Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: V31MHZElxfXYt+GErPIZQ5FtS6+CFoofR2o8whuyvYA=
Subject key identifier: 37:F9:92:47:03:EB:16:F6:30:AF:CE:BE:8B:55:BF:A0:F7:0C:8F:5C
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 01987CAE64D424EFEF1A4A0ACCC296D2558F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 0FBE
Signing time: Wed 06 Aug 2025 00:01:00 +0000
Manifest this update: Wed 06 Aug 2025 00:01:00 +0000
Manifest next update: Thu 07 Aug 2025 00:01:00 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: rMkPnCqv3zPtVmdWIYY7B1TdsJcA3nibo/4NJU8igXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:64:d4:24:ef:ef:1a:4a:0a:cc:c2:96:d2:55:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Aug 6 00:01:00 2025 GMT
Not After : Aug 7 00:01:00 2025 GMT
Subject: CN=37f9924703eb16f630afcebe8b55bfa0f70c8f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:c3:71:84:71:75:f0:00:e3:fb:3a:6a:05:
9c:4a:60:22:0f:3f:bb:6e:76:f4:21:dd:61:3b:95:
68:65:e8:b0:1b:fb:e8:67:77:44:cb:2b:69:f1:c2:
1b:a5:4e:f3:c1:24:d5:7d:3c:b4:ad:c4:15:04:16:
74:61:74:98:cf:51:de:05:a0:a0:00:18:0b:4a:90:
63:8e:5f:83:0f:1b:ec:f3:ce:62:06:0e:6f:59:b4:
03:97:1e:4f:b8:ce:97:ea:7b:a2:d7:f9:d8:7e:e3:
40:c5:7d:98:cb:d7:96:ad:02:18:0c:c9:f4:b6:92:
45:5c:97:ba:26:b1:84:f9:43:e8:05:13:b3:b4:dd:
ca:b9:d6:fc:91:14:98:57:f7:97:11:60:cc:bf:7b:
0b:3f:9e:6c:84:7b:88:d5:86:b4:bd:80:58:6a:c1:
d2:6e:6c:00:2d:a3:7d:7d:44:35:05:58:53:f5:80:
1c:c3:56:d2:82:b3:03:33:1c:42:48:97:36:74:6d:
d5:c0:fe:80:81:4b:8a:bb:2d:57:76:a0:35:1f:33:
9e:df:80:b3:1b:bd:33:2f:42:22:45:1f:18:26:06:
cb:ea:94:b6:37:ee:e0:fb:c3:97:29:cd:be:9d:5f:
f7:52:c9:d7:48:e2:7f:f2:33:6a:8d:96:50:bd:0d:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F9:92:47:03:EB:16:F6:30:AF:CE:BE:8B:55:BF:A0:F7:0C:8F:5C
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a8:2d:9e:91:f4:6d:a5:18:ea:8f:ef:ea:28:d0:25:f1:bf:
f4:8c:6a:79:a0:8a:8f:36:2f:62:70:53:05:1a:3c:8c:80:45:
06:08:2a:72:8d:a0:6a:0e:66:12:bb:cb:9f:3b:39:81:bb:6a:
3b:52:7a:52:89:7b:82:05:db:db:55:18:5c:06:5b:b2:7b:8e:
4d:e6:a8:a9:00:59:60:aa:1d:8c:35:ad:fb:2a:26:0d:a3:1b:
9f:c2:19:0d:78:2c:58:58:2d:c0:d9:96:9f:06:b7:fb:f9:fe:
a0:56:55:4e:53:34:1a:24:11:f6:9b:e8:98:f8:21:60:b3:f4:
4d:3c:8d:ab:55:63:91:c2:bd:91:e1:50:9a:06:87:ef:4c:e8:
5e:fd:67:af:9a:b1:f2:3d:bc:5e:1c:65:46:60:a4:51:69:39:
12:8e:c6:83:05:08:52:5b:35:cf:fe:75:33:5c:05:6e:d4:bc:
c6:3c:c1:d1:e2:72:01:ec:cf:c5:75:a5:e8:91:35:6c:86:7d:
e5:c9:81:44:4e:3e:ef:c0:86:a3:b7:74:be:44:77:e5:84:64:
1b:c3:13:5d:4b:49:b5:a2:c1:ca:7d:f9:65:c0:63:e6:94:25:
05:4c:fb:76:23:37:00:8c:47:90:b2:02:b4:f0:ab:af:ef:82:
c8:aa:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:29 2025 by rpki-client