Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: CEeaq+YmYVg3+wBGAv+3VEdlYjNSfSImWObRsOqiTmE=
Subject key identifier: 73:1B:13:3D:A2:9D:67:91:05:0E:B1:3E:D9:29:4D:EC:2B:8B:8A:F6
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 01984C6696233B5DFCF623174A3FFDC0B03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 15:00:48 +0000
Manifest this update: Sun 27 Jul 2025 15:00:48 +0000
Manifest next update: Mon 28 Jul 2025 15:00:48 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: LsffyzZWzX8YuWESzKagKP80EMisiEnNcpc8iZuCBAo=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:96:23:3b:5d:fc:f6:23:17:4a:3f:fd:c0:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Jul 27 15:00:48 2025 GMT
Not After : Jul 28 15:00:48 2025 GMT
Subject: CN=731b133da29d6791050eb13ed9294dec2b8b8af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:e7:81:92:5e:11:47:30:da:c5:57:bf:e5:
08:33:2e:d4:b6:5a:8f:8a:61:cd:43:70:1c:ad:35:
a3:ac:cd:7e:ee:14:43:1f:cb:d7:76:1c:95:dd:7a:
6c:72:c1:02:cc:e5:61:5f:a8:f3:de:57:19:8b:92:
57:eb:1b:7b:30:d6:69:c3:9c:3e:fb:c0:ee:e3:6d:
c4:e9:0f:3b:09:88:99:b2:46:7e:1d:21:76:36:02:
46:08:aa:56:31:8d:17:3a:87:f7:ce:d2:72:d9:aa:
41:51:b2:52:bf:f7:3c:f6:c0:b9:1f:b4:fb:2c:a7:
09:d4:df:4b:15:36:00:f4:0b:0d:34:46:f0:cc:9e:
07:df:22:b0:65:04:93:a2:39:63:6a:e7:b2:f7:d2:
20:6b:a1:91:bc:fd:f0:3b:08:08:e4:a3:cd:7e:8c:
3b:51:c8:9e:6e:25:c1:fd:f5:65:25:48:d5:05:75:
55:f1:a8:0a:a2:e5:02:7c:f7:b5:86:54:cf:56:aa:
ce:2f:71:e8:ef:0f:05:43:69:92:2c:dc:f1:e4:62:
cb:ad:82:bd:57:6f:c1:ca:5b:00:4c:82:88:a6:1f:
4e:50:d1:fe:83:96:92:d4:61:bd:80:fa:fb:43:90:
33:00:a4:a7:ca:33:c6:1d:ff:68:0e:dd:ae:80:33:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:13:3D:A2:9D:67:91:05:0E:B1:3E:D9:29:4D:EC:2B:8B:8A:F6
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:da:da:91:d0:4a:3a:35:45:0e:31:ed:e9:fa:a9:37:09:82:
36:05:86:16:37:77:ed:3d:ab:f0:7a:42:08:19:64:f6:02:2c:
bb:92:d9:18:82:e5:b3:60:25:31:aa:37:22:21:83:5f:6f:2e:
e3:85:ac:46:db:c4:45:12:77:38:fa:26:9d:9f:e5:e0:81:ca:
50:55:29:c2:68:47:ee:03:ec:78:d1:9a:f4:a4:cc:2e:02:30:
30:3b:f1:3a:14:e8:5e:f3:f6:6d:bb:07:d9:d4:18:36:5f:0c:
f6:f2:61:0f:a8:8c:52:bf:53:c5:69:dc:ea:8e:f8:54:d0:a7:
17:55:3a:7e:08:17:31:4d:a3:27:32:79:40:29:96:1d:96:c0:
05:69:b1:92:fb:56:5b:ea:9d:c1:9e:26:c8:16:67:1f:04:34:
75:c9:b3:3c:7b:26:a5:12:3a:6b:d5:02:98:f3:20:0f:11:82:
72:0f:9f:13:69:b0:e7:a9:7c:48:d6:18:e2:b5:26:64:2e:e8:
a3:e1:12:ad:a1:80:6d:8f:12:bc:6f:5b:78:10:0f:ec:e8:6f:
9a:ba:10:ac:4a:4c:9f:7b:b4:70:cd:7f:20:c2:58:22:09:24:
af:f7:da:38:5e:79:c9:9a:9c:0d:e5:5d:d5:bd:7e:b8:08:af:
3f:93:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:55:59 2025 by rpki-client