Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File: frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier: VKdmz9df7EkW5UgwyZEWvICABKkgV7RoDkkwilzO93k=
Subject key identifier: 7F:41:5A:05:0D:20:B9:6B:3C:85:86:55:4E:7E:3E:8E:28:86:D5:8F
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer: /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial: 019873E1EF67B498ECBA435F737EE1F8D832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number: 027B
Signing time: Mon 04 Aug 2025 07:00:43 +0000
Manifest this update: Mon 04 Aug 2025 07:00:43 +0000
Manifest next update: Tue 05 Aug 2025 07:00:43 +0000
Files and hashes: 1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: +oS8hOd/YYfrqSraDKNTZEc+qbx9NeAaVsWBzqLKeGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:ef:67:b4:98:ec:ba:43:5f:73:7e:e1:f8:d8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Validity
Not Before: Aug 4 07:00:43 2025 GMT
Not After : Aug 5 07:00:43 2025 GMT
Subject: CN=7f415a050d20b96b3c8586554e7e3e8e2886d58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:0f:69:7b:9a:34:c1:94:09:a0:a3:56:0d:
b3:bc:06:4c:a9:75:51:d4:9d:44:e9:8c:cd:16:a1:
9b:2f:92:8d:64:ae:50:15:86:a1:14:2a:ea:ae:75:
90:c7:96:82:ce:b7:f3:c0:c8:57:a2:9c:44:a1:68:
64:54:44:f1:f2:27:e0:40:36:99:53:75:3b:b0:99:
a5:15:66:f2:e5:9c:b6:6c:ec:cd:e3:05:0a:16:c2:
0c:d9:b6:2d:09:d4:c9:10:64:54:d7:bc:09:c7:9d:
05:e1:33:4e:74:fb:41:62:aa:e7:41:86:58:ce:31:
b4:08:d9:5e:cf:86:cc:97:70:fe:e2:04:b8:d0:f4:
1f:97:24:0c:2d:fe:be:4c:69:91:f9:c9:cc:38:10:
22:c8:7e:5f:a3:91:f9:da:61:71:26:71:1e:29:6f:
b6:86:54:de:36:6c:d3:7d:9f:3e:cb:b4:7f:44:6b:
17:f6:d1:4c:b5:39:1d:6a:ca:8c:ed:5e:85:c2:57:
a1:59:f0:06:37:9b:78:c0:a6:3d:1f:90:67:48:e0:
ee:1d:40:00:63:a4:23:bb:64:17:5c:e9:d7:ee:7d:
83:e9:ee:b1:ea:47:e9:7b:f9:8a:4e:2d:90:d7:5f:
50:9e:b9:73:2f:76:b6:e0:81:d0:ec:c2:3d:7d:7a:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:41:5A:05:0D:20:B9:6B:3C:85:86:55:4E:7E:3E:8E:28:86:D5:8F
X509v3 Authority Key Identifier:
keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:37:08:e0:c6:0e:38:4e:4c:f2:16:32:88:77:72:af:ac:3a:
35:fd:e5:3f:c4:6a:7c:9f:68:60:9a:c0:ff:4d:fb:61:ea:be:
c5:7a:17:a7:3d:1d:0e:59:ef:e5:59:bf:7e:51:43:e9:51:ca:
75:fc:34:2e:88:8a:3d:ec:9a:35:8f:d9:a6:12:68:50:96:1a:
d7:76:ca:43:1c:88:0f:4a:24:f5:c0:8a:24:de:27:75:81:05:
e3:56:88:42:ac:3d:e2:e5:2c:c1:75:de:7a:ba:14:9c:dc:88:
f6:92:95:2b:e6:db:e2:75:c6:fc:0e:18:07:ba:fb:b5:4d:1d:
f7:e0:04:23:ce:30:a6:6b:a9:83:fa:bf:13:73:e1:5a:d0:8b:
67:a5:65:cb:1b:71:3d:a6:c3:c4:d6:1c:7c:82:91:13:d4:8a:
ca:b2:26:0d:74:66:73:05:6a:93:20:94:4a:ee:d5:52:33:1d:
8c:eb:5f:f0:b6:cc:fe:ae:9a:93:6d:8e:54:77:b5:f3:9e:81:
a2:53:e6:17:6b:4a:74:22:71:e4:92:14:09:34:2f:2b:3d:e5:
96:0e:75:b6:49:c4:b6:a7:e4:48:7c:1b:5b:22:d7:2c:d0:93:
f7:1d:c2:ef:51:57:fa:aa:ac:cd:23:27:c9:ff:50:e5:f5:49:
a1:74:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:30 2025 by rpki-client