Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier: 8491ewNsoMQsBQp+QeK8rgfRsJUFsKmB2gJyX/ElLzo=
Subject key identifier: 39:F5:D8:93:5C:0B:F9:54:4D:4E:37:75:F4:08:8B:E6:51:2D:68:97
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 019849D3990A9E0ADC5F8A65F282380F0E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number: 0C1E
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: 9SHpbhL3XuwxiKnoCroL_5tpXVo.roa (hash: xPrIpxk+JNMXsVLk++89joWnIkf6ad6w3ouFrsF8d/w=)
2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: YIDy0hW+mYp295sClF7X0Csnf0W7+6HD2Rdu9ZwqD18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:99:0a:9e:0a:dc:5f:8a:65:f2:82:38:0f:0e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=39f5d8935c0bf9544d4e3775f4088be6512d6897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8b:d7:fb:f6:fb:f0:3b:fe:7d:4b:f0:10:8a:
f5:69:b6:42:d4:92:7e:e8:47:5c:92:3b:d0:de:68:
bc:de:fc:22:f3:74:47:a9:e3:22:f5:12:de:23:6e:
0e:f0:52:88:eb:3a:5b:3a:60:73:35:66:87:71:89:
2d:de:86:bf:d3:fb:7b:6b:46:17:09:9a:d4:51:56:
e6:6d:23:23:49:73:cd:2b:d7:76:5a:96:79:64:04:
db:23:35:23:80:a0:3f:01:4e:93:3e:c9:4b:6a:1f:
a9:de:3b:cb:3f:99:1e:76:0b:9d:22:76:f9:43:79:
32:47:16:a7:d9:2d:93:f0:ab:50:f3:a5:a7:eb:15:
27:86:69:b6:92:a6:21:2d:54:b3:ab:33:ef:0d:e5:
16:df:89:51:c9:dd:9b:1c:b3:e6:b8:fd:a8:01:12:
e6:d7:09:65:c4:98:15:09:e4:81:77:9a:94:03:07:
20:27:57:47:c2:cc:a8:b2:74:b7:45:6f:6d:b4:b8:
f1:2e:8f:ab:d0:0e:d3:7a:a1:c5:90:09:6d:50:af:
43:ca:3b:23:b5:d7:fb:4a:99:ca:14:66:2f:31:12:
10:a2:fa:7e:a9:e1:37:8d:ac:df:43:b2:b9:6c:a2:
85:89:e7:b3:f4:77:ea:f5:38:a7:95:1c:3a:a4:fa:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:D8:93:5C:0B:F9:54:4D:4E:37:75:F4:08:8B:E6:51:2D:68:97
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:49:3d:b8:ed:29:5d:ca:87:b9:db:3f:69:de:f9:6c:95:
97:f8:1f:d1:3c:d7:78:3a:a8:3d:1d:ec:5d:c0:fb:57:bf:78:
90:9b:71:52:64:73:27:c4:26:10:71:8a:a2:4b:ee:36:63:9e:
25:a1:66:2d:5c:94:00:40:d2:de:91:b6:54:de:ec:6a:4f:45:
81:5a:f3:dd:af:5d:21:9b:37:88:e0:26:de:44:79:63:eb:e8:
9f:e5:b2:ef:ff:3c:e2:da:a1:27:0f:d9:bb:1b:51:46:27:0f:
a1:30:fb:04:d1:e5:ed:dd:fd:62:fa:7b:b4:6e:0c:8e:2f:e1:
40:13:ae:6e:af:f8:80:92:44:fd:5e:37:fe:29:6b:48:4c:2b:
1b:7c:47:cb:e2:86:71:21:07:a1:bc:10:2f:f8:16:61:e4:d1:
e6:65:c4:e6:b1:39:34:fd:87:de:17:74:51:23:11:38:75:5e:
ee:93:b0:2a:e0:8a:c1:52:5d:0d:49:71:d7:84:3b:d0:7a:9f:
7a:0b:09:c8:4d:14:ea:19:44:69:4f:1e:f8:85:60:6a:e9:d8:
e4:7b:46:14:9a:2a:b1:8b:38:a0:fe:90:07:52:ad:ce:0f:ce:
cf:cd:1d:ec:67:e5:e7:08:e2:14:f1:47:70:d9:c9:70:31:c2:
47:7b:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:27 2025 by rpki-client