Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: fNLBNQIIDyR7hWqQuIAD0ziF/980wOxbv0W7aa81Bk0=
Subject key identifier: D5:E4:71:52:8D:97:00:EF:63:8A:0F:42:49:19:E6:6F:2C:CC:77:A8
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019847E54D03550D744D105DC42FE0A158BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 11F0
Signing time: Sat 26 Jul 2025 18:01:06 +0000
Manifest this update: Sat 26 Jul 2025 18:01:06 +0000
Manifest next update: Sun 27 Jul 2025 18:01:06 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: +RDr0gMlDNcf28D9Np+g7Akko+8nCNLajiVy4ybtB9A=)
2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=)
3: Ui6ZcVR5VSgOavfnIix1oy38mjY.roa (hash: yRTuvXTUZnIOOWWsEOiOGa2OWkTQmK3kH5dqt1VxT5k=)
4: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:4d:03:55:0d:74:4d:10:5d:c4:2f:e0:a1:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Jul 26 18:01:06 2025 GMT
Not After : Jul 27 18:01:06 2025 GMT
Subject: CN=d5e471528d9700ef638a0f424919e66f2ccc77a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:28:e9:c8:c2:27:d2:06:4a:d8:79:4d:59:
88:38:15:cc:fe:19:11:e5:82:b0:73:c4:0a:ac:4e:
8e:fa:28:a9:41:0e:34:08:b7:09:d6:94:19:70:76:
2e:df:91:49:f1:d8:ed:c0:47:c2:a1:c1:4e:fb:86:
54:db:d7:66:24:d0:6a:00:19:0f:e9:73:36:0e:4f:
2d:2c:5a:fc:61:b8:d6:39:f0:7e:0d:48:6c:7d:77:
b0:e1:37:26:6f:87:9d:39:d8:2e:7a:33:4b:82:99:
2a:2c:37:dd:25:18:39:22:81:11:d1:1a:b0:6c:a3:
57:ce:75:a1:83:ba:65:ad:91:03:ee:14:dd:49:c1:
89:eb:59:de:2d:b3:36:14:73:4f:2b:c1:d4:04:7f:
6b:6c:1d:a7:5a:c8:b2:9d:7b:11:2a:47:16:17:86:
84:e1:66:55:af:cc:5c:d8:12:15:c0:f0:1c:47:cd:
80:e1:9c:38:20:68:eb:97:c4:65:0c:78:ee:bc:00:
3f:ad:92:a8:5f:b7:30:77:23:d1:5c:d2:1e:61:c2:
93:76:84:51:1c:a2:30:aa:fa:35:37:cd:2c:10:1f:
6a:de:ed:a0:58:0e:9e:76:fa:97:ec:ef:c2:f5:3d:
e1:6c:11:e9:02:c9:1e:eb:74:81:4f:e3:59:9d:0f:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:71:52:8D:97:00:EF:63:8A:0F:42:49:19:E6:6F:2C:CC:77:A8
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:27:e0:f5:4d:89:41:b0:b0:02:22:0c:71:52:3e:2b:35:
47:94:99:ff:c9:e6:1d:7b:68:02:4b:e8:39:af:ec:57:dc:59:
c4:0d:18:de:a8:c8:c0:f9:f1:7f:51:48:0c:f5:44:5c:87:1d:
35:0e:b1:aa:2d:11:2b:86:11:f8:39:96:70:01:01:f6:ad:38:
66:15:e1:6d:1c:9d:7d:02:72:3b:f4:0c:3f:ef:10:20:65:bf:
00:d6:04:fb:fa:74:b0:a2:d9:80:7d:31:31:d2:c6:b7:1d:ac:
ce:55:73:eb:be:99:79:24:fe:1d:75:1a:d7:4c:0d:6e:77:3f:
b3:68:0f:6f:0d:fd:fc:95:79:2c:3e:af:73:2a:19:35:5d:86:
36:6c:0b:ff:0a:17:35:c5:ba:93:52:09:0e:19:45:51:a6:88:
18:17:6f:61:a0:5c:b9:76:a0:a2:c9:e4:ce:07:f2:f0:5d:f0:
0b:1b:54:20:de:32:27:2e:24:f5:2d:57:9c:a8:94:cb:2d:54:
09:84:bb:ea:3f:72:15:a1:f4:a0:2d:4b:3c:56:0a:15:d2:43:
b3:c3:1e:9f:d7:79:eb:45:69:7e:b1:9d:a0:c9:24:ec:7c:53:
f2:83:86:38:fa:e0:ca:b5:5b:ca:c2:14:c2:e4:98:dc:90:24:
7d:ce:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:57 2025 by rpki-client