Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: dbgDbsomlHlVE448Db/JyVh5UnluTIDPCH7ff+mhdR8=
Subject key identifier: AC:50:5C:D1:24:1F:0E:5C:D7:8E:6B:7C:2C:48:C9:23:A9:92:72:8A
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 01988431C7853421149CE354EF6C9DAA6807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 15B4
Signing time: Thu 07 Aug 2025 11:01:51 +0000
Manifest this update: Thu 07 Aug 2025 11:01:51 +0000
Manifest next update: Fri 08 Aug 2025 11:01:51 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: ISLC1yD/ua2QUt08htPyXjzSPgyjPY3ozncjBP07umU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:c7:85:34:21:14:9c:e3:54:ef:6c:9d:aa:68:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Aug 7 11:01:51 2025 GMT
Not After : Aug 8 11:01:51 2025 GMT
Subject: CN=ac505cd1241f0e5cd78e6b7c2c48c923a992728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:d2:96:a6:7d:c5:ee:c4:25:ef:8e:08:2f:
fd:42:4d:63:98:1d:e3:a4:22:1f:26:cf:40:56:d5:
b5:82:69:d1:d6:76:3f:47:0a:72:b7:25:ac:48:a6:
10:9f:47:11:6b:d8:b6:0a:8e:d3:9c:d0:df:17:4f:
4c:92:64:d1:9f:dd:45:74:9d:73:86:db:7f:35:44:
db:6a:f8:ca:fd:a0:a5:e5:e3:bb:f6:14:ef:53:3e:
12:23:d5:76:70:58:dd:61:ac:b1:6b:4d:e0:2f:6e:
b9:94:a1:a4:e5:1a:06:94:fc:03:79:d9:15:aa:bf:
0a:6e:5f:01:e6:de:81:f2:af:ff:13:34:76:0d:a8:
78:b9:8a:5b:f1:74:ec:8b:cc:57:84:f2:b9:b3:43:
2d:16:99:f7:8f:69:ab:c6:45:26:e2:84:fa:0c:c0:
fc:18:71:2a:4c:95:e0:f7:dc:c4:1a:91:b3:f5:71:
48:a4:6f:28:15:98:9d:b2:58:6e:63:58:8c:7d:c9:
32:39:36:1d:16:e4:68:ad:30:86:5a:08:9e:27:8e:
24:c1:2a:f7:a5:89:24:c7:85:8b:ee:e8:e8:b6:78:
67:ab:d1:94:22:4c:f3:2c:ff:38:69:99:e2:fe:d0:
09:3c:8e:e6:1b:f5:33:79:b5:3c:68:d5:b3:50:6d:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:50:5C:D1:24:1F:0E:5C:D7:8E:6B:7C:2C:48:C9:23:A9:92:72:8A
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:85:e1:59:99:97:7b:fd:bd:38:01:0a:69:7b:f1:c9:46:78:
7c:4d:f5:e9:9d:0b:5c:48:7a:d7:48:55:8a:39:b2:7d:99:b3:
38:b4:0c:ce:35:9e:47:b8:95:2d:e6:2f:e7:95:23:51:18:ad:
48:3b:76:57:68:8a:29:87:5f:7b:3d:d7:ec:c8:56:3f:40:8e:
87:80:71:fd:af:68:d7:00:cd:b8:47:5c:fd:19:fd:74:9e:3c:
6e:ce:1e:25:d7:b4:bf:15:ec:01:02:6d:f8:64:71:26:31:1a:
3b:9e:58:89:58:10:9c:a8:4a:df:19:1f:ff:e2:59:8c:bc:b5:
fb:47:66:7e:a4:af:52:aa:cc:41:b5:d2:ad:e7:93:05:86:73:
89:44:5d:5e:af:86:9b:2a:28:7b:b2:5d:02:ac:70:05:8f:94:
60:e2:1b:f4:cb:26:a9:fe:62:ae:92:5b:9b:5a:00:16:3a:77:
7b:5b:58:18:0d:22:34:d2:6a:fd:6d:02:a8:92:2f:7d:f2:56:
d8:f8:bf:e5:37:2c:d3:9d:8e:e2:f6:89:cc:b3:20:2e:54:21:
98:b7:fa:eb:3c:f8:48:48:02:19:53:de:55:0c:c4:aa:f5:0e:
f3:89:2f:43:f1:96:1f:4a:30:4d:08:ca:43:ce:2a:d6:64:1b:
a2:ae:34:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:09 2025 by rpki-client