Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: DxYWWABQLeTHcfDu8HAtk6SRCjbwFaFn6QTEo+UQLEc=
Subject key identifier: 70:FF:FB:75:C3:7B:5B:96:3C:14:2E:05:40:19:13:25:CB:20:FD:DB
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 01988EECB7DF6242285ADB0DF352EA5577F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 13:02:14 +0000
Manifest this update: Sat 09 Aug 2025 13:02:14 +0000
Manifest next update: Sun 10 Aug 2025 13:02:14 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: G+IDVRP6NV+bfwa5fZOi6QNapgD4Ce0JDB5Ek1B8cDg=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:b7:df:62:42:28:5a:db:0d:f3:52:ea:55:77:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Aug 9 13:02:14 2025 GMT
Not After : Aug 10 13:02:14 2025 GMT
Subject: CN=70fffb75c37b5b963c142e0540191325cb20fddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:d2:ce:5c:35:0a:d0:f6:d6:3c:92:d4:64:
db:5d:d6:74:e5:2c:bd:cf:f3:7b:07:0f:86:77:30:
ac:11:d0:75:52:4e:8c:31:42:60:06:f7:72:cb:db:
ea:06:85:e6:9a:6d:95:0c:01:4d:07:bf:aa:3d:bb:
4b:8b:cc:6c:d0:aa:3b:67:9a:e0:b0:9e:40:c0:f1:
a7:86:7d:e6:90:0b:fd:3d:b2:9c:4d:b3:8b:6b:5b:
9c:1f:4d:0d:83:fc:d1:b6:9c:90:b3:39:e4:ed:7c:
34:7d:f3:0b:5b:62:cc:26:2f:df:e4:9f:a5:12:d7:
43:18:0b:54:b8:cb:09:c6:b5:57:15:af:39:da:8b:
6a:8d:9f:2b:47:e3:06:76:ec:0e:31:1e:2a:5c:a9:
2e:ab:af:0f:c4:2e:27:84:d2:80:f5:68:86:bf:8f:
19:e5:96:8c:46:19:88:e5:18:3c:1c:bb:68:08:86:
61:e1:d8:ba:68:b2:5d:01:33:92:28:c9:a3:3f:e8:
ea:54:c2:c9:88:7d:bd:cf:e4:80:43:7e:ad:88:2d:
8a:41:2f:5b:24:68:2c:bd:f8:19:d9:b7:75:78:27:
09:cf:d7:00:a4:87:76:b6:cd:4a:88:78:8d:ec:57:
fc:cd:0e:4b:ed:71:ae:b8:1f:5c:7b:36:f3:93:2f:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:FB:75:C3:7B:5B:96:3C:14:2E:05:40:19:13:25:CB:20:FD:DB
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1d:e2:6b:d8:f9:18:5d:1b:bb:fd:b7:15:09:1d:2d:4a:b5:
ed:ac:16:53:c1:68:2c:50:59:e4:6c:bc:41:c1:a7:d3:f4:e2:
42:15:ad:c2:74:bf:0a:cc:28:3c:22:f4:16:63:4c:24:a1:65:
3b:25:64:b4:0d:71:c1:d4:84:0a:16:b8:f8:6d:aa:cc:9b:2c:
84:ee:e8:c8:6c:1f:8a:c8:33:20:72:cf:b4:f6:5d:eb:3a:70:
a9:5f:47:93:0a:ec:1c:24:d5:6a:fc:ec:26:49:0b:93:b5:fd:
8d:cb:7a:a2:b5:ad:d6:29:21:48:6f:02:f8:f8:5b:53:28:7b:
4a:cf:bc:44:a1:c3:52:b3:25:fa:16:4b:8d:47:82:49:ff:11:
2b:b6:f5:0a:eb:6c:0a:0d:13:30:9c:ed:e6:bc:7f:7b:7b:b2:
57:75:4f:e4:4e:d5:d7:46:0e:60:a6:83:c7:d6:39:e8:6d:4b:
a5:82:60:24:20:31:87:7d:f3:dc:32:4a:32:61:4b:9f:c5:43:
09:47:d1:81:46:d3:83:f8:29:c1:d2:af:b0:13:27:23:60:45:
7f:1f:5a:41:7c:8c:5e:a7:97:04:b5:06:f3:c0:61:51:a8:1a:
3d:e4:9e:c1:42:fc:f7:a8:6d:1c:dc:1c:c4:02:d0:34:e4:6b:
89:20:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:54 2025 by rpki-client