Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: ZleK6dmUWzAqCZrL6lmJgbMnMsl6MxxA0chz4dajqpc=
Subject key identifier: 68:5B:F4:80:2E:8F:D4:44:CD:5F:D6:D8:74:AB:3D:4A:10:76:05:3A
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 01984777A5BA7C30B9C796A0955133363432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 16:01:20 +0000
Manifest this update: Sat 26 Jul 2025 16:01:20 +0000
Manifest next update: Sun 27 Jul 2025 16:01:20 +0000
Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=)
2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: SZmUIXxj1+7YxKntpzVEE/1L2uh1gM7TP2oE+aoxb6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:a5:ba:7c:30:b9:c7:96:a0:95:51:33:36:34:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Jul 26 16:01:20 2025 GMT
Not After : Jul 27 16:01:20 2025 GMT
Subject: CN=685bf4802e8fd444cd5fd6d874ab3d4a1076053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:6d:c1:d1:84:4b:1c:3d:be:8f:8b:a8:f7:
9a:4a:cf:2b:ae:c9:9b:5d:be:31:38:b7:b4:17:ef:
58:f2:c6:33:86:a4:91:d0:ae:98:d5:6a:78:6e:f8:
1d:47:57:8b:e6:7f:e1:bb:9e:73:34:c3:9b:f3:b5:
25:7b:f5:ea:e8:da:b8:81:fb:ac:81:89:2a:00:1a:
a3:e8:21:64:e8:4a:08:de:27:6e:e3:cc:cf:20:d4:
60:aa:78:3b:e4:e7:d8:97:40:27:1b:6d:fe:ab:28:
2d:88:94:a2:ca:d6:a7:36:f7:78:f2:ca:8f:e0:c5:
ef:73:b4:45:69:8e:da:95:93:84:8f:b1:29:df:dc:
7a:bc:74:ed:d8:89:d4:02:2d:44:98:6e:71:4e:ea:
8b:e5:e4:6f:f7:9c:e0:ed:a9:99:7f:81:9f:36:14:
dc:97:f1:7d:43:c8:a1:fb:7e:f3:f9:b2:5d:f5:f1:
83:3e:57:23:cb:12:6a:b9:e4:1f:96:0e:9b:0d:6f:
81:5f:6b:29:52:a2:0f:a1:ab:42:64:cf:bf:7e:b3:
ce:2f:b9:a0:33:6f:e4:49:3b:ec:12:39:a1:07:fe:
2d:fc:2f:78:44:94:be:d3:2d:25:74:0c:59:8f:ee:
f3:fc:a4:5d:f1:bf:5f:1f:cf:68:dd:f8:4d:7b:57:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:F4:80:2E:8F:D4:44:CD:5F:D6:D8:74:AB:3D:4A:10:76:05:3A
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9a:ab:95:3d:82:09:9e:03:f4:f5:1d:00:32:72:bb:83:9b:
da:38:67:01:0e:a0:6f:02:da:8c:55:e7:27:9f:16:09:31:7b:
58:c1:c9:76:03:db:4b:cf:fb:2b:1c:d5:90:26:08:26:9c:af:
9c:6f:55:86:98:78:61:7a:aa:c5:76:e3:87:75:b7:a4:51:31:
a3:60:ad:56:d4:09:9b:d4:2f:9d:17:50:c3:41:e7:74:24:f8:
8f:cf:8c:8e:aa:fb:ea:55:43:26:ff:2b:64:27:81:34:31:35:
66:5d:ed:23:0e:8b:a7:02:4c:f1:3c:88:d3:1c:d4:df:7f:a5:
1b:8a:a0:f8:e1:ca:6f:38:b6:a7:07:e8:4f:8f:bd:1b:b1:a4:
31:21:f6:72:8b:4e:ca:42:96:07:c7:b4:98:ab:7d:e2:02:c9:
d1:d8:f0:60:4e:9f:3c:bd:51:14:99:f3:ca:2a:18:99:53:ce:
29:0f:92:11:72:91:fd:10:79:a7:84:f0:ae:0c:c4:d8:6d:1c:
3f:f1:86:da:f3:04:fc:24:20:5e:72:c4:01:b4:5f:c7:e0:31:
a5:04:41:0b:9a:ee:fd:b6:40:a8:8d:cb:7e:a9:af:5c:27:da:
bd:cc:4b:89:bc:4b:4b:8f:23:3e:89:ea:3c:d5:57:2f:da:8b:
82:56:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:52:15 2025 by rpki-client