
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
File: f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json)
Hash identifier: 6ajEOSOuf2LtIE3zBooAhXypO4LPfyttdxor89mhOE4=
Subject key identifier: 71:E3:4D:D3:9B:0A:AF:E3:55:AF:19:8B:59:C4:54:0B:6D:F5:72:A6
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial: 019873E1D331894F6A3AB1C9D784B00793E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
Manifest number: 0482
Signing time: Mon 04 Aug 2025 07:00:36 +0000
Manifest this update: Mon 04 Aug 2025 07:00:36 +0000
Manifest next update: Tue 05 Aug 2025 07:00:36 +0000
Files and hashes: 1: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (hash: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=)
2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: WySX7gzq+0zuxw47xuodoi2y7FOg4qQs7ndZsoZLt2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d3:31:89:4f:6a:3a:b1:c9:d7:84:b0:07:93:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
Validity
Not Before: Aug 4 07:00:36 2025 GMT
Not After : Aug 5 07:00:36 2025 GMT
Subject: CN=71e34dd39b0aafe355af198b59c4540b6df572a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:19:5a:97:c3:2f:4f:ee:39:82:6b:49:17:
44:d5:8b:22:f9:21:99:c6:35:81:88:81:a4:3f:dc:
2d:dd:97:90:ee:b3:9a:2b:81:63:d3:46:47:9f:80:
f9:fd:bd:8e:2e:35:e6:2b:3f:70:d5:41:69:1a:36:
b3:40:4c:68:81:12:f9:1a:b4:30:65:e0:b0:1b:f8:
0b:61:eb:03:8c:b6:f4:a0:88:37:5e:41:5b:18:1d:
c9:b9:89:54:da:fa:64:01:da:2a:02:78:60:54:cb:
dc:07:94:d7:23:b4:61:7d:fa:41:5a:72:9f:36:30:
2e:cd:81:e9:84:c8:f9:d1:c9:8b:7e:76:16:65:b3:
66:d7:a5:0c:56:17:df:69:ed:4d:16:8e:59:bb:7d:
64:5e:e6:c0:6b:a2:52:cc:c6:7a:26:79:c5:86:a1:
ca:ae:08:cf:ec:77:a6:25:f8:7d:cf:ca:fa:57:19:
23:21:8d:9c:2c:b5:27:cf:6a:99:e7:3b:41:45:32:
b1:c0:5f:07:48:44:00:d7:d1:2f:ee:26:e6:74:6f:
3a:16:4a:f6:7b:90:2b:4f:27:a9:af:b5:02:fa:4a:
fb:aa:90:02:b8:d5:a4:69:9f:34:f3:74:87:2a:5e:
a1:2e:57:67:3a:20:5d:27:27:82:17:5c:71:32:b6:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:4D:D3:9B:0A:AF:E3:55:AF:19:8B:59:C4:54:0B:6D:F5:72:A6
X509v3 Authority Key Identifier:
keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:be:05:ed:02:be:97:f7:ca:e0:13:f5:5a:41:26:5b:a0:1b:
21:ae:c9:9a:7d:3d:3d:8d:54:06:5c:eb:18:d8:7d:4c:cc:45:
47:82:1e:24:bb:2d:26:83:b0:4c:ce:86:ca:58:6d:c1:e4:1c:
56:a0:ca:82:8c:d6:c6:74:dc:8f:f3:d7:af:17:7c:b1:97:b5:
3a:a0:de:ca:f7:13:38:00:9e:0e:f1:25:32:2e:25:3a:3f:a1:
a3:43:9b:b2:06:ba:fa:c0:8f:71:ed:81:1f:42:c9:9f:82:5f:
af:d2:7d:3e:10:85:57:ef:fa:03:ff:d2:6f:f5:11:1e:2c:6b:
0d:53:51:8f:23:73:3e:93:c9:89:a8:84:77:9a:48:a9:18:da:
e2:94:f8:9f:23:1b:ba:93:6a:3f:6b:64:0b:c2:c3:64:b3:bd:
d9:24:67:61:b1:e3:8f:94:c7:84:a7:df:2d:1c:ad:8b:41:5d:
ef:65:21:0b:b1:0b:a1:72:8a:d4:75:06:25:0e:c7:68:20:9b:
99:13:86:ac:4c:64:1d:32:48:6f:c4:50:1d:74:a4:e9:ac:e3:
a6:bf:c4:35:5d:40:3e:b9:10:b4:a6:97:8b:88:82:6b:86:42:
0e:33:71:ba:64:2b:42:26:e0:70:77:fb:b6:80:3a:20:f1:4e:
e5:5b:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:43 2025 by rpki-client