Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: 5OZ3XdLCK2oBnYIQmP1omNsS8dZDvoWVIYg6kAkOhOs=
Subject key identifier: 28:8C:32:2B:03:3C:BA:E7:7D:33:52:11:53:45:E3:3F:59:25:90:84
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 01984C9CDCDF2A00B6DE146612A7CE649B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 059A
Signing time: Sun 27 Jul 2025 16:00:05 +0000
Manifest this update: Sun 27 Jul 2025 16:00:05 +0000
Manifest next update: Mon 28 Jul 2025 16:00:05 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: Gr5K6g7cFnz6cui6qdRmSI6thssnG7MDmuL7dR4X/FU=)
2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9c:dc:df:2a:00:b6:de:14:66:12:a7:ce:64:9b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Jul 27 16:00:05 2025 GMT
Not After : Jul 28 16:00:05 2025 GMT
Subject: CN=288c322b033cbae77d3352115345e33f59259084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:17:fc:c8:c5:29:f2:7f:0b:9a:cd:0d:de:
1a:13:a8:de:3f:bb:0c:a4:56:0c:87:8b:a3:08:a5:
79:a8:17:20:2d:fb:c8:df:80:cd:e0:78:2a:84:03:
d2:e6:4f:63:93:4d:fc:79:9b:5c:c0:7d:35:96:40:
b0:59:11:ec:44:43:45:89:60:69:41:6f:04:4b:f3:
b2:1d:dc:06:d5:00:29:42:66:29:ef:96:d4:16:9c:
e0:5a:f4:43:c6:2d:48:06:0d:9f:82:85:0b:6f:cb:
a9:33:6e:84:1b:51:ad:98:43:8c:b3:04:a0:5c:f0:
b3:d4:77:ee:d2:e2:cd:b7:0c:d0:d2:6a:42:72:17:
8d:08:f0:9f:fc:e2:0a:98:45:66:e8:e3:15:e7:40:
04:52:59:53:a9:a1:65:8d:a2:58:4a:b6:aa:9c:0c:
a3:2e:1c:83:3c:86:4b:35:f8:23:f7:2a:02:27:36:
43:7c:15:46:60:50:90:7a:27:03:5e:d9:3d:c0:57:
93:bf:71:2d:01:17:1f:e9:96:4d:a0:4a:42:92:d8:
fb:cd:5e:18:9c:6b:7d:4b:72:a7:fd:bf:8b:49:83:
4b:6b:75:52:19:e5:b9:77:e7:4a:8b:47:07:83:3a:
f0:df:1f:b8:b0:2f:ee:ac:93:23:78:21:4d:95:f2:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8C:32:2B:03:3C:BA:E7:7D:33:52:11:53:45:E3:3F:59:25:90:84
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ff:ce:4c:b2:75:af:69:ea:a8:d8:5e:62:6d:b9:22:6c:fb:
c1:44:20:b3:26:9e:5e:8e:81:63:c4:6e:ba:3f:2a:b0:b4:8f:
16:66:06:14:64:5c:b3:ba:75:bb:5f:ff:de:4e:e8:be:8e:2f:
12:11:37:59:ce:1f:ce:b7:c2:98:2b:65:73:ae:93:25:c7:af:
3a:39:81:25:82:7d:e8:4a:5f:26:a6:9d:2e:c3:02:bd:df:b3:
c1:0e:35:83:a9:ba:39:6f:4c:06:6b:ab:0f:00:21:c1:4f:7c:
c8:f0:aa:11:6d:91:ff:7c:c5:77:9a:a1:51:13:c8:9c:22:1d:
b9:48:e4:02:78:1b:3e:2f:11:9e:f2:82:ca:79:23:27:18:3b:
c4:3f:82:b3:e3:35:8b:29:9f:9d:4f:31:7c:fe:9b:f6:b2:3e:
0c:08:a4:21:b9:9b:46:3a:55:61:6f:3e:36:c3:f0:ca:b0:ed:
a3:79:e3:3e:be:b1:c3:1b:7d:7f:84:ae:39:92:94:b0:86:78:
53:d8:3e:86:88:80:47:96:b6:9b:09:c8:6b:90:8a:d9:96:44:
6d:e6:5d:e3:64:27:89:78:35:45:9f:a9:fb:b9:e3:eb:32:39:
97:f5:8c:2c:99:1a:c4:5d:c1:0f:0e:f3:5c:32:9b:eb:28:e2:
e1:a4:3b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:09:40 2025 by rpki-client