Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: uiP+MxQUBtfuDn0z/kobT1aw0Ka3O2V3GY8q6mp/oH8=
Subject key identifier: 14:4B:8C:FE:19:35:41:6B:DE:EA:8A:52:32:A0:04:99:FF:83:66:81
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 01987CAE7699BA35288474DF11F7F4789094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 010B
Signing time: Wed 06 Aug 2025 00:01:05 +0000
Manifest this update: Wed 06 Aug 2025 00:01:05 +0000
Manifest next update: Thu 07 Aug 2025 00:01:05 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: VDuQQ2J3B7+I3SDF2fGTOgAREoNvZaEThxFLy/faZTA=)
2: FyqKK2FcK12A9-k5axnFf2sz21k.roa (hash: W5mhlrOLXBrpKomBUnhpTyesgUMLSIHoT9QMJTSp0oA=)
3: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (hash: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:76:99:ba:35:28:84:74:df:11:f7:f4:78:90:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Aug 6 00:01:05 2025 GMT
Not After : Aug 7 00:01:05 2025 GMT
Subject: CN=144b8cfe1935416bdeea8a5232a00499ff836681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:e0:1c:3a:dd:eb:e2:d0:7a:51:01:62:20:
10:31:f9:7e:00:59:c0:fc:cc:8f:d5:1d:d5:1c:40:
ad:9f:7e:c3:35:0e:eb:86:eb:4e:81:2d:8a:05:fe:
63:ab:99:03:7e:02:22:39:1a:90:59:39:5c:bb:b3:
d9:64:f1:31:2c:f6:2c:2f:08:c0:de:15:75:9f:41:
d8:2e:69:3d:86:94:a3:c0:80:6b:ea:a9:a3:d5:af:
2a:1a:6c:04:00:30:3d:63:c2:1c:09:49:50:46:17:
6f:78:9f:2e:ba:83:86:b5:cc:0e:01:40:74:eb:bc:
9a:1b:1a:bb:db:4c:a1:7b:a0:45:d8:81:06:1d:98:
c2:5b:6a:52:8a:45:09:d1:63:a2:de:7c:29:1f:c7:
a5:48:c9:22:20:f8:9f:df:36:11:30:28:1a:ae:f5:
76:a5:18:5b:b6:07:ff:79:eb:2c:9f:5f:0f:d8:46:
25:12:7c:40:01:c2:b8:54:21:74:12:30:a8:d8:4d:
e8:06:4a:02:98:2e:61:12:e7:91:aa:51:f4:36:09:
1e:bd:86:09:d8:44:13:32:74:02:eb:2b:65:55:aa:
bd:26:ee:6b:3d:42:ae:8e:f6:2f:e8:2c:59:7e:bb:
77:e2:ea:7d:d6:f6:b5:b7:d1:d7:36:e7:19:78:e1:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4B:8C:FE:19:35:41:6B:DE:EA:8A:52:32:A0:04:99:FF:83:66:81
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:a5:d9:02:99:7b:3b:e5:8e:66:e0:e4:20:31:86:9f:68:
fe:b8:3f:8c:b0:1c:17:a3:d0:5b:b0:16:2d:0c:b0:51:e6:cb:
f4:b6:43:07:42:c8:08:3c:67:d8:d0:d9:28:c4:79:28:52:04:
e4:ba:7f:4c:27:e0:8c:50:a3:8d:e5:f9:c3:a5:af:d2:e8:1d:
06:5d:ed:3b:cf:30:80:30:e3:49:d3:b2:1c:3e:bd:ef:97:85:
f6:3d:5a:16:59:5b:49:d0:6f:93:a7:e8:c3:51:2d:f4:c6:3f:
61:e8:11:43:a0:cd:a3:7d:5c:35:47:c8:e2:8c:70:98:c3:a9:
db:b3:9c:0c:a3:e0:73:d1:28:f2:d7:5d:f7:92:9e:51:13:fb:
a4:51:60:c3:13:e4:2c:d5:0e:41:b2:87:79:8a:9f:7d:81:40:
ce:f6:a3:22:dc:ee:82:58:99:dc:e3:01:d9:a7:7e:e5:7c:6d:
03:4e:3b:3f:5d:29:8b:ff:c3:30:59:34:3c:d3:97:1d:04:14:
42:1b:c6:65:98:0b:35:89:3b:50:3d:a8:d6:f3:92:3d:60:59:
f8:d9:15:0b:a0:f4:8f:34:80:b0:d1:cd:74:4f:9c:34:07:9b:
25:4c:46:64:80:b5:49:d6:51:44:aa:ba:b4:f2:8a:24:91:8a:
d5:68:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:42 2025 by rpki-client