Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: i4vl3d/pXCEnC1jQUAVIEw/rMbmect+fgwtgxq0Mkbo=
Subject key identifier: 2A:E9:EA:AC:94:F2:06:EB:F7:84:D4:92:0B:79:EC:4B:07:CF:A9:8D
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 01987E65D60D18DC81931B82A009CAF2157A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 08:00:59 +0000
Manifest this update: Wed 06 Aug 2025 08:00:59 +0000
Manifest next update: Thu 07 Aug 2025 08:00:59 +0000
Files and hashes: 1: DPZDlwC5lvIBjZjDv4jWEsMDlMI.roa (hash: JSJ9xva93NHEmD/GiUVFRsLxBb1tpR6rl5zNqgBI5EE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: JKxy1jc3PdeSA4iORBB0CoHYmSx0a4bfs7rWqqvr/mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:d6:0d:18:dc:81:93:1b:82:a0:09:ca:f2:15:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Aug 6 08:00:59 2025 GMT
Not After : Aug 7 08:00:59 2025 GMT
Subject: CN=2ae9eaac94f206ebf784d4920b79ec4b07cfa98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:55:fd:a3:13:46:91:3b:37:c3:6e:58:f0:
32:21:65:0b:1a:7c:0d:f4:43:fd:b5:ef:41:9a:03:
f8:a3:2c:aa:d6:4e:23:13:e4:64:c3:6e:82:a8:0b:
7b:93:40:0e:38:eb:2d:55:3d:72:48:79:95:84:c5:
c2:4d:3f:1a:cb:b9:ea:4f:a8:76:f7:ee:da:cd:42:
7d:c1:4b:be:36:f6:a3:48:f1:79:5b:e2:c7:d8:ba:
30:bc:de:9d:28:75:58:1e:01:1b:59:1c:b5:b9:1e:
de:47:9e:80:5c:09:e1:6f:db:38:66:6e:22:49:98:
61:9a:a0:fb:2a:20:47:cc:08:c3:a8:0a:4a:33:b9:
7f:d9:fb:cd:3a:8b:29:3f:32:c6:a2:11:63:bc:70:
05:b5:9d:d5:5e:cd:4d:24:2a:71:57:c3:75:ca:62:
f1:5c:90:01:13:f0:97:82:cd:31:2b:cb:27:ad:0b:
74:ac:e8:fe:e2:cc:26:d2:b5:b9:c4:09:f7:59:8c:
f1:be:d1:9f:01:ba:b3:44:5b:f6:0c:5e:37:2e:44:
6b:94:c9:d9:b0:40:d4:0f:8b:a6:1c:93:32:24:90:
c3:c4:7e:24:6f:58:3c:bb:fe:30:f0:f1:46:5d:0f:
cc:1f:b9:80:dc:23:f0:a9:60:d6:dc:2b:e7:f6:96:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:EA:AC:94:F2:06:EB:F7:84:D4:92:0B:79:EC:4B:07:CF:A9:8D
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:ef:68:05:d5:f2:8f:58:35:5f:5e:14:33:3b:7c:bd:45:
cd:c4:19:69:33:b3:f2:30:1a:41:e5:8b:70:bf:a9:4c:82:c2:
07:2a:ae:42:0f:18:cf:f9:a2:28:77:4b:10:cf:b0:89:c9:e8:
1b:2f:e1:cd:f7:2d:70:03:ee:d8:70:43:02:e6:50:93:e2:10:
75:bc:b7:65:78:44:41:c1:3d:6a:c5:8c:72:7e:86:f1:ee:67:
8e:4a:5c:81:b3:62:7f:f0:49:99:03:2a:d2:87:44:91:07:eb:
c8:50:fa:61:cc:5c:b7:3c:ef:ae:30:4e:44:11:b7:a9:c9:6b:
02:87:1c:66:1f:ab:20:e5:dc:72:3d:65:63:1e:ed:b0:89:97:
a6:f7:a3:c1:01:ba:c5:8a:e9:eb:8f:18:43:92:e2:6e:6b:e7:
bb:e7:b5:d2:eb:fb:76:8f:0f:c5:1f:7d:19:19:7e:66:d7:b0:
2e:60:5d:17:41:28:66:3c:81:a4:9a:cc:46:6b:dd:3e:bf:c4:
c9:6e:4b:da:9b:70:16:3d:e8:77:b7:23:f4:b7:ed:5b:6b:ef:
aa:67:25:3f:cf:9a:d2:11:92:79:93:3f:0c:3e:59:36:ed:0a:
9d:a2:55:3c:f2:d3:b5:59:7c:75:b6:f7:d5:07:b9:4f:c7:5a:
7a:44:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:39 2025 by rpki-client