Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: b49ungE4K9t2JEYKtK0fyLmHJ8XVhJ1tYQjbAy/cFCU=
Subject key identifier: 85:52:5B:4F:45:41:90:7F:29:D7:5E:A8:0C:EA:95:FB:69:9D:0C:0D
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 0198819E25693024A41DEAD9AA313AB7C056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 23:01:21 +0000
Manifest this update: Wed 06 Aug 2025 23:01:21 +0000
Manifest next update: Thu 07 Aug 2025 23:01:21 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: Exebrk9KJveuwsCltW7SulfB3DzdoX0yzgGcMpmaIHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:25:69:30:24:a4:1d:ea:d9:aa:31:3a:b7:c0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Aug 6 23:01:21 2025 GMT
Not After : Aug 7 23:01:21 2025 GMT
Subject: CN=85525b4f4541907f29d75ea80cea95fb699d0c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:b0:e5:b7:69:41:d4:9a:57:ce:3c:71:f4:
19:d4:ea:25:43:d5:dd:89:81:3a:0b:2d:dd:82:57:
97:98:53:d8:b8:25:24:45:3c:f7:e0:2a:ca:aa:1e:
b8:7a:b5:9f:a6:e6:c0:d1:51:16:00:18:64:5b:89:
6b:39:4b:6e:09:ea:a5:22:65:05:cb:b6:16:91:21:
56:79:ad:76:6f:e3:8c:14:10:82:2c:63:25:30:11:
9a:90:a1:60:94:75:61:1a:f4:ba:02:ef:75:50:e0:
53:71:f2:5a:f8:a0:0c:aa:ed:fa:28:9f:f8:c8:03:
09:fb:d5:8d:62:1b:0a:f2:97:9a:bc:84:ec:4e:d0:
68:c9:a0:fc:d5:29:e4:a2:21:d6:74:40:46:e0:e6:
ff:66:af:fe:5c:03:de:c4:77:78:ee:c3:7c:7d:a3:
cc:9a:59:a1:5d:40:18:ca:3c:1a:b3:bc:6f:90:35:
06:f6:25:a3:f3:31:1a:3c:08:18:ad:45:e2:b3:03:
66:f1:dd:f5:d2:41:84:6e:09:6c:e2:d3:b2:d3:a0:
49:8a:6c:49:ac:9f:f9:c1:0a:9a:1c:4b:d2:96:96:
df:2a:e8:d6:03:0c:9d:a4:6e:29:ab:6f:28:78:c7:
8d:6e:72:21:ba:34:e9:7d:60:75:36:51:e7:31:cf:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:52:5B:4F:45:41:90:7F:29:D7:5E:A8:0C:EA:95:FB:69:9D:0C:0D
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:82:c1:a2:47:cc:14:0a:60:cb:fc:43:c9:fd:8b:31:17:56:
b8:87:e9:39:5d:7c:9d:70:a3:7e:62:a1:a8:d4:c0:14:70:9a:
ff:00:5f:cd:53:ae:f3:16:9c:ad:e2:f2:53:e9:5f:9b:58:af:
7a:56:5d:7f:4c:78:b6:4e:91:50:65:94:b5:a5:0a:6c:96:94:
c6:b9:dd:18:d1:0d:a4:85:06:57:43:b8:45:f8:ea:3d:f6:2a:
b0:b5:30:c5:57:47:f4:ab:e9:21:c0:20:12:17:9b:2c:9f:16:
d2:63:f1:c4:5c:6a:45:e9:f6:0c:38:34:16:c1:de:03:83:c2:
b5:55:6b:c3:8c:73:1d:dd:6c:19:de:1b:d1:ef:23:85:f2:56:
b6:2d:b1:cd:27:af:ca:2f:f5:b6:3e:57:c8:d7:e6:a1:01:6d:
35:6c:8e:b4:47:76:c7:41:18:7a:ab:3f:1d:f2:ab:d1:57:6c:
54:60:e7:75:57:ba:c7:37:a6:8a:89:4d:41:d1:84:87:99:4d:
3e:d2:fd:d3:db:36:25:6d:58:71:d1:3c:1e:fe:3f:75:ee:c3:
22:f4:2d:65:43:da:a6:c6:e1:3a:48:99:d8:65:b4:84:ff:5b:
12:73:41:cb:cb:87:6a:ca:cb:d2:3a:4c:3e:a9:fa:a3:b6:5e:
a8:19:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:23 2025 by rpki-client