Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: 4FaZIKmOQRRiK2SmM0LWgd8RplOKGZIyoDb7QX87o0A=
Subject key identifier: 07:DB:3E:74:32:A0:08:98:48:75:08:AD:8C:8D:CB:BE:B5:FD:C0:BB
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 01984B5444BA52807807B63244874AEEAF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: AC
Signing time: Sun 27 Jul 2025 10:01:10 +0000
Manifest this update: Sun 27 Jul 2025 10:01:10 +0000
Manifest next update: Mon 28 Jul 2025 10:01:10 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: g/ovRjjED9fj0PV+gPSWrl8WDZuEWZJxccb8H8HruJ8=)
2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=)
3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:44:ba:52:80:78:07:b6:32:44:87:4a:ee:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Jul 27 10:01:10 2025 GMT
Not After : Jul 28 10:01:10 2025 GMT
Subject: CN=07db3e7432a00898487508ad8c8dcbbeb5fdc0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:72:70:b5:96:a5:d4:ea:48:4d:3f:b4:1c:7f:
43:f3:83:6d:e0:12:ad:a9:e8:1b:4e:a9:94:4e:f1:
eb:3c:1e:79:16:f1:db:d6:1b:f9:8b:09:0e:0b:8a:
d0:21:b5:d4:97:c0:c8:b4:17:33:69:4b:c5:2f:44:
4e:e5:bc:28:47:52:66:f6:14:46:ce:8d:b1:8f:9c:
22:bf:f8:2e:df:42:7e:77:70:98:b2:74:7b:c5:53:
66:10:64:02:6d:a5:62:1b:b8:fa:6b:e4:2a:81:d8:
b7:a8:20:82:b5:1d:af:1e:d8:b9:a9:eb:5b:bb:cd:
56:28:13:d8:16:e1:28:78:41:23:89:81:e0:fb:0a:
9f:ba:24:9d:e6:a2:b7:b9:d9:4a:3b:af:ef:7d:14:
93:ba:76:28:43:07:14:31:cd:71:93:b4:00:fc:48:
4d:c9:5a:f3:0a:9f:a5:e3:04:c8:0b:9b:56:76:64:
2c:ae:72:0f:75:5c:16:4f:e3:5e:c3:4a:73:ee:e8:
08:80:09:da:fb:c9:4a:5f:13:2a:59:4f:21:81:35:
6f:2e:78:59:b8:4f:93:51:7d:c4:eb:4a:d1:d0:e0:
de:ff:76:30:0a:22:dc:69:b1:13:d0:3b:5b:11:72:
00:73:fe:97:b7:66:37:a1:d8:58:ee:7b:91:bc:95:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:3E:74:32:A0:08:98:48:75:08:AD:8C:8D:CB:BE:B5:FD:C0:BB
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b6:3f:6c:29:8a:8b:75:26:e3:dd:4b:a6:3d:0c:b8:88:65:
17:63:04:82:23:89:7c:8d:a4:e2:65:6b:49:b2:9a:6c:89:a1:
40:3e:d2:f8:dc:1b:d5:88:1f:7f:28:7b:ca:a2:d2:50:11:04:
c8:d4:f2:52:7e:a6:ae:70:f6:83:2b:5e:dc:97:03:b4:b2:ad:
a9:71:f4:a4:56:05:d3:92:96:f6:53:eb:b7:ba:21:4e:76:1e:
9b:3e:ae:83:da:71:03:c7:7c:c8:96:1b:b8:b7:96:7a:64:42:
9f:a6:83:ec:5b:87:2c:f5:45:7e:ff:d8:8f:0b:17:9d:47:20:
de:7d:de:bc:55:ce:56:c7:13:7a:63:e7:ae:ab:d4:f2:c1:40:
a4:94:7a:fd:61:8b:2b:09:93:0a:fd:6c:7c:ae:29:1f:1c:66:
34:b5:c2:e3:cb:eb:bf:51:fb:10:3d:2e:30:fc:99:b6:78:8b:
7e:e0:cf:56:a6:07:4d:e5:f6:85:d9:40:9b:58:b2:c2:3b:c6:
e8:a8:96:4e:11:45:3a:4b:60:50:68:8a:5a:9e:97:ba:f0:af:
21:e6:81:7b:af:76:62:39:25:fd:cb:c9:67:97:f9:5b:9a:17:
f8:31:12:d9:25:20:8b:65:83:ce:ee:af:c2:23:44:39:a4:3e:
9b:f9:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:23 2025 by rpki-client