Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: 94ROFXD3onsSrTZoxt39cXrSrnOujyoXvy5ZKE5FTD0=
Subject key identifier: DF:CE:08:05:7A:0D:77:D8:B4:10:48:87:B3:85:B8:47:DE:80:C1:49
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 01987298DC0E0412B24262E7764921564631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0A3F
Signing time: Mon 04 Aug 2025 01:01:17 +0000
Manifest this update: Mon 04 Aug 2025 01:01:17 +0000
Manifest next update: Tue 05 Aug 2025 01:01:17 +0000
Files and hashes: 1: 2JA-ZwNyhJfjy4iRgBz6O7qcilU.roa (hash: CuX1HDub6jnp4XmLQgh/JslHvidglBPgi73piILRqao=)
2: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: lbGODRYYQQoqHUaMUOLdE9xN88W7IPJWaX5zsW+YOOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:dc:0e:04:12:b2:42:62:e7:76:49:21:56:46:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Aug 4 01:01:17 2025 GMT
Not After : Aug 5 01:01:17 2025 GMT
Subject: CN=dfce08057a0d77d8b4104887b385b847de80c149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:b0:1a:4a:e7:bd:ae:86:32:96:32:ff:5d:
d0:ec:67:13:01:e2:87:a5:df:33:d7:43:1a:a4:18:
f9:26:fe:96:4e:ce:e4:a0:b9:ac:33:e9:7d:38:9e:
ad:90:46:61:fd:fa:80:a2:f5:10:e9:79:70:ea:b9:
39:e3:3b:65:3c:58:ea:e7:95:68:34:33:02:20:ee:
89:cc:c1:a3:d9:98:25:25:55:ec:3d:43:bb:12:02:
bd:95:cc:f3:84:52:c2:3d:d8:fa:1d:6a:33:e8:7c:
aa:96:22:16:48:43:f1:92:34:e2:ba:0f:d4:ab:0d:
f6:93:91:a5:4e:47:b9:f4:20:4d:5a:c0:39:40:4e:
7a:60:b4:02:25:52:b2:29:bf:5f:0c:33:8d:e0:5e:
39:e3:b6:44:0d:90:3b:e2:ab:29:27:85:d4:e1:ed:
67:88:e7:52:b9:c5:2f:06:cc:87:ca:24:d5:d6:4c:
76:85:56:64:13:82:36:c8:04:7c:d9:cd:3f:9f:2d:
e5:70:bc:2c:22:90:35:19:fc:0a:7e:cb:c0:32:e8:
00:58:02:a3:05:67:c1:a7:d9:65:c5:49:62:90:e1:
43:4f:ce:7e:1b:6d:c2:5d:5d:a7:e6:4f:83:c1:9d:
ae:cb:4a:6c:56:cd:6b:98:1d:a9:76:2b:69:24:d4:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CE:08:05:7A:0D:77:D8:B4:10:48:87:B3:85:B8:47:DE:80:C1:49
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ec:e9:16:e2:5f:bd:89:7e:eb:e7:46:82:84:45:02:2b:99:
5c:51:a9:2a:29:c5:9f:a8:5e:5b:04:16:1b:33:f8:0b:ce:76:
1b:be:9c:36:65:f2:2c:c4:99:62:cf:c6:8a:11:fe:e1:67:9f:
07:d0:2e:51:50:7e:dc:38:55:8b:cc:7e:26:93:05:ee:96:ef:
cd:91:30:a0:36:67:65:36:4e:91:50:6a:19:74:7a:52:25:7f:
89:fe:1a:ae:8c:37:1b:84:52:6f:68:96:0d:73:ca:89:bb:be:
f7:71:8e:60:b6:f0:7a:85:9d:f0:08:53:1d:79:72:79:51:1e:
aa:20:be:f5:35:0b:8e:7e:08:c7:32:3c:ef:0e:56:ef:40:77:
55:97:35:61:c1:54:e8:e0:61:93:a0:76:40:3e:79:eb:5d:9d:
88:06:a5:6c:3d:aa:99:17:1c:38:6c:d5:ce:b9:a7:14:7e:f9:
d8:c2:77:dc:8e:e5:43:15:60:fc:21:2a:24:11:e0:12:0b:71:
93:da:7b:f5:f0:6a:da:02:1a:a9:71:8f:7e:46:62:b7:76:5a:
0f:1e:2c:17:34:92:7e:21:99:86:dd:f0:a7:1e:54:3a:66:5c:
6d:70:9d:31:5f:bc:1d:7c:d7:f3:97:17:ee:d7:eb:37:8b:4d:
11:bf:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:40 2025 by rpki-client