Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: Or9YictNBIYO5PrfZtNNmisgb/KLgE0i5AbA1AqL108=
Subject key identifier: 19:E3:D0:C5:8A:CC:6F:F2:63:80:7A:22:69:E2:46:50:E5:02:70:80
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01987306E3F53DBAA1EB3D3D1AD2146FE12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 138F
Signing time: Mon 04 Aug 2025 03:01:27 +0000
Manifest this update: Mon 04 Aug 2025 03:01:27 +0000
Manifest next update: Tue 05 Aug 2025 03:01:27 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: tbXxQY7UWFFRJvp7QBmdA915c1g8sB7Y+/7m3TaJiZw=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:e3:f5:3d:ba:a1:eb:3d:3d:1a:d2:14:6f:e1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Aug 4 03:01:27 2025 GMT
Not After : Aug 5 03:01:27 2025 GMT
Subject: CN=19e3d0c58acc6ff263807a2269e24650e5027080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:1b:8f:6e:6b:c5:61:63:4d:93:a2:ba:de:
4d:e9:7b:da:06:cd:50:23:2d:84:ab:2d:82:00:fb:
bf:d2:e6:21:a3:31:2e:f9:7f:72:7d:ef:e4:d3:6e:
7e:10:d5:02:7d:2e:c1:05:a7:15:b4:c5:5d:b7:87:
2d:6d:cb:df:35:d2:53:97:4c:db:cb:06:16:c6:09:
10:f8:22:1e:a9:79:34:17:37:1c:ea:94:52:e0:26:
f0:ee:ff:ab:a4:47:62:79:26:71:d6:80:6a:d5:92:
8b:8e:c0:18:c9:f5:40:be:cc:0e:4e:fa:61:f7:86:
45:fc:50:a7:3e:c4:7d:13:d7:4d:1c:12:c1:ca:7c:
86:d5:52:59:1c:2c:d2:ef:32:f9:1d:2b:49:ef:fb:
8d:fb:7f:0f:82:aa:c7:bd:af:d5:3f:14:74:fb:52:
3b:69:dd:4f:f7:96:62:e5:80:aa:41:7d:07:c4:85:
15:64:a3:19:21:fa:4e:8d:df:a5:ce:f4:80:80:3c:
e6:a4:87:2d:42:f4:18:e0:25:6d:c2:71:df:91:bd:
ff:d8:c7:8f:12:cb:83:fc:9f:f3:32:bd:90:b6:a9:
12:1d:b1:54:bf:4d:75:a9:6c:63:00:f5:92:5d:15:
8c:3b:94:34:b1:8e:88:00:b4:a6:d4:07:a6:2b:69:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E3:D0:C5:8A:CC:6F:F2:63:80:7A:22:69:E2:46:50:E5:02:70:80
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:69:36:03:15:ee:df:ab:be:7a:e5:28:68:92:c2:0a:b0:81:
de:e0:4c:b6:da:23:5a:85:7b:cd:27:56:7b:fd:3e:dd:99:7d:
a0:6a:27:29:01:c3:80:0a:41:9d:d0:4a:49:63:4e:81:06:0f:
9a:53:98:b1:4e:4b:7b:b4:ea:ba:f3:4a:39:ce:26:34:55:65:
39:74:5b:a6:f1:f9:26:6c:cd:e8:19:de:ff:45:c4:92:4e:e7:
61:63:41:58:00:f8:39:af:d1:29:7a:96:75:64:91:9e:fa:f7:
91:6f:0f:81:21:35:5e:e3:69:bf:c4:2f:df:39:07:a9:3f:14:
4b:79:e3:db:68:60:25:8f:ad:a4:27:8c:08:47:e4:cb:8a:04:
70:09:de:e5:77:46:0d:fc:71:dc:51:41:11:32:9d:52:2a:29:
b0:66:6e:c3:dc:e2:9e:95:94:e1:a0:cd:ed:4d:0a:df:47:a8:
a7:45:ce:75:f8:00:82:43:00:7d:51:c9:50:c7:41:12:3c:44:
5f:67:7a:34:ac:1b:14:95:50:b4:9c:da:a4:1c:8d:fa:76:f7:
d6:33:e5:71:3d:7d:19:30:62:09:9c:5e:ea:98:83:fd:8d:93:
04:3d:bb:54:5e:f8:56:ea:bf:c4:72:6e:98:4a:47:3b:0a:0e:
53:58:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:09 2025 by rpki-client