DE
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:2f:69:d4:60:b6:76:f7:bc:98:c3:67:54:66:3d:13:87:
65:b4:e3:50:07:35:ec:b2:19:67:42:c6:54:33:52:a7:a1:1e:
50:bb:de:a8:27:06:83:46:f3:f2:12:8f:46:59:9e:f2:96:86:
fa:81:94:68:4f:50:f1:c7:c4:7a:00:e5:da:b4:86:29:4c:a6:
67:2f:0c:87:f7:cb:9b:ff:e5:e4:f3:25:7d:51:cd:60:04:e5:
bc:8e:9a:75:6f:41:5b:45:c2:6e:d3:9d:f0:31:ba:42:c4:5f:
24:d8:72:a8:3d:de:f6:96:f7:06:e3:b1:d6:f8:71:21:d2:ca:
c2:5b:17:ab:14:97:b2:62:51:b3:82:29:e4:68:51:62:cb:3a:
a2:c7:4e:3b:7e:f8:e6:d6:01:58:99:20:1a:4e:4c:67:1e:83:
d0:da:6f:7b:d5:20:5b:51:82:06:36:7e:f5:3d:cf:46:65:17:
d9:ab:ba:28:dd:c8:4b:7a:0e:3c:57:02:c6:ff:f8:25:1d:93:
ca:3a:4f:5c:e5:c1:39:e7:f2:7e:59:61:1b:81:8e:2a:2d:38:
53:e0:9a:75:e6:2a:72:fc:d7:50:b3:a0:17:57:76:4e:41:82:
a4:22:7a:f6:7f:82:c8:f9:b4:f4:01:98:3a:d5:81:f5:7c:2b:
80:c1:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:36:59 2025 by rpki-client