Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier: BJz+Nme+ENkAIwIsAAM/09j8MN2vCS8wnNg67e2/HXg=
Subject key identifier: A5:33:A0:51:9E:E5:55:3B:D4:31:78:96:77:B6:FD:96:0C:90:D1:D2
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial: 019896DC25E4D4C4EAAC6D24913C0519271D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number: 09B2
Signing time: Mon 11 Aug 2025 02:01:06 +0000
Manifest this update: Mon 11 Aug 2025 02:01:06 +0000
Manifest next update: Tue 12 Aug 2025 02:01:06 +0000
Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: R6Zi3+DDID8Cugzygy9MYfVYb30lFaeptvMTXpfDLRc=)
2: e64v2Sa7kZCTmVuIe0U1EA1y5UE.roa (hash: 4+uTyAtFS8DAUClwiFHwirOIVJLgQjU/10EzULT806g=)
3: hiAVbhcO1TwVpozBkcEWuw9CQcA.roa (hash: cM6xE/ZqL2V37JUXZnVYtBWEG50dOsPtinGWqXaIJmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:25:e4:d4:c4:ea:ac:6d:24:91:3c:05:19:27:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Validity
Not Before: Aug 11 02:01:06 2025 GMT
Not After : Aug 12 02:01:06 2025 GMT
Subject: CN=a533a0519ee5553bd431789677b6fd960c90d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:7c:69:e7:6f:7e:59:0b:80:bf:db:0f:0c:
ec:97:65:8a:18:ee:aa:0c:96:4d:60:3d:ad:a5:00:
df:ec:d0:14:92:09:42:4d:2e:70:28:05:48:d9:fb:
f2:e9:28:07:51:1e:9e:81:46:08:8f:ac:1a:f5:32:
1b:79:13:e6:8e:88:2f:ae:22:9b:38:39:f6:16:37:
ea:8e:0c:9b:b1:6b:2e:cd:39:03:11:0d:bc:36:6d:
97:9a:7b:a0:fa:fa:64:de:00:d8:26:27:a0:c2:06:
3a:32:d0:b2:d2:99:b0:a2:f1:9c:0b:84:f5:85:cf:
b0:a9:b5:da:15:17:32:92:bc:2e:2a:7b:c1:06:1e:
66:f4:ee:fc:85:ec:6b:1a:f3:c1:0e:17:ad:53:f3:
d5:ea:0e:bf:37:77:65:69:b2:e7:e1:fc:85:89:d9:
7d:1b:2a:31:16:37:7c:7e:8f:63:bc:a2:9d:19:0e:
c7:a1:65:c9:2a:6c:5f:7c:6a:89:af:da:a4:5f:d4:
ae:63:7d:d6:26:65:1d:4f:91:b7:40:a7:8d:8f:bc:
43:3c:f1:a8:f2:67:8a:09:89:26:6a:98:8e:bd:d5:
d9:bf:8a:d8:a5:1e:97:d4:73:bc:e7:91:e3:29:43:
a7:c8:42:b9:e6:17:80:47:6a:99:45:39:2d:ec:63:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:A0:51:9E:E5:55:3B:D4:31:78:96:77:B6:FD:96:0C:90:D1:D2
X509v3 Authority Key Identifier:
keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:db:89:3e:5b:7b:95:bf:40:27:82:ee:46:46:cb:19:4a:98:
32:c4:7f:ab:07:b0:88:7a:79:01:bf:a8:21:38:5b:88:96:21:
b6:ee:fa:2c:8e:bd:de:10:a4:de:05:12:57:4a:75:08:e7:8d:
a7:f4:b0:15:11:5c:c0:31:82:31:b9:52:6b:18:3e:d3:8e:aa:
6a:1c:fd:eb:2d:17:30:89:71:cc:22:f2:b6:00:11:ec:df:e4:
cd:5f:cf:90:59:4a:07:00:67:fb:b1:c4:fd:3a:37:88:1f:8d:
75:86:3f:f6:78:c4:73:63:95:8d:86:9c:df:4b:b6:0a:63:42:
1f:0a:4e:80:78:d7:5d:d4:48:19:d1:f2:cf:b5:ab:bf:ae:e5:
07:04:d6:ad:76:db:d6:42:a5:64:4b:d0:f6:e1:c1:df:89:4c:
97:06:cb:a9:0c:5c:f8:60:4d:8a:cf:55:ad:c3:b9:51:7a:fe:
9f:85:3e:32:3b:4e:68:83:f5:32:af:f9:fe:34:d4:6b:84:84:
83:f5:ea:09:78:fa:5b:83:6f:1e:5e:c9:4f:64:ec:c5:e8:12:
dd:9c:6d:e8:6e:72:da:a8:5b:e5:02:e3:57:b7:8f:19:c6:01:
48:57:ba:01:12:b9:43:8d:a2:e0:06:a2:0d:20:eb:4a:75:f2:
5b:1e:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:58:24 2025 by rpki-client