Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: 7EJ7rgeT/O1xsarHcjy3+F7P9AQabaAkSgzsOzRE4bU=
Subject key identifier: 17:02:0F:EF:6B:7D:62:98:E2:FF:88:73:CB:0D:F9:B5:AF:5F:CB:0B
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 0198744FBA5F6375AB61F5139BCC193D543F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0B20
Signing time: Mon 04 Aug 2025 09:00:38 +0000
Manifest this update: Mon 04 Aug 2025 09:00:38 +0000
Manifest next update: Tue 05 Aug 2025 09:00:38 +0000
Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=)
2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: 2Ux4KRGy1Ll8KDlCwhgeQyg69SSKMX17ZRh/+L7T4p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ba:5f:63:75:ab:61:f5:13:9b:cc:19:3d:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Aug 4 09:00:38 2025 GMT
Not After : Aug 5 09:00:38 2025 GMT
Subject: CN=17020fef6b7d6298e2ff8873cb0df9b5af5fcb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:de:40:78:e6:5f:4c:d6:bf:87:d1:1d:8d:
fa:e6:58:b6:8f:ca:6e:2f:c7:a5:ce:d4:48:1e:81:
9b:ac:0c:45:e3:c9:b7:a2:c2:b6:a2:9f:f2:67:0a:
34:d7:df:6b:5e:d0:ea:db:15:a9:04:ac:84:f5:9b:
dc:e4:0c:ab:44:52:44:10:66:c2:36:28:1f:b7:22:
e4:ce:fd:86:9d:15:de:63:89:47:7d:9c:c5:da:88:
75:1d:c7:11:e6:5e:31:6b:a5:bf:5a:42:05:79:15:
1a:49:59:b1:0a:3e:5a:12:58:b2:79:97:16:00:a6:
c6:04:8d:01:49:32:72:d0:c5:3e:0a:19:2b:db:a7:
3d:16:3d:3f:7f:d3:02:68:fa:d9:eb:de:cd:98:50:
6d:90:03:a8:ea:ab:b7:fb:f8:29:34:e5:1f:91:71:
6b:87:fb:aa:ec:21:86:29:f7:f5:47:0a:25:cc:cc:
4a:9a:79:cf:92:e5:43:f4:a2:e4:92:50:0c:35:17:
28:92:5c:8d:a5:84:d0:4d:52:09:29:1e:84:5b:b0:
de:18:32:6c:b5:11:3b:1a:a9:8b:a2:15:05:c4:f6:
f6:87:f0:57:00:06:a1:13:d6:50:b8:67:b2:c9:52:
c1:b2:4d:0c:de:e3:15:e0:7b:1d:57:96:0f:45:08:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:0F:EF:6B:7D:62:98:E2:FF:88:73:CB:0D:F9:B5:AF:5F:CB:0B
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e7:94:05:b3:23:c3:b5:74:c6:b2:4a:53:60:f8:12:e8:bf:
5e:48:ec:6d:d8:18:5b:2b:b2:01:b5:8c:e0:70:6c:9e:9e:04:
7a:d2:6d:35:eb:7e:4d:cb:f4:e7:2e:01:30:f3:dd:e0:bd:28:
d5:b0:61:e8:74:28:fb:53:4d:33:6e:c7:a9:22:60:14:49:83:
61:57:0a:b3:1d:5e:75:fb:88:93:43:41:c7:e8:8b:48:85:0c:
79:b2:08:60:62:7c:05:67:3b:f4:57:f0:58:ea:44:e6:35:20:
55:f7:b5:cc:29:87:c3:a1:05:38:56:d3:28:d6:2a:75:41:b3:
9e:bc:5f:16:07:97:0c:8e:8b:83:3f:d9:6f:2f:c8:24:bb:c5:
db:b4:6d:2d:1e:1c:5a:85:56:b5:d7:1d:67:00:0a:f8:3e:73:
4b:a1:bd:1f:ca:13:c0:f6:15:71:ad:f1:2d:94:db:ad:77:24:
d7:07:2f:bb:e4:41:8d:ad:06:98:64:d9:5b:bc:b3:4f:50:5a:
95:0a:d6:7f:70:c0:e9:35:ba:0f:63:42:4f:9a:75:17:c6:35:
55:c4:6b:79:d3:3b:b2:a7:f3:84:c9:6b:99:ea:c4:bc:ba:ab:
38:94:ca:f2:e3:db:40:0f:34:4c:55:8d:b2:ce:ca:4f:31:6c:
cd:9b:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:17 2025 by rpki-client