Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: mGxGxym7zoYB9fUvuPCm/tNFI9UJv101lnUJxLgyDhw=
Subject key identifier: 4B:5E:39:AD:B2:D9:9E:1E:4C:81:DD:0A:3E:7F:45:4A:47:58:D7:5E
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 01984476329EC0B86C813FC88E51B91C3005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 01F4
Signing time: Sat 26 Jul 2025 02:00:53 +0000
Manifest this update: Sat 26 Jul 2025 02:00:53 +0000
Manifest next update: Sun 27 Jul 2025 02:00:53 +0000
Files and hashes: 1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: LSG6HIwppfO5FiZwrLBIL96bhCYlZ1IMYHbLg7jeZa0=)
2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=)
3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:32:9e:c0:b8:6c:81:3f:c8:8e:51:b9:1c:30:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Jul 26 02:00:53 2025 GMT
Not After : Jul 27 02:00:53 2025 GMT
Subject: CN=4b5e39adb2d99e1e4c81dd0a3e7f454a4758d75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:e0:78:d8:5d:3a:fe:f9:fd:dc:5a:9f:87:
78:c8:4b:9d:a6:74:28:71:ee:42:60:3c:54:7b:7b:
5f:8e:0b:60:51:bb:22:c0:db:e9:b3:96:a5:ba:8b:
3c:1d:cc:a2:02:96:60:d9:c8:47:29:4f:92:31:bb:
15:c5:2b:6e:1b:79:60:82:07:78:29:89:4c:13:c7:
4c:a9:b7:4d:ca:75:eb:6c:6c:11:3b:af:67:bc:5b:
31:88:01:f9:d3:e8:4e:ca:e6:26:8c:ba:69:87:c4:
72:82:e4:1a:7a:43:c7:dc:c3:da:0c:dc:eb:b7:9f:
9a:de:f0:e5:65:a2:7d:29:02:fc:b2:93:65:15:34:
cd:09:3e:61:be:9f:5b:d3:52:94:06:11:7b:12:89:
b2:37:46:6f:31:25:1d:bb:89:fd:2b:23:e1:a2:53:
a9:39:5d:bd:2f:d5:46:62:c4:8e:87:7f:a7:2a:ec:
ea:63:e2:3e:38:72:23:a9:a4:35:6c:6b:5a:82:89:
b7:20:99:e3:ab:9f:b4:be:11:5a:cd:a3:48:dd:bd:
9a:4a:73:4d:f1:c8:00:fa:49:27:2e:5a:15:0d:70:
4f:fe:c7:af:52:32:e7:cd:ca:29:05:a3:79:20:b5:
b0:9b:a6:f2:fb:90:42:c0:5d:8b:15:1b:e2:97:49:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5E:39:AD:B2:D9:9E:1E:4C:81:DD:0A:3E:7F:45:4A:47:58:D7:5E
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:de:a7:0d:92:38:06:db:93:5b:5c:eb:9b:e3:43:f5:28:
15:8c:8e:7c:55:24:a6:79:85:f7:0e:f2:09:7a:f1:8d:5c:5a:
99:bc:3d:bd:6a:07:85:98:2b:27:a2:06:62:52:ef:b9:87:86:
73:2e:bc:28:3d:d8:cd:79:82:c6:a0:fb:22:11:86:f4:28:4c:
20:72:a8:08:b2:78:4b:ba:cb:ad:3a:c9:24:d8:2d:ab:db:60:
09:25:83:56:ab:b1:85:03:c1:b6:ed:0c:be:57:99:f1:48:b1:
16:7c:b4:51:9c:78:28:77:8c:f9:64:1b:f1:c7:1a:c5:f5:cf:
3f:43:71:1a:b4:a8:52:0f:c6:85:00:51:b2:09:be:1f:1d:c1:
2f:46:d2:0d:bd:f0:17:4a:07:3a:65:fd:77:a0:22:eb:0c:e5:
7c:10:75:f5:70:2d:94:e0:65:cf:c6:c1:23:e2:e3:0a:80:dc:
2d:02:85:76:c8:46:e4:a3:10:14:73:5b:a3:ed:3f:3c:82:8e:
11:f7:dd:4a:0c:d8:5d:5a:d6:21:04:51:33:4b:e1:97:9e:00:
c1:25:15:53:97:e8:72:b5:a2:74:15:34:7c:3a:f8:95:71:34:
bc:40:18:96:f8:cc:1c:18:e9:82:27:5b:9f:fc:10:55:79:53:
9a:44:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:25:43 2025 by rpki-client