Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: aGY5w8KaS5uIFxS5whPZ8ll6nCc4SFskTRLETO19PPw=
Subject key identifier: 86:A4:E6:35:19:32:32:5B:48:00:67:A2:2B:CF:A6:EC:6F:81:58:C1
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 01986C285A5EC9D04BCDB463C162F8D144EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 1617
Signing time: Sat 02 Aug 2025 19:00:40 +0000
Manifest this update: Sat 02 Aug 2025 19:00:40 +0000
Manifest next update: Sun 03 Aug 2025 19:00:40 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: YUm/Wn6DKKcjyUOfk4f+xLF/SLaYMmpTDvOEuq+ZjBI=)
2: N4NsUcZuS_9XiBDgAfw6eryV7HU.roa (hash: tpgeA/zfOVEAg9H115FFWM358l26uFQNlABFRgvWlU4=)
3: yV4dNy3NsBZVUNWCmHTLsnrsaLM.roa (hash: HeRl5vH7gTSirrF3z1irtqiGbkDXqM3OvljtYndKLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6c:28:5a:5e:c9:d0:4b:cd:b4:63:c1:62:f8:d1:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Aug 2 19:00:40 2025 GMT
Not After : Aug 3 19:00:40 2025 GMT
Subject: CN=86a4e6351932325b480067a22bcfa6ec6f8158c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:72:73:ab:42:f3:fb:49:e2:ec:4c:c0:cd:
75:a9:4d:c2:a2:bb:be:63:e2:fd:56:fc:66:e7:b1:
e5:ce:68:c0:92:6a:7f:80:32:a8:76:6a:5a:bb:f6:
e3:60:85:c7:67:61:a2:fa:c1:8b:70:5a:28:13:c9:
74:e2:22:af:a8:04:75:6d:c4:8c:43:7d:84:e6:f8:
4f:27:b0:3c:07:99:2e:0b:52:e5:fe:b8:cb:1a:7a:
fc:3d:1a:9a:47:58:d8:94:ba:5a:ae:21:11:9d:cd:
68:6b:8d:30:13:84:1c:5c:37:b8:33:30:68:23:8d:
ef:97:d6:de:0d:4d:67:bb:a5:d8:48:cc:e6:5b:cd:
85:7f:e5:52:53:e1:c5:72:a2:01:76:91:a9:7a:09:
b2:e8:71:dc:e3:2f:d8:02:04:67:0c:51:05:67:1e:
3a:2b:7b:01:3a:d2:9b:bc:99:15:09:b6:9a:14:12:
46:7b:5d:60:6b:66:aa:53:48:49:19:0d:1c:a9:b3:
a2:05:02:36:ec:a0:3f:0f:4d:c1:70:25:44:c3:0e:
d0:e1:b9:82:c9:7a:01:92:c8:3b:bd:88:82:38:49:
79:7b:3b:e6:c8:24:c4:04:ae:49:b6:4a:f2:e6:c7:
ea:6e:4b:11:3b:93:de:9a:3c:99:bc:01:87:f6:f1:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:E6:35:19:32:32:5B:48:00:67:A2:2B:CF:A6:EC:6F:81:58:C1
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:1b:23:e0:7d:d6:d7:ab:8a:ed:e5:ee:25:c9:36:98:f0:
1e:cd:cb:e7:21:79:f4:50:9a:0f:90:f2:64:67:32:a0:c7:ca:
a1:d9:97:a9:fc:88:97:d3:a1:5a:1d:b6:4a:22:6e:98:d9:bd:
7b:ae:fb:45:93:0e:5b:5b:8b:39:cc:f0:0e:7e:8d:3f:0e:f9:
53:ea:2f:4b:ab:45:f3:a5:5b:0b:26:67:7d:66:47:27:07:0c:
5b:4e:b7:97:ef:0c:78:dc:02:0d:a4:9f:cd:8a:db:ba:d8:4b:
96:3a:a0:e9:15:e6:e3:f9:0c:ce:f8:20:33:82:88:4f:a4:d4:
e7:e8:12:f2:62:bc:92:ff:08:22:83:d9:95:5e:f5:5e:b2:d7:
15:ff:8b:6a:ec:77:b8:d6:c1:ff:f3:92:49:3a:7d:40:82:80:
04:89:bc:6c:be:0c:cb:fe:d3:72:ff:10:eb:0a:74:59:eb:84:
f1:ea:af:8a:e1:c8:0c:3a:20:a6:93:da:80:9a:41:13:7a:36:
d8:f2:72:d3:2e:1e:0c:9e:77:fc:69:ad:69:5e:4c:56:6a:46:
0a:40:26:0b:65:a0:2e:d2:ac:37:e6:e8:54:a0:8e:be:78:4b:
b1:ad:6c:48:06:08:18:0b:6b:b8:5b:70:1c:aa:1f:68:51:e6:
c3:25:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 00:43:07 2025 by rpki-client