Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: stRHO+uzVZ7FdHOEGYRS6oST1UnyEbI7LEZ7KcLxwyE=
Subject key identifier: F0:E7:16:5C:47:E9:B3:C7:B5:E0:71:C8:51:7D:F5:91:67:24:E6:7B
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 01988167C151D2270B5A1F86DDADDF2FA3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0AAC
Signing time: Wed 06 Aug 2025 22:01:57 +0000
Manifest this update: Wed 06 Aug 2025 22:01:57 +0000
Manifest next update: Thu 07 Aug 2025 22:01:57 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: ZThqzWOJUbrJgqh9astkk7wECMv/6CJQ9ICbWull8kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:c1:51:d2:27:0b:5a:1f:86:dd:ad:df:2f:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Aug 6 22:01:57 2025 GMT
Not After : Aug 7 22:01:57 2025 GMT
Subject: CN=f0e7165c47e9b3c7b5e071c8517df5916724e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:2e:ef:5c:41:83:f7:c2:af:a4:68:b8:58:
8c:4e:4f:c1:9d:d2:b6:44:b4:52:44:43:e0:40:ee:
48:60:9d:43:90:2f:5c:f5:60:33:8d:4f:ef:d8:17:
13:ac:dd:ff:bb:c8:7e:9a:f9:fc:64:00:13:fa:0c:
9d:70:d8:f2:3b:f7:eb:24:e6:7f:65:d2:28:82:d2:
7f:25:83:89:0c:df:49:58:7c:aa:03:54:aa:a0:3a:
44:d5:cb:01:10:4c:31:3d:70:05:d2:4d:08:c7:3d:
8b:c3:89:ac:61:90:f3:7a:8a:55:c9:95:51:c8:7f:
e6:b9:d0:8f:a2:fe:be:7e:71:b6:79:fd:b1:0b:9e:
bd:ad:e9:6b:83:40:31:43:e9:20:55:2e:38:04:9a:
a4:87:b2:fe:11:2a:71:f6:f6:4e:78:d4:5b:78:a3:
9e:61:08:c6:ef:ee:4a:bf:1b:74:2f:01:d5:a4:72:
91:df:37:2b:e2:e6:32:5c:54:e7:f6:ad:63:f7:5c:
8c:be:28:6b:cc:fc:36:e0:6d:13:57:9e:dc:d9:d6:
1e:f6:e0:8b:12:28:61:eb:a0:a4:4d:70:68:0e:82:
ef:42:f2:7c:4e:4d:06:a1:d5:3f:6c:82:55:20:2c:
36:95:15:79:87:09:50:70:5c:21:4d:20:26:20:55:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E7:16:5C:47:E9:B3:C7:B5:E0:71:C8:51:7D:F5:91:67:24:E6:7B
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:21:1d:eb:41:3f:54:dc:0d:ca:c9:bf:36:f2:66:bc:f5:3f:
07:0d:f8:f7:e8:4f:43:a6:2b:9e:07:79:42:4e:0a:ea:17:04:
ac:7a:e6:89:0d:23:25:1f:b8:54:65:8a:1d:e1:49:e7:16:b4:
04:45:5e:05:ff:c9:c1:a6:48:33:a4:9b:38:ec:ed:bf:dc:5b:
80:43:00:b6:f6:0c:fd:9e:be:c0:5c:4d:ef:91:a1:a9:8d:bc:
77:88:ae:e5:e1:d3:9f:d5:39:86:4b:d4:b3:f6:48:2c:ed:fd:
de:4a:81:03:ae:0f:f5:ba:a1:50:cf:86:db:cc:bf:04:1f:02:
ff:92:25:d8:1a:39:69:69:cb:08:20:19:64:7c:5a:c0:04:30:
30:63:cf:d5:76:b6:3d:d5:96:90:dc:d2:60:9b:93:7b:b6:9b:
b6:f5:a2:0d:db:65:90:79:40:1b:17:69:a9:4e:2f:4f:c2:1a:
b1:a0:51:8d:eb:d2:6d:fc:51:fc:41:8a:92:9f:77:a6:e8:cd:
5a:d8:6a:6c:42:b2:68:67:6a:3d:1a:de:f2:19:aa:80:20:9e:
f8:4a:5a:24:ff:19:1f:f4:c8:de:c3:52:5f:8a:70:08:84:ac:
a9:1a:8c:9b:09:63:a4:68:eb:e1:80:b4:6e:20:d4:0e:e1:49:
04:e7:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:04:35 2025 by rpki-client