Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: dbRYgcWHT6cseCXoKOcKxI3nlxEs1DJirpJ+WJ8T2KU=
Subject key identifier: B9:21:CF:76:60:E3:26:FA:24:DC:19:1D:17:F0:7D:9C:E3:D7:4D:91
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 019873E4123E380C658D688AC23B6C2750CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 1114
Signing time: Mon 04 Aug 2025 07:03:03 +0000
Manifest this update: Mon 04 Aug 2025 07:03:03 +0000
Manifest next update: Tue 05 Aug 2025 07:03:03 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: 7nF/z+exNMAuw4YLydnuMfGF+janrwLmz+/fEKQtqiQ=)
2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:12:3e:38:0c:65:8d:68:8a:c2:3b:6c:27:50:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Aug 4 07:03:03 2025 GMT
Not After : Aug 5 07:03:03 2025 GMT
Subject: CN=b921cf7660e326fa24dc191d17f07d9ce3d74d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:b8:e8:3e:1a:8b:26:2d:1b:94:62:5e:cf:
01:ab:8a:34:9e:d3:44:a9:68:f8:17:54:30:04:b6:
b8:0e:05:cc:e3:11:30:00:36:19:9b:39:c3:0f:94:
8e:ce:d1:e1:57:8a:66:20:04:99:1c:a2:34:d0:27:
5d:6a:a1:d5:09:0f:7f:73:c6:25:f3:5f:97:a3:7c:
14:77:3f:d5:6c:9c:2a:0b:44:c6:fd:53:b3:77:01:
34:42:4a:6b:0b:0d:33:d1:05:9e:25:9c:53:79:ec:
43:18:23:4a:52:1e:ca:09:6e:0f:0b:86:14:39:f2:
28:bb:1b:bd:b9:7d:e0:1c:38:88:5f:3d:6e:7d:71:
09:35:ac:ae:70:a6:9e:95:03:d1:ea:58:8f:72:15:
a0:1f:7c:95:9b:a5:15:82:08:35:55:12:a2:eb:56:
01:96:be:f7:39:c1:5d:38:da:9d:ac:0a:4b:5b:b7:
ec:c8:20:e5:85:e1:d4:7c:55:b4:b6:cb:0b:1a:46:
f9:9c:b6:4c:5a:ab:09:68:6a:11:91:c9:80:c2:58:
5f:88:d0:0b:f1:3d:b1:c0:49:17:f1:f2:b7:a0:f3:
63:be:6d:a6:82:da:80:9b:f3:86:94:dc:18:32:28:
ca:e0:69:4c:34:de:3c:8b:b9:46:e9:64:05:80:53:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:CF:76:60:E3:26:FA:24:DC:19:1D:17:F0:7D:9C:E3:D7:4D:91
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b0:69:2e:6c:6f:9d:da:2c:9a:b4:fa:35:f4:fd:eb:25:c2:
dc:22:1e:10:bd:c4:a8:55:58:76:18:fe:29:55:b7:30:c8:9f:
fc:56:c1:6e:f2:d1:ac:59:60:91:a1:23:ac:ec:1c:31:75:62:
2e:b0:e9:93:f3:28:e0:77:5c:b6:98:f6:cc:f7:9b:e2:d9:fe:
11:eb:4c:81:bf:97:c1:66:25:45:c0:2f:f3:ad:dc:1c:78:8f:
47:55:67:bb:7f:78:08:30:69:d6:31:aa:d3:0d:84:e9:70:ee:
65:86:49:ac:fc:eb:c6:c1:74:24:17:44:b8:cd:d5:f1:29:49:
c7:a8:14:b6:a1:cd:03:ae:25:cb:f1:75:c9:7c:a1:f0:51:f5:
ea:a7:b0:50:99:59:2f:7c:65:49:05:4d:1d:f9:79:97:49:6a:
37:b0:dd:18:c2:42:a9:ea:be:f7:bd:cb:36:49:e6:39:e2:39:
32:74:74:ad:88:40:de:52:73:5b:43:13:1c:57:eb:1c:6b:a7:
a8:05:85:ed:9f:68:a5:30:1c:e8:7c:bc:ae:d4:60:f3:a4:96:
a9:1d:98:0c:70:7e:ad:39:0e:12:5f:1b:17:18:22:62:d4:ed:
47:7f:7d:ba:09:93:85:ca:1a:70:90:4a:70:6c:16:38:d0:55:
bf:0c:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:01 2025 by rpki-client