Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier: EY6ZUllThKz6rt4FbcWEZ9v2io6GQEW4hTmpDpdEMXo=
Subject key identifier: 86:BD:9F:F2:A7:FC:89:DB:E7:49:44:43:86:A8:73:C1:9D:24:69:12
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial: 01978C5A246648DDA715BC8A1E693421EE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number: 0928
Signing time: Fri 20 Jun 2025 08:00:07 +0000
Manifest this update: Fri 20 Jun 2025 08:00:07 +0000
Manifest next update: Sat 21 Jun 2025 08:00:07 +0000
Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: ET7ZCz/0kECaKHWDIXbW0jiKC1ZcMJch4XyEwGPgz94=)
2: e64v2Sa7kZCTmVuIe0U1EA1y5UE.roa (hash: 4+uTyAtFS8DAUClwiFHwirOIVJLgQjU/10EzULT806g=)
3: hiAVbhcO1TwVpozBkcEWuw9CQcA.roa (hash: cM6xE/ZqL2V37JUXZnVYtBWEG50dOsPtinGWqXaIJmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:5a:24:66:48:dd:a7:15:bc:8a:1e:69:34:21:ee:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Validity
Not Before: Jun 20 08:00:07 2025 GMT
Not After : Jun 21 08:00:07 2025 GMT
Subject: CN=86bd9ff2a7fc89dbe749444386a873c19d246912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:2c:ca:ae:ac:55:bd:cb:e8:9e:1b:d8:90:
49:c3:c6:29:a1:9b:48:c7:b2:be:29:d6:20:84:24:
88:d5:9d:b5:35:13:f6:94:83:a1:90:9f:5f:08:4d:
1e:47:5c:e4:cf:8c:aa:b7:17:85:4f:76:1a:d0:cb:
93:c4:63:62:b4:df:1a:b5:74:57:ea:bd:e7:d5:58:
72:df:b3:c4:fa:00:e4:02:6f:f7:f0:1b:d6:25:97:
81:d7:6f:1b:55:68:94:1b:ef:c3:01:bf:c4:07:ca:
20:eb:41:27:39:f6:31:fe:63:83:3c:a8:1e:42:da:
9a:42:db:66:e7:37:f8:d3:c6:a2:a7:35:b4:41:9b:
0b:83:1c:59:a5:4a:44:84:22:9d:c7:07:a3:5f:1a:
22:dc:26:e6:39:a4:05:bb:c5:19:87:63:f3:d2:42:
1b:e3:53:35:fd:72:35:e0:3d:9a:f2:5d:8d:d8:ce:
a0:50:a7:ae:9d:b8:ad:7b:49:cb:52:e5:73:a5:7d:
2e:74:53:c1:18:1c:09:31:65:8a:26:21:7b:73:c8:
94:d5:58:36:88:71:c9:ba:f5:de:b0:57:53:4a:89:
19:e5:09:3f:19:d4:54:c0:b6:19:54:8a:d0:97:7a:
76:58:05:50:d2:28:65:56:1c:09:3d:56:2f:9c:02:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:9F:F2:A7:FC:89:DB:E7:49:44:43:86:A8:73:C1:9D:24:69:12
X509v3 Authority Key Identifier:
keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:72:4d:66:f3:75:a1:61:21:ad:86:72:6e:b2:e2:61:c0:
55:72:56:ee:bf:b8:2b:22:20:c7:22:e0:04:a7:29:cd:da:07:
15:40:7c:87:45:5d:72:fd:2d:3a:f0:5a:b9:36:60:5a:42:85:
31:f5:9d:46:a0:f7:2e:3b:fe:17:cb:b2:a7:7a:da:80:a9:33:
9d:d5:39:5e:62:e0:e1:a3:4c:34:27:e5:60:31:de:f7:c3:be:
c5:68:69:eb:ad:e0:f1:c3:78:e1:27:66:28:26:3d:ed:3f:2c:
0c:b5:45:28:82:a9:ef:15:9c:1c:ba:f8:a8:32:22:eb:17:74:
7f:9c:f4:08:75:ca:c8:a7:df:c0:8a:2b:39:f6:7e:ad:23:80:
c7:ce:cb:f6:8f:51:b1:25:e7:f2:74:f8:93:a3:e2:3e:8e:bd:
3f:28:68:4e:ed:75:ac:07:c4:74:e9:8b:bc:7a:8c:d0:b0:ec:
b3:af:e0:c7:4d:0d:4a:65:06:17:9c:a3:ce:31:73:60:2f:f3:
1c:ca:76:6e:0a:be:01:0d:7c:d8:b6:51:b9:0b:b4:46:01:39:
35:8a:76:66:1f:56:82:33:08:bb:76:34:86:5d:c8:da:60:e7:
86:b7:1d:1e:ce:de:74:00:59:c5:f9:03:d5:81:1c:a3:d8:84:
c7:44:c2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:18:35 2025 by rpki-client