Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File: v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier: NrUt5YBsWfDID3ZLjXu4iaN5h5rpO6j/17Bik0lt3GQ=
Subject key identifier: E0:E6:1C:C9:C1:E6:12:D7:2B:16:F6:E6:F2:78:96:96:C0:98:48:6A
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 01989335DAEFF6363B0F6BE81BA0FC8A7FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 09:00:36 +0000
Manifest this update: Sun 10 Aug 2025 09:00:36 +0000
Manifest next update: Mon 11 Aug 2025 09:00:36 +0000
Files and hashes: 1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: llQ837YF64MURunnQxkMQTeIJlPPXQhYLH8C6KHM46g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:da:ef:f6:36:3b:0f:6b:e8:1b:a0:fc:8a:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Aug 10 09:00:36 2025 GMT
Not After : Aug 11 09:00:36 2025 GMT
Subject: CN=e0e61cc9c1e612d72b16f6e6f2789696c098486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:ff:53:f7:6c:6b:fd:4d:c6:11:3c:75:a7:
12:25:38:92:ff:44:e3:e1:22:11:4c:89:b2:54:13:
62:f6:cc:35:c8:d6:85:fb:22:a1:ae:5c:2d:78:21:
91:ae:ac:6e:38:45:48:4e:45:60:4f:86:49:74:c0:
49:18:aa:c8:df:63:dc:4f:d3:a0:18:37:33:73:21:
99:1e:e6:37:74:3f:1c:fd:68:34:72:61:95:5a:f5:
e6:61:8f:a6:18:b6:b6:61:b9:49:90:e4:0b:2d:28:
d0:b3:ef:e7:f4:a2:bc:76:68:2d:9f:86:b8:e7:32:
e1:b6:f3:01:27:15:95:51:86:11:81:52:24:17:79:
f0:80:e3:6b:19:e5:cb:e1:a0:f6:7e:dd:a7:ba:bb:
07:df:6e:da:f2:57:ac:70:2e:ea:64:b9:ad:f0:13:
7e:6d:31:2f:5f:6f:3d:98:97:fa:00:c8:89:e0:c0:
cf:ba:06:ce:bf:d1:bb:b3:46:24:52:dd:6f:be:1d:
02:7b:58:4c:7a:4d:fe:67:84:0c:a3:2d:16:e2:d5:
50:34:78:80:9c:b0:3f:07:c4:f2:7a:e3:f9:e9:69:
09:52:95:fd:22:4d:e1:cf:99:f6:40:f4:11:eb:47:
a8:6c:c9:07:f1:d7:8c:98:91:b4:e9:d8:df:4a:00:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:1C:C9:C1:E6:12:D7:2B:16:F6:E6:F2:78:96:96:C0:98:48:6A
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:77:b3:01:04:5b:4a:5b:f2:20:fe:50:11:d3:bd:d5:4e:03:
7e:18:8a:c8:5e:cb:23:fd:d1:18:e2:46:4a:a3:80:46:84:ee:
1d:78:01:0e:6c:b6:07:e8:8c:5d:41:16:b8:39:cf:b3:9c:40:
1c:10:b4:f1:31:5e:34:69:0e:9d:f0:a1:70:3a:25:93:7b:46:
78:35:54:ee:76:bc:0c:d1:fc:87:71:5b:4a:00:9f:dd:87:68:
59:b1:f6:fc:6d:fa:e0:a0:9f:e2:62:e8:75:3f:1d:05:60:65:
cf:7b:34:13:f5:ee:34:3d:2c:d3:90:e5:a8:3a:d1:21:17:df:
1a:4f:b9:8b:b0:77:68:01:4e:79:97:1d:e7:30:fe:d2:4b:b7:
12:cf:b0:1b:34:14:d6:2e:35:2c:90:38:35:5c:2c:9e:7e:d4:
24:1d:93:a5:4c:b7:2e:9b:9a:0e:5b:0c:e9:29:d9:7f:99:6e:
2c:2a:ed:bf:54:af:ac:ac:88:e8:23:f9:1f:69:41:45:9b:47:
34:30:64:16:d3:61:1a:e6:b7:3c:bd:ff:22:5c:ef:80:a2:ea:
8a:82:72:e9:df:af:92:c9:98:db:3c:01:ed:ce:a3:dc:7a:9d:
cd:8c:98:79:b1:bc:72:b5:97:ce:67:42:dc:cd:62:35:92:53:
bb:27:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:51 2025 by rpki-client