Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier: QxXd1IETrjZi3doQA1DyiPqfNCHftlXc88HgkRwPiKA=
Subject key identifier: 78:07:B5:6F:73:A1:EC:F8:1C:0B:82:D8:89:47:9D:EE:C2:66:F6:71
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial: 01984B53C5A5ED4B8DA354DC441EDA78FD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number: 0FC2
Signing time: Sun 27 Jul 2025 10:00:37 +0000
Manifest this update: Sun 27 Jul 2025 10:00:37 +0000
Manifest next update: Mon 28 Jul 2025 10:00:37 +0000
Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: 1zSkm3McUS57nLCPeQY8R6zJJuLLVPyy0zOBQy8ZBiQ=)
2: 0hYdVdTdrSs-d6BXtENWomMQM6A.roa (hash: Qi+45gX4AdRetJwFY+wBMXn8X8pOs16SCJ6qQzqdA+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:c5:a5:ed:4b:8d:a3:54:dc:44:1e:da:78:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Validity
Not Before: Jul 27 10:00:37 2025 GMT
Not After : Jul 28 10:00:37 2025 GMT
Subject: CN=7807b56f73a1ecf81c0b82d889479deec266f671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:44:66:c9:1a:90:c0:21:1a:5f:79:21:06:
9e:67:40:5e:ae:0b:98:1a:3a:6e:fd:cb:79:62:23:
9c:55:b0:bd:ba:c0:1f:1b:8b:e4:63:c8:59:a8:d7:
3b:51:46:aa:6f:08:92:ab:42:31:52:2f:af:04:30:
48:e7:f4:6f:ea:dc:6c:1a:83:8a:2b:61:2f:36:bd:
2c:e7:ee:30:f6:2f:96:b5:40:97:19:bd:98:ce:3b:
40:5e:2b:dc:9b:3e:04:3f:4f:c1:ef:d2:4d:64:47:
57:87:34:3f:7c:63:23:a7:77:26:10:35:49:0a:00:
2c:e3:c7:c0:ca:ca:d6:46:6a:8a:01:64:cd:11:e2:
8a:e5:f9:7c:54:db:04:f2:a2:8c:bc:a0:54:55:5a:
95:fc:aa:25:f8:0a:d6:21:55:ae:26:b0:34:2a:fd:
39:35:26:75:29:ee:71:3e:de:bd:51:f8:08:63:9b:
6f:dc:34:ae:37:a5:8e:c4:e6:8d:dd:cf:74:30:cb:
f6:8f:76:08:6a:88:ee:2c:d4:d9:4d:2f:7b:fa:e6:
0a:72:9b:f9:08:e4:07:c0:a6:e0:1f:79:30:0f:c8:
bc:b9:5d:07:bd:fe:95:0e:45:4b:b5:a0:95:f6:7b:
9e:cb:c4:d3:60:2c:71:2f:f1:dd:d7:32:7e:f0:d1:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:B5:6F:73:A1:EC:F8:1C:0B:82:D8:89:47:9D:EE:C2:66:F6:71
X509v3 Authority Key Identifier:
keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:17:ea:92:6a:8b:2e:9a:47:5f:f5:02:fe:94:6d:ea:dc:43:
29:3b:5a:19:5f:0b:df:6a:30:1d:f7:fc:4e:97:ec:5e:51:29:
3c:74:6c:f7:d8:97:2d:b8:a3:a0:5b:ad:11:5b:c7:84:1b:65:
b8:99:9f:d6:6c:e3:d4:2e:1d:4f:cb:ee:eb:b3:6a:ff:f7:fd:
0c:5f:ce:fe:e0:c9:38:7d:ab:52:b5:64:90:f4:7d:60:d3:82:
01:40:e8:2d:2c:8a:a5:16:9a:4d:75:5d:dd:16:cd:a0:70:dc:
bb:9e:5d:1c:4b:5f:88:ea:c6:51:0b:65:41:c7:cc:52:f4:51:
29:c1:be:7f:01:f4:7d:cf:9b:07:3e:40:6a:d8:1a:c8:e6:aa:
05:55:8d:45:e3:dc:59:6b:d9:b8:ed:c7:06:de:10:2f:71:87:
7b:4d:24:0c:f9:f3:ff:28:63:f4:76:f2:ce:b8:aa:e9:96:a0:
49:cc:93:0a:5d:85:80:8a:e3:5c:90:e3:48:36:53:13:2a:15:
6e:18:31:cc:5e:c9:5c:d5:af:93:d3:09:74:d4:f8:75:c5:db:
3b:fe:1a:cc:96:7f:12:ca:bb:e9:bb:66:d9:23:ee:ca:56:03:
3e:64:17:92:79:97:ad:54:aa:40:d4:4f:c7:d5:f1:69:b9:ac:
aa:f9:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:27:24 2025 by rpki-client