Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File: cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier: QNGDy8DPtwL4QOEd6hIA4ECn6G8CXf5U+w9VwUCbGXg=
Subject key identifier: 54:5F:D2:D2:F4:AA:63:47:3B:CB:60:BD:D5:F9:28:6F:00:60:9F:C8
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 01987B9CE102443A22853F180E9D088C5FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 19:02:15 +0000
Manifest this update: Tue 05 Aug 2025 19:02:15 +0000
Manifest next update: Wed 06 Aug 2025 19:02:15 +0000
Files and hashes: 1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: 6DrFwO6rkwVvHN5rNRUVKU1IfGnT7wqlKqv8b1QlzNc=)
2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:e1:02:44:3a:22:85:3f:18:0e:9d:08:8c:5f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Aug 5 19:02:15 2025 GMT
Not After : Aug 6 19:02:15 2025 GMT
Subject: CN=545fd2d2f4aa63473bcb60bdd5f9286f00609fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:b5:3f:f5:37:07:ae:33:63:9f:0c:08:2e:
69:3c:7e:4b:3d:b9:0b:ba:e8:d1:d4:38:04:d4:84:
5b:4c:fd:b5:ce:b6:af:a8:83:91:bd:cb:99:42:62:
65:b0:eb:c3:8d:dc:52:32:7f:d2:6f:1c:f5:54:9b:
a0:bc:d0:80:7c:3d:d2:61:0e:82:ff:6c:50:3e:d3:
66:b7:c3:1f:02:cc:69:26:1e:34:38:b2:ef:52:e2:
ee:e5:33:60:6b:b6:37:86:72:25:d6:0b:ca:09:6d:
92:de:db:8e:09:d3:d1:8a:66:23:3b:f9:df:c9:ec:
d2:16:7d:52:a7:19:32:3c:cf:4b:b5:89:af:ec:3a:
e5:d5:8a:21:b2:e9:96:43:d2:e1:63:99:89:2b:39:
99:b0:b2:d1:f6:68:23:1c:43:8d:9b:b1:9f:53:ff:
5f:e4:63:3b:87:cb:87:a6:38:7f:08:90:f4:2e:9d:
47:68:d6:a7:20:19:60:e5:55:53:19:98:39:30:08:
57:e9:23:07:e6:f3:87:8c:47:a0:7c:7e:6b:2b:43:
24:3b:f3:08:b5:73:58:28:92:48:90:50:0f:0f:19:
39:f0:e7:cc:f2:1e:99:be:e1:52:65:8b:92:a3:4e:
dc:0a:3a:26:8a:99:18:7d:0d:84:a9:bb:7b:2e:13:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:D2:D2:F4:AA:63:47:3B:CB:60:BD:D5:F9:28:6F:00:60:9F:C8
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:df:c3:fe:1a:85:5a:4f:b8:be:70:7f:86:0a:5e:7b:ce:55:
62:66:21:cb:c7:0f:5c:6e:75:10:fc:e6:a2:3f:26:53:94:cb:
1c:3e:94:0b:5b:5b:72:ab:7c:87:70:06:bc:ef:73:1e:23:f6:
c5:6d:b6:09:9b:87:85:0e:5e:5c:32:b1:61:bc:64:c4:90:b6:
09:a2:28:c0:bc:59:0a:56:dd:94:ce:9f:12:63:56:60:6b:3c:
c6:cb:14:c5:c7:da:7b:c1:5e:29:58:26:a1:3d:ba:58:33:97:
a1:87:5f:c8:ca:a2:c8:d1:8f:61:93:80:ec:b8:be:f2:48:aa:
e5:80:d1:e7:c4:b8:0a:79:c0:63:73:5f:70:dc:69:4a:d3:3f:
ab:0f:d3:bc:37:0c:4d:60:2f:81:1d:7d:b4:2d:ee:74:71:30:
6f:f2:61:02:10:c9:f1:86:bf:0c:d0:fb:5b:86:d2:49:09:ef:
a1:cf:c5:7b:7b:3b:02:e8:2e:71:85:f8:7d:0d:b2:3b:b4:96:
19:18:19:47:8a:8c:97:4f:61:28:80:04:c0:db:11:fe:51:88:
e6:42:c3:39:91:a8:38:be:f0:e7:63:80:74:44:bd:0d:43:f9:
47:8d:f7:ee:9e:dd:70:06:14:b6:be:4d:7b:51:5e:fd:ba:72:
39:85:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:54 2025 by rpki-client