Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: R8ZAcjxfrEaiY933mDm3levKGsaTtiUq93nYuQ7gsD8=
Subject key identifier: E9:C8:91:3A:5D:7F:7A:4F:A2:6E:A2:27:68:59:44:1C:3D:7C:11:CA
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01987418C0F36C37294B708C9044FDB71FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 162A
Signing time: Mon 04 Aug 2025 08:00:35 +0000
Manifest this update: Mon 04 Aug 2025 08:00:35 +0000
Manifest next update: Tue 05 Aug 2025 08:00:35 +0000
Files and hashes: 1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=)
2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=)
3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: DnIXNTjImmvLbDy+4gjrxsMoRI4J8BoO2LNmf8nj4gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:c0:f3:6c:37:29:4b:70:8c:90:44:fd:b7:1f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Aug 4 08:00:35 2025 GMT
Not After : Aug 5 08:00:35 2025 GMT
Subject: CN=e9c8913a5d7f7a4fa26ea2276859441c3d7c11ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:b5:f2:6c:9a:2d:ab:1e:d6:68:bc:63:59:
f1:6c:dd:09:75:73:ea:6e:45:bb:6b:0c:25:6a:a3:
27:3c:20:11:93:dc:83:dc:62:6b:4c:3f:72:40:8b:
f8:f6:53:ae:99:76:77:1a:73:8c:12:20:5c:cf:fc:
3d:46:db:30:4c:dc:df:43:08:7f:01:c8:e5:f9:c9:
9d:a7:b9:cb:3e:fe:4d:49:0d:45:16:cf:51:3e:78:
61:3f:14:ed:c8:d5:af:b3:f3:85:d5:14:2f:61:98:
61:17:3d:5d:f6:dc:c3:a6:c8:44:8c:e0:07:79:d0:
f3:c3:0d:d9:23:91:ef:58:99:97:3b:b9:6f:ad:7d:
a4:c8:ca:7a:f8:6f:63:f2:05:93:ed:15:05:57:1a:
1d:66:de:0e:76:b3:15:95:09:6b:52:c9:28:18:e4:
4b:51:27:ae:c6:1d:ce:75:05:2a:fd:31:ff:7d:b7:
d6:40:df:54:19:d3:03:f6:fb:66:13:0d:f2:0e:65:
d9:b3:16:1b:ab:6e:b7:a1:a1:86:f6:23:6e:5a:9b:
d1:15:df:d7:5d:71:0a:fe:9f:0b:1f:3a:ab:76:93:
de:68:3d:fd:8d:f5:f7:54:f2:5f:6a:9e:01:1c:a0:
f3:93:1b:92:d0:d7:0f:3e:4a:c4:ba:a5:26:fe:a3:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C8:91:3A:5D:7F:7A:4F:A2:6E:A2:27:68:59:44:1C:3D:7C:11:CA
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:b9:c2:e5:9f:90:c8:08:b3:45:9f:05:16:dd:95:be:3b:
e3:bb:d7:c1:4e:d7:88:1a:2d:5b:1e:e6:04:11:08:d1:9e:58:
c7:da:df:54:af:73:31:9c:88:82:c0:ae:4f:68:6a:ff:49:03:
3c:48:64:93:4c:42:5b:c9:6f:af:f2:f6:54:5d:d6:75:53:8b:
0e:b7:c7:f2:74:70:15:59:fb:08:43:39:51:9c:a2:39:ce:3f:
be:57:81:ad:c6:4c:3b:57:78:e1:b4:f5:a4:02:3b:34:d3:f9:
0e:59:90:38:2c:75:d1:bc:e2:e6:2c:3c:9e:f5:ce:33:93:1d:
fe:2f:78:ac:e1:e2:04:60:5e:1d:54:91:85:f4:bd:5b:cf:e8:
a2:12:04:ef:91:5f:b6:5b:12:31:b7:a1:b4:2e:fc:3e:65:10:
21:09:e9:8c:1a:23:ba:b8:a7:dc:24:00:1a:ce:11:38:57:a7:
d0:f7:21:97:25:38:c4:40:45:51:df:a4:03:84:29:49:f2:d2:
ef:19:20:f3:2b:c9:12:7f:68:56:4b:42:44:9f:e5:d1:da:d1:
2c:78:40:09:8c:41:39:b5:75:e4:2c:64:6b:bc:48:14:3d:2a:
35:49:03:8e:ed:26:0f:80:e7:a2:b3:14:bc:0e:d4:6a:5a:61:
e5:1b:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:06 2025 by rpki-client