Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: Qdq7qljk/cxevGcymCzv7FAjJ1u4gIc7C1VPBZc9JMA=
Subject key identifier: 29:B7:C1:11:FC:C5:45:58:B1:85:DE:64:17:AE:46:57:62:7E:EC:50
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 01984A09D95F56C739759F99ADF4A0F2E217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 09DC
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: 5uWXgLi1P9nYYUY0BDjBLUKZt5Ir0l2RtNRBy7SAvoM=)
2: mKP-r2WNz-DcN8jHguqt0IynJdI.roa (hash: 64sCq3JbYFHT/xnTN/Iz1j1wV1/No8n++lWEXivZPic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d9:5f:56:c7:39:75:9f:99:ad:f4:a0:f2:e2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=29b7c111fcc54558b185de6417ae4657627eec50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:d4:67:bf:c0:cf:e6:0a:f3:c0:c7:2b:59:
96:d9:35:bf:0f:20:c2:74:d8:88:16:db:a0:f1:90:
1e:58:77:2e:38:e6:ba:1f:43:95:0a:ab:f8:a4:56:
89:61:3b:08:79:92:46:e7:2f:1c:77:20:08:f5:94:
a0:ad:b2:fa:82:d1:ad:69:d4:5d:41:e2:f6:b6:4e:
b0:e3:54:9f:ae:b1:91:f3:0f:da:55:01:7f:ee:72:
3e:f6:b3:10:0c:75:89:4f:85:cd:21:1b:e2:61:aa:
8e:3f:f2:b9:d6:34:e2:4d:6c:dc:71:4e:2c:71:75:
9d:4f:70:22:cb:5c:ae:dd:c7:07:2d:9e:bf:48:e0:
bc:ea:e9:77:bc:e6:b2:c7:66:4d:ce:d0:0c:84:47:
a8:21:d6:d5:16:67:2a:2a:a1:7b:4b:60:7b:7f:4e:
92:fe:05:94:cb:33:db:fa:69:12:c8:6e:e9:eb:74:
43:b1:8a:1c:fa:2b:5b:63:b3:72:b0:2a:89:82:d8:
b5:40:af:62:54:19:f5:84:63:71:e7:47:11:75:25:
dd:8c:7d:42:4c:ee:da:8e:68:5c:b5:9e:6f:24:07:
a8:5c:f1:1d:64:68:54:af:ed:a5:2e:64:b3:dc:96:
13:71:bc:bc:1a:d8:cc:85:c7:9a:eb:84:98:a4:fb:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:C1:11:FC:C5:45:58:B1:85:DE:64:17:AE:46:57:62:7E:EC:50
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:08:c1:89:fa:03:93:01:3a:c8:2b:8c:b9:14:e9:11:e8:f4:
c9:fa:7d:2c:9f:9b:47:33:1e:31:ff:61:82:c9:4b:47:6d:fd:
9a:9a:65:5b:75:ac:9f:8c:db:e7:27:d5:7e:04:c7:7f:d8:bf:
5b:42:1a:04:29:ea:45:55:ab:5c:ca:fd:28:93:f0:c4:33:fd:
6f:64:07:86:ad:34:ba:98:9a:45:5e:be:ce:19:a5:dc:60:20:
ef:22:1b:be:62:e7:64:11:d7:6c:9c:2d:c6:c0:a3:af:73:0b:
5c:0f:0a:36:ac:70:3d:58:b9:4c:8f:ac:80:60:b2:da:bf:9a:
9f:04:7e:4b:3a:e4:09:4c:aa:24:1e:19:26:e6:66:3e:3f:05:
f4:57:22:91:fd:67:79:35:f6:a9:9f:eb:b8:cb:ea:25:98:ac:
94:6e:c6:6a:1b:29:e8:ed:eb:46:5e:1f:1a:3d:29:5e:97:4f:
ad:f0:2a:06:ab:6d:ea:af:cb:ce:84:34:52:4b:aa:eb:a6:c5:
cc:4c:b3:75:a4:b0:b7:83:4f:62:eb:81:2a:48:5d:9f:b7:cb:
ae:f1:3a:67:5d:b6:32:99:84:01:d3:06:88:0f:86:1c:ff:ea:
48:96:ff:ea:55:86:3a:39:6b:fc:fd:d4:0d:2e:eb:18:f4:51:
ac:c2:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:35 2025 by rpki-client