Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: 385MLyipnvXC+xHlsw8EFkhtHE0nIbUTRfkLMjlkXGo=
Subject key identifier: BA:20:C5:C2:8C:85:69:77:1E:66:92:41:99:6B:44:9E:08:FE:C4:D2
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 0198357119736E1D0778C78BA6F3FCF1F627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 15E5
Signing time: Wed 23 Jul 2025 04:01:01 +0000
Manifest this update: Wed 23 Jul 2025 04:01:01 +0000
Manifest next update: Thu 24 Jul 2025 04:01:01 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: jL2/J8o8V9Y02QxQ47d1Kc+CmaxWit3KLDw1Fz6qB2E=)
2: j0TS7sWufeH5UA9R8L5Lar1dfN8.roa (hash: 4uoOp+ywbPIH2GvAsL/CI2u9RgmZPn6i2PjYhgr/qBg=)
3: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:71:19:73:6e:1d:07:78:c7:8b:a6:f3:fc:f1:f6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jul 23 04:01:01 2025 GMT
Not After : Jul 24 04:01:01 2025 GMT
Subject: CN=ba20c5c28c8569771e669241996b449e08fec4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:a6:8a:61:1f:73:68:8b:4a:6e:d1:88:ed:
44:26:87:33:15:35:5c:3e:d2:86:e9:08:2a:3a:43:
91:9d:05:83:92:f5:d2:de:45:02:54:1b:9d:70:2c:
a2:01:90:dd:b1:cf:7c:18:ab:b0:8a:37:10:90:d7:
df:f7:00:b9:51:3a:14:27:0f:af:84:8b:61:6c:f7:
b4:d0:b9:4e:88:7a:8b:7b:9e:5a:7c:4a:79:c2:12:
b4:51:25:c8:81:ab:b0:7c:bc:29:c2:f3:a3:73:3b:
dc:69:e7:12:21:47:d9:35:17:f3:85:8c:01:09:86:
c1:9a:cb:f0:a0:ac:2e:91:14:1c:b3:68:69:b1:1f:
67:a5:51:12:3c:85:30:ca:2f:88:76:c0:ad:b2:32:
c4:3e:5e:34:f8:79:35:61:ef:0c:24:23:7f:a0:a0:
d1:3b:c9:57:d5:e1:e5:e3:32:8b:8e:1d:43:67:13:
5c:8d:21:11:9b:b1:f3:a9:7a:06:c8:fc:8d:21:54:
2c:ad:4c:f1:c5:a8:f2:1e:29:24:8f:59:3f:84:35:
53:80:f7:ff:92:79:26:27:68:56:9f:95:94:a7:bf:
11:07:40:4c:e3:98:2c:95:fd:c1:fa:69:37:fd:30:
c1:7a:08:0e:3d:74:4d:83:f4:ff:5d:6c:91:19:58:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:C5:C2:8C:85:69:77:1E:66:92:41:99:6B:44:9E:08:FE:C4:D2
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2e:00:30:a8:2e:89:94:88:73:82:57:b2:64:93:2f:91:d7:
a0:30:d4:9f:57:77:86:9d:f4:8b:0a:64:33:83:bb:d0:56:65:
10:18:f2:29:37:d5:6b:37:5b:05:b6:5b:e7:4e:c8:6a:6d:03:
1c:33:af:f9:93:20:04:04:54:be:54:1a:e3:3e:91:58:83:20:
3e:c7:69:ac:09:0b:3e:8b:6f:71:42:2b:bd:bd:45:93:ea:76:
9f:9b:c6:e8:45:2d:43:e0:49:5d:aa:58:0f:a8:d7:ca:5b:e8:
e2:fc:77:a6:76:31:af:48:7e:8f:12:2e:f8:15:d1:1f:b0:bd:
11:d0:83:fb:2a:4f:c8:68:f4:30:31:0d:24:eb:fb:7a:b7:31:
fd:f5:a9:af:dc:58:60:82:a3:9e:2e:04:88:dd:88:d9:c1:53:
75:a0:53:20:dc:18:ce:90:b3:a0:2e:df:54:ef:cb:69:37:f5:
10:4b:2e:b2:e4:05:6a:f5:c4:c9:0f:b5:b3:da:84:be:ec:9d:
87:02:a7:42:41:db:16:0e:48:14:0b:ec:04:6d:d9:73:92:8e:
f3:73:69:bb:37:55:0c:60:77:38:dc:73:c6:89:59:1e:96:4e:
5a:da:80:8c:8a:13:9a:24:40:a3:29:e3:ee:96:64:2c:47:bc:
10:78:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:02:49 2025 by rpki-client