Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: SveuX6Y2n6t1YiM5o+Wc8wO92WblTGO1C/Em8+e+xj8=
Subject key identifier: D7:A7:52:5F:41:C1:07:19:97:4A:4E:E6:94:98:9E:FE:53:8B:77:FA
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 0198530EC28D24C0F1E85DBE5795AE5CD969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 02EF
Signing time: Mon 28 Jul 2025 22:02:12 +0000
Manifest this update: Mon 28 Jul 2025 22:02:12 +0000
Manifest next update: Tue 29 Jul 2025 22:02:12 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: EPJcl6TOPqaGONgD36AzHRk4Z/M3rSx8zypt52navGg=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:c2:8d:24:c0:f1:e8:5d:be:57:95:ae:5c:d9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Jul 28 22:02:12 2025 GMT
Not After : Jul 29 22:02:12 2025 GMT
Subject: CN=d7a7525f41c10719974a4ee694989efe538b77fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:38:07:bd:cc:03:e7:ae:92:52:3f:9a:1c:
db:ce:18:db:8e:8c:c3:5e:dc:63:2e:fb:19:32:44:
d4:61:b6:17:5d:d7:04:7c:31:ad:1f:cd:fb:ac:58:
02:2d:b4:e7:90:cd:dc:1c:7c:71:e2:1d:81:77:b8:
ab:2d:f8:31:36:8f:ca:4c:62:d9:c3:fa:4e:10:30:
1c:38:b7:06:6d:b3:b8:76:5b:43:f0:a4:70:2b:c6:
46:67:01:1f:4e:90:0b:7b:9b:12:31:64:45:bb:b8:
ce:bd:a3:2b:3e:24:9a:0c:6f:a3:94:0e:7e:4c:cf:
1f:99:a5:9d:ce:2f:9d:5a:53:c4:d8:71:1c:83:4e:
37:dd:03:68:55:f4:de:8d:b2:e1:7c:23:b5:d5:5f:
9d:eb:1a:48:91:60:c5:dc:00:df:a1:ed:4b:29:93:
81:ed:d8:6b:e4:51:76:f3:12:45:02:d8:8d:e5:c1:
e9:e0:ea:d8:9c:85:e5:fe:a6:61:86:ad:35:cc:c4:
6f:c4:f9:5d:6f:c4:39:bd:ab:ad:32:37:53:29:34:
1f:b4:88:96:d0:f2:96:b4:ec:3c:b9:f5:c6:d1:cc:
9f:6c:ca:7e:b7:fc:30:7c:35:f5:8c:07:84:d4:82:
36:fd:31:c8:b4:7b:c5:fe:35:5a:28:65:40:eb:5b:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A7:52:5F:41:C1:07:19:97:4A:4E:E6:94:98:9E:FE:53:8B:77:FA
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:34:19:7b:06:f4:ef:75:c2:7d:6e:6a:95:65:e5:b0:46:
a0:dc:ce:b7:bb:31:fc:95:96:9e:16:df:e1:cb:3d:5c:4d:d5:
99:2c:23:d2:f7:cb:c4:da:ac:fa:03:09:ad:cc:c2:aa:1c:32:
bd:15:a8:dd:02:d5:ab:b6:fd:2a:52:eb:e8:91:36:d6:01:0b:
d9:0a:df:94:d8:da:bd:ca:47:26:03:5a:4e:73:1c:ea:55:bf:
99:07:b7:99:7f:a4:1d:44:5b:b7:d1:c5:75:d7:a5:1a:9b:78:
f2:3b:23:cc:39:33:80:08:49:3d:38:36:6c:e2:f9:b9:c4:02:
d5:57:9f:c5:b7:7e:66:39:8f:12:76:b4:2a:8e:aa:de:f2:e5:
8c:e4:86:a4:42:00:60:3c:62:69:df:b7:08:bf:23:0f:b6:04:
a8:a6:ab:d9:b1:29:c8:3c:8c:f8:f8:18:76:2b:73:28:b2:a6:
df:c3:a7:f8:37:59:49:40:0b:d2:63:bd:12:9c:4a:45:f5:a0:
c9:58:94:b2:0a:3b:52:1d:b5:86:69:a3:62:44:8e:d4:42:1a:
4f:f3:b4:e2:f6:f4:e1:fa:ef:63:b6:e3:1b:c9:98:de:ba:0e:
6f:b4:14:ca:f4:7d:e1:86:32:ec:bb:f5:9b:36:58:99:83:85:
ac:7b:d4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:44:19 2025 by rpki-client