Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier: FYICFitshd6WtkAHJIf5N7WFsnIt5CFcqdssGifmv14=
Subject key identifier: 73:19:35:BE:94:E6:4C:64:70:E0:8D:82:21:FA:5F:7E:FE:99:FC:11
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial: 0198481BE78D1FF2045A68BCAD3580DD79DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 19:00:44 +0000
Manifest this update: Sat 26 Jul 2025 19:00:44 +0000
Manifest next update: Sun 27 Jul 2025 19:00:44 +0000
Files and hashes: 1: 7Kmoa0mTT-hmQesiS2Vd310k5jw.roa (hash: USbTJdTp4AkhAgtWaDPdpVWCdumqCodGAPlzgsbWpqI=)
2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: C23+/SHEtMrZorj260pFmc6Mg9QPtMyGZtCVY2wAXco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:e7:8d:1f:f2:04:5a:68:bc:ad:35:80:dd:79:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Validity
Not Before: Jul 26 19:00:44 2025 GMT
Not After : Jul 27 19:00:44 2025 GMT
Subject: CN=731935be94e64c6470e08d8221fa5f7efe99fc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:65:67:85:1c:df:90:47:3b:3c:b7:90:13:
e1:77:f2:f1:1a:de:ef:de:52:9c:b3:21:20:d6:a6:
9e:3b:b9:89:ff:82:db:56:c9:b0:cd:5a:ad:14:13:
47:cc:fd:42:14:15:38:66:f0:1b:d0:84:dc:25:e0:
04:6e:85:2b:33:c4:1c:bd:bf:ba:08:54:24:2d:59:
94:73:d1:80:26:69:a1:c1:38:d2:fe:f1:8f:6f:e9:
e4:fb:c6:03:97:ea:61:e7:77:4b:22:1c:1f:f4:82:
44:d0:8e:37:d7:ca:95:ab:11:e1:c0:8d:48:c1:1e:
47:ea:4a:0d:49:3d:34:f4:e4:68:8e:53:16:43:6e:
a6:9d:64:f2:f6:2b:ba:ba:38:40:96:9d:e3:60:1f:
6a:a1:32:7d:4c:37:92:92:21:68:69:37:95:5c:59:
16:c5:9c:bf:b3:69:ac:6d:90:86:07:94:bc:e5:67:
91:08:30:2b:75:e7:b0:10:cc:6e:c3:34:07:ce:4d:
35:d8:0f:84:c4:6f:bc:cb:7e:74:32:5f:13:ef:0f:
dc:fd:63:11:58:e8:81:6f:0a:bf:c9:f3:e1:d0:36:
49:70:e2:35:40:5c:de:58:bc:66:7c:bf:6b:01:9c:
e1:4d:4a:f7:cb:05:6c:a2:63:90:f2:05:07:3e:de:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:35:BE:94:E6:4C:64:70:E0:8D:82:21:FA:5F:7E:FE:99:FC:11
X509v3 Authority Key Identifier:
keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:66:d3:e3:39:d5:3b:33:49:b2:7b:a0:c4:55:7a:00:41:
70:2c:ba:47:c1:d4:45:14:fd:eb:1a:29:01:25:9f:b2:eb:ab:
e8:2a:61:9b:71:da:f3:83:ae:75:c4:87:aa:f6:de:67:6f:f4:
0d:bd:51:17:67:ac:3c:c9:16:b7:5f:3d:af:7a:95:3a:e5:34:
55:4f:0b:3c:3e:d4:16:e7:5a:66:5c:c7:42:ae:2b:36:5f:39:
94:29:30:75:25:b0:cf:cf:a2:28:43:d4:df:ca:fa:d9:fb:d0:
fb:88:98:06:2c:53:9e:57:aa:c7:8f:3d:3b:1e:e6:03:9d:36:
d2:44:31:b1:38:1d:53:17:ad:08:bd:2f:e9:7e:96:d8:6a:52:
f1:56:26:0c:5f:6f:7b:6b:80:7b:95:0e:f0:27:56:2b:92:c5:
4c:80:28:70:a6:d6:1b:3c:a8:6f:33:34:b5:99:66:b0:56:d5:
c2:aa:c5:c5:3c:8d:59:93:2d:da:2a:10:e2:5c:5f:2a:8d:18:
7e:c8:bd:35:35:5f:3b:f9:12:32:cc:37:31:02:84:82:8e:28:
62:c1:38:21:3e:20:95:47:d6:7b:3d:df:5d:b2:c8:41:38:09:
93:b9:bd:07:2a:3e:0d:50:fe:8d:ed:84:d0:d6:47:aa:8a:70:
fa:0d:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:43 2025 by rpki-client