Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: 2oYOhA+naNpRAomhBgNVPwhCb4Z72ZAVm4ZjKRCU8aQ=
Subject key identifier: 56:00:13:F8:B5:FF:81:DD:CE:7C:9A:FC:4A:35:B1:FE:5B:BF:32:5C
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 0198567C625B7DAB94983CBD4C7AFF33A3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 14:00:48 +0000
Manifest this update: Tue 29 Jul 2025 14:00:48 +0000
Manifest next update: Wed 30 Jul 2025 14:00:48 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: 4HRQirgeukgeS3AnG5cPwY6MhZlK4qZCEWsHIAstMG4=)
2: yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa (hash: LgnuacZQDPP2J60/EcJiQNzEwvS+wm94uYSyH+Ocir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:7c:62:5b:7d:ab:94:98:3c:bd:4c:7a:ff:33:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Jul 29 14:00:48 2025 GMT
Not After : Jul 30 14:00:48 2025 GMT
Subject: CN=560013f8b5ff81ddce7c9afc4a35b1fe5bbf325c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:08:d6:2c:f8:c5:8d:53:d3:f2:4f:da:32:
96:b1:91:79:71:38:7d:d4:e6:6c:7c:4a:24:75:09:
6f:c9:e3:20:0c:30:16:6b:6f:5a:d8:05:08:ea:60:
74:05:84:92:4c:fb:de:86:dc:46:15:ea:5a:66:f1:
0b:b8:4d:5e:b9:19:b0:8a:eb:96:ef:09:d9:0b:f9:
c4:3f:0f:d5:8e:45:bd:8e:26:2f:81:14:b1:68:ec:
f3:13:2d:c0:34:15:91:31:2a:97:5e:73:d2:5e:19:
f5:59:01:ae:a6:ae:6a:41:30:9c:93:e6:6b:a3:9b:
f1:10:6e:38:58:a5:42:a1:bc:95:c3:77:e7:c1:e4:
64:78:19:68:83:27:79:ec:80:70:d5:35:8c:69:df:
1a:dc:92:c3:3c:22:2a:57:3a:d4:13:4e:a5:d1:9e:
ed:82:c3:d8:37:cf:71:a6:ad:e5:22:b5:5a:51:f0:
11:d7:61:71:f3:11:c7:70:c0:56:51:5d:54:44:4e:
fe:1b:fc:12:81:29:df:44:af:a5:31:db:b2:33:2c:
a4:1a:14:ca:01:d5:86:78:74:60:37:ea:fb:65:78:
35:23:a5:f3:dc:a5:d1:fe:31:15:aa:89:ee:c0:b8:
95:7e:e6:bf:b7:7d:2d:3c:3e:11:01:70:44:cd:6f:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:00:13:F8:B5:FF:81:DD:CE:7C:9A:FC:4A:35:B1:FE:5B:BF:32:5C
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:54:5b:e9:97:62:bd:a5:e4:57:09:e4:48:81:88:7f:aa:d6:
52:3b:59:03:f2:52:e9:3f:1e:2b:7f:c0:61:e7:3e:56:f0:e1:
5b:68:56:b1:46:5c:c4:a6:00:81:be:94:73:6a:9d:07:8a:1e:
dd:c0:6f:4e:30:a3:0a:55:fa:79:38:84:72:5c:a9:ca:ae:0b:
3b:fc:c9:04:1d:84:ba:b0:e8:69:0b:d8:cb:d2:69:46:d1:ac:
62:90:44:4a:61:e2:98:d3:84:20:71:78:0c:1e:4c:e8:f6:a2:
1f:9f:fe:a2:d5:20:0e:86:d5:22:0b:f3:3a:24:95:28:69:4a:
19:98:2f:89:3b:83:cb:92:13:5d:6b:43:f1:ee:24:85:f5:0b:
e0:93:c1:15:33:62:05:86:cc:db:6f:f4:d5:12:4d:cc:10:e8:
8e:b1:48:d7:08:60:8e:1b:b3:db:1b:e8:ae:2c:b1:fd:a3:11:
05:76:9f:2f:42:d8:7d:40:a2:83:d1:1d:6d:9d:84:a5:ba:3e:
5e:65:dd:bd:3f:2b:57:24:79:48:e4:5c:32:49:db:59:1f:f6:
9e:4f:49:e8:0a:54:c9:b6:94:f2:ce:8b:be:41:29:79:9d:08:
be:31:a8:2f:9a:55:1d:08:29:72:8e:97:33:f7:7d:e4:15:6f:
e6:08:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:00:25 2025 by rpki-client