Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: 3/3Iuzi4KppO6nFvrkKUIgcmgZuLSUyGd97LZoIGnN4=
Subject key identifier: D6:09:0A:05:20:39:5C:6D:99:4B:D9:6C:5B:9F:A6:50:9D:61:CA:61
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 0198518CB7C5639C9D353FC61EE519A7BCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0CFB
Signing time: Mon 28 Jul 2025 15:00:33 +0000
Manifest this update: Mon 28 Jul 2025 15:00:33 +0000
Manifest next update: Tue 29 Jul 2025 15:00:33 +0000
Files and hashes: 1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: bq1qI1CYbA8PnfCnncimudetktO/Cn4GXY99irIDN4M=)
2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:b7:c5:63:9c:9d:35:3f:c6:1e:e5:19:a7:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Jul 28 15:00:33 2025 GMT
Not After : Jul 29 15:00:33 2025 GMT
Subject: CN=d6090a0520395c6d994bd96c5b9fa6509d61ca61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:f9:66:97:bd:c9:97:76:23:c6:82:8f:43:
97:08:3b:c0:cd:05:7f:92:0d:7b:d3:8e:07:eb:ff:
5d:7c:0b:eb:b3:6f:72:b9:c4:2e:30:87:1a:88:42:
95:3c:c7:84:48:53:6f:e9:72:e5:d2:04:78:b4:d4:
b3:a0:32:ba:06:b5:4b:61:c5:99:4e:8e:af:a8:78:
bf:30:06:70:c0:24:e8:fa:4b:b3:7b:dd:a7:fd:46:
80:d6:d6:6c:de:6a:5c:e1:9a:d2:c6:9d:91:b4:24:
75:b5:fa:13:53:16:c2:c9:70:69:f1:73:92:06:dc:
09:43:c7:98:26:b5:65:2e:bd:e2:c7:ea:37:e1:05:
04:50:03:25:f2:7a:a5:95:75:6d:c4:30:ec:be:54:
c6:b8:32:87:f3:1f:6d:0a:06:bb:a4:3b:bc:06:13:
c2:38:05:ac:30:3f:41:7b:69:da:e1:cd:60:22:0a:
c4:32:31:91:3b:84:26:36:b8:cd:04:50:cf:01:08:
1f:03:6e:3d:9f:e7:b5:82:3b:5a:e4:71:d9:23:47:
dd:ee:81:10:2c:ac:68:3a:22:0f:ba:f5:e5:55:3d:
e5:b0:6b:63:d1:bd:48:25:02:0b:2a:9c:bb:ac:9f:
38:af:d5:ae:1e:79:da:c8:f8:f1:cb:17:13:cc:87:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:0A:05:20:39:5C:6D:99:4B:D9:6C:5B:9F:A6:50:9D:61:CA:61
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ab:73:ca:91:29:36:a9:87:d0:3c:a6:ff:3d:3e:4d:85:63:
73:f5:df:cf:8f:a5:ce:ff:99:91:e5:20:59:34:3f:1d:3b:ec:
09:ed:70:63:c4:35:5a:36:cc:0a:d3:10:96:62:80:12:4e:e5:
22:cc:27:f1:95:d2:82:4a:3f:6b:5f:af:c7:ae:70:b0:b0:e7:
bc:15:1c:e9:f2:7d:0b:d9:d8:a3:1e:48:34:1b:1d:5a:fd:e5:
ad:4c:0f:d4:78:de:0e:bb:06:8c:b5:d4:a7:db:15:20:44:a8:
cf:58:e3:8c:36:9b:01:24:cb:63:b3:41:0b:ba:51:81:7e:ae:
31:dd:05:70:ae:ac:91:55:b7:b0:05:c1:ef:91:ad:a0:01:ec:
a5:03:e3:90:fe:4c:1d:fd:66:77:72:2b:ec:03:ed:66:f3:d2:
bb:6f:30:3e:5c:64:ee:b8:7c:ea:8a:55:37:03:9c:ab:fd:21:
a8:d5:05:f0:58:77:a4:1d:27:33:cb:19:28:98:c0:fc:44:d2:
b1:20:11:82:ba:02:34:5d:f1:ca:16:e0:89:1c:6e:bb:2b:17:
9d:ce:b8:08:d5:8c:18:7a:bd:c4:0e:84:24:9c:51:34:41:2e:
6a:7d:4b:92:c1:53:5f:cd:ca:80:d0:50:3f:d0:6d:98:76:ad:
15:61:b4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:33:34 2025 by rpki-client