
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: ut0BlfGiQZjibMCcGOqtJgMFEMsDW+c9zdXLWFS8Gho=
Subject key identifier: 43:34:AA:A1:27:F2:F5:DB:32:2D:2D:95:42:8D:CD:66:43:C1:82:9E
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 01984B541FE60202E6A5DC6DD42A3B4E0532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 10:01:01 +0000
Manifest this update: Sun 27 Jul 2025 10:01:01 +0000
Manifest next update: Mon 28 Jul 2025 10:01:01 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: U4kx+0NZsh+gx5N9CWXpN6pY5mJfMnkYuPmoMVvn+Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:1f:e6:02:02:e6:a5:dc:6d:d4:2a:3b:4e:05:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Jul 27 10:01:01 2025 GMT
Not After : Jul 28 10:01:01 2025 GMT
Subject: CN=4334aaa127f2f5db322d2d95428dcd6643c1829e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:a9:7a:ab:d0:e4:f5:7c:e3:6e:b7:d6:ab:
14:fe:70:72:c7:bc:94:63:a7:b5:be:54:9f:8a:c1:
30:ec:b9:4e:6a:7e:a5:58:77:77:fd:46:00:a7:5a:
fc:d0:3b:30:18:25:af:35:69:a0:13:ca:b7:04:a4:
af:bd:32:ec:63:72:35:05:a7:87:0e:5d:71:a5:4f:
23:51:49:18:b8:0e:1f:5d:c1:04:17:ff:2f:2a:ec:
3a:ae:dc:ef:3a:35:fb:86:74:29:c6:ff:64:ed:38:
a7:8e:ac:e2:77:5b:75:49:d0:4b:19:33:cb:5d:71:
9d:ca:72:e7:56:ef:0f:63:db:e8:62:07:b2:e9:4f:
ea:0f:cb:84:61:b7:9e:e0:d5:08:14:16:b2:74:70:
af:e1:0b:a5:8a:34:72:8e:53:83:1d:12:c5:7f:f5:
55:1f:59:e6:da:99:d1:8e:38:f4:33:27:78:8b:0c:
60:13:8f:e3:6d:41:91:2b:75:8d:36:cf:9c:79:fe:
d6:d2:23:46:5a:40:55:b0:88:29:be:c1:b2:7f:df:
33:7b:f0:80:b1:d9:e3:d8:69:1d:3e:43:75:32:12:
50:6a:67:b7:15:ef:45:14:53:63:f0:77:70:80:92:
09:bf:b4:40:dd:ee:bb:2e:f1:6a:82:ee:26:22:65:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:AA:A1:27:F2:F5:DB:32:2D:2D:95:42:8D:CD:66:43:C1:82:9E
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:92:31:1a:f8:96:77:e0:06:cc:4d:07:32:45:2d:d4:a5:dd:
85:4f:66:c0:d0:d2:7f:e8:6d:4b:84:51:21:db:6b:0f:9f:0b:
d7:9f:b6:2e:28:f0:6f:57:c4:75:76:cd:17:7e:a1:11:6d:6a:
90:84:aa:b8:39:e6:cd:a9:b8:ee:8a:97:7e:4f:0e:71:87:37:
53:9e:c8:34:09:03:2a:ee:83:d2:89:74:61:62:f1:b0:32:39:
fc:69:fc:10:09:57:b9:aa:c4:5b:ee:50:55:fb:9a:70:48:1b:
77:50:74:62:50:fa:a2:1c:8a:21:fb:52:68:fb:36:f1:f7:81:
dd:ee:4a:95:7f:7e:91:26:41:6e:2f:72:a4:bf:03:b7:7d:da:
0d:40:2a:92:e5:b2:f8:75:19:94:f7:0c:0a:76:a1:0d:a2:d2:
c1:85:59:fd:59:45:c9:be:a7:33:75:56:09:5b:73:ca:2b:76:
91:13:42:1e:c2:00:84:37:85:3b:80:85:b8:3d:72:1a:87:95:
e1:3f:73:57:23:60:e6:f1:e4:1f:e6:4e:40:bb:8c:c3:c3:bd:
b4:0f:19:df:0d:28:56:f5:e9:90:ce:fc:ba:ac:29:14:6a:17:
46:e0:1f:b9:ad:35:77:13:f9:87:68:6d:2a:02:26:56:2f:83:
a4:d1:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:02 2025 by rpki-client