Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier: maGLj3Px5rRwDbh1FFdKZMpqr6lhNQ3s5In2eKNdbfM=
Subject key identifier: 7A:2E:2B:5D:53:8C:05:85:82:97:89:E4:FA:65:0D:08:21:0F:12:34
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial: 0198808B34AC7E49D5F6062EBA3FAC780172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 18:01:03 +0000
Manifest this update: Wed 06 Aug 2025 18:01:03 +0000
Manifest next update: Thu 07 Aug 2025 18:01:03 +0000
Files and hashes: 1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=)
2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: Sfn9s/6pZpiKIBcScatrf5Anwksgo/8HoNMtrYfZX6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:34:ac:7e:49:d5:f6:06:2e:ba:3f:ac:78:01:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Validity
Not Before: Aug 6 18:01:03 2025 GMT
Not After : Aug 7 18:01:03 2025 GMT
Subject: CN=7a2e2b5d538c0585829789e4fa650d08210f1234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:49:50:e8:f6:03:a3:b4:5d:81:1e:71:3f:
b9:77:f3:32:23:fd:23:e3:12:74:cd:97:dd:ee:5d:
e3:89:60:1b:df:fd:5e:20:cb:af:18:a1:0d:0b:78:
4e:19:9c:fb:b8:a1:cb:3e:4e:60:80:ad:69:a5:bd:
09:5c:ee:04:e7:7e:a6:9f:37:84:e5:95:f0:6c:e9:
d3:9f:76:77:91:a5:7c:6d:ae:1e:8b:8a:8d:7a:04:
38:06:98:a2:a0:68:63:db:0d:c1:83:84:9d:e9:6c:
69:f3:4d:0c:93:7e:af:99:89:90:29:79:36:1e:93:
b7:66:13:fe:cd:6f:8d:07:15:61:7f:bc:2e:3b:d2:
94:07:79:3e:b3:11:10:f1:a2:b8:18:80:76:58:25:
0e:cf:ba:47:47:84:f1:88:52:00:ee:8c:5f:71:50:
5f:b3:55:1f:74:71:18:b8:87:48:fe:d1:d7:7d:66:
da:43:35:a1:7c:70:0d:72:2d:cd:49:57:c1:8c:f2:
82:34:d5:f0:21:49:ec:66:59:e6:42:14:0c:6d:8c:
ba:f6:83:cc:5a:a8:83:b8:d7:11:90:bb:a0:47:dc:
70:fa:9e:da:44:60:3c:97:a4:22:72:36:6b:38:5d:
0d:5a:6f:89:6d:cb:e9:d1:17:09:ad:1c:be:11:b4:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2E:2B:5D:53:8C:05:85:82:97:89:E4:FA:65:0D:08:21:0F:12:34
X509v3 Authority Key Identifier:
keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a0:e8:a5:91:dd:45:ea:97:42:e8:3d:67:36:22:30:e3:ff:
8e:00:7b:44:54:63:e4:4b:71:a4:1d:5f:7e:64:d1:99:1b:3e:
12:de:93:a8:d5:78:88:c6:e5:0d:7d:30:de:11:ca:ea:a5:69:
92:2c:56:4f:2e:79:c9:4b:a5:43:d6:a9:e2:bd:00:75:b4:92:
c9:89:46:7f:b6:29:19:65:86:63:a5:b5:fb:3d:24:3d:93:71:
73:a7:8f:0b:a8:29:d8:9b:98:14:6f:ff:f6:27:4a:82:fc:08:
eb:b6:23:24:e3:ca:ae:3a:47:12:32:72:5b:da:6f:28:5e:c1:
58:7a:84:5c:6d:56:bb:f9:d6:69:f1:28:7e:de:39:50:24:c9:
ce:33:38:f4:ae:21:39:d6:8b:84:6d:2d:66:79:cc:a2:5f:89:
f3:46:b9:c8:c8:04:cb:f5:fa:d4:06:29:9f:d9:cd:6f:27:af:
86:20:02:f5:46:2e:ff:21:ba:57:a4:74:c0:87:ac:2c:8a:4b:
93:9b:f0:c9:c5:61:9a:80:dd:73:e7:b2:db:e0:d7:0d:85:cb:
61:0e:2f:9e:67:2d:f1:26:0b:ff:dd:80:b1:0c:2f:70:73:dc:
4f:f5:56:c9:8c:cc:0a:69:15:3b:b6:6e:e8:8d:bd:75:c5:03:
03:f0:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:10 2025 by rpki-client