Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: MjLcAPyiB8SxO77MASFilLLBlh1KsiHwjGMKuqzMM6M=
Subject key identifier: 91:27:09:88:82:DF:1A:0D:71:EF:1F:C0:12:68:E3:A2:E4:C3:D2:16
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 0198530E156296E6AB89DCFF51A2653FA111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:01:28 +0000
Manifest this update: Mon 28 Jul 2025 22:01:28 +0000
Manifest next update: Tue 29 Jul 2025 22:01:28 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: zuxFJTGYOufENZJVQVt47lZyEKXdtECcZ2fMsxk9Ktg=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:15:62:96:e6:ab:89:dc:ff:51:a2:65:3f:a1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jul 28 22:01:28 2025 GMT
Not After : Jul 29 22:01:28 2025 GMT
Subject: CN=9127098882df1a0d71ef1fc01268e3a2e4c3d216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:f3:10:d1:64:90:f3:4e:06:cc:5f:ee:df:
d2:3b:68:a6:d3:2e:a0:65:e2:05:89:1e:b7:2b:57:
84:b2:30:c6:13:46:9e:0b:56:f8:f5:94:2c:0d:25:
07:65:df:08:d5:0c:d0:c7:a4:a6:b6:a9:e6:5d:76:
e2:e1:2f:9d:53:46:88:86:41:5f:af:9f:9e:c0:ed:
c5:1d:89:77:80:64:da:8c:1b:c9:6d:c8:e8:87:d3:
db:12:2a:c2:9e:37:f4:a8:7a:14:27:07:5a:58:a4:
db:b1:cb:91:55:c0:95:de:01:fe:de:53:52:4f:0c:
02:69:4c:bb:1b:0a:e0:ed:0c:1d:ab:b7:2b:f1:4e:
57:9a:b1:e3:9a:bd:35:4a:94:fa:d0:04:bb:84:ea:
c2:d6:77:c1:45:2f:96:ea:b9:69:32:01:4e:07:19:
cf:b3:b4:9f:5d:4f:95:ae:2e:bb:99:32:6b:e9:4a:
fb:1b:57:bc:f6:9b:17:aa:c4:85:16:3d:8b:f4:0c:
95:99:3f:de:96:48:eb:e7:5d:1b:1c:a5:dd:8d:fd:
21:d4:33:36:60:bb:67:2d:07:4a:1c:db:67:e8:17:
0b:cf:98:08:bf:3e:79:8b:af:16:99:92:b9:5f:f5:
56:53:b3:e2:02:67:10:15:00:35:85:4c:83:af:0a:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:09:88:82:DF:1A:0D:71:EF:1F:C0:12:68:E3:A2:E4:C3:D2:16
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:17:b2:fa:ed:57:2d:aa:35:56:16:15:58:1d:73:c7:52:3e:
f6:68:a7:04:55:09:6b:64:3b:e2:44:e5:7d:22:44:f2:85:f9:
13:b6:b5:da:32:d6:03:d6:ec:91:80:dc:5a:73:f3:8b:f3:78:
99:13:12:fb:da:99:d2:b1:5c:ea:b5:89:f3:d3:4b:8f:eb:01:
a6:cd:db:51:9b:e5:54:a6:cf:6d:b9:ef:f7:18:92:a7:6b:21:
23:e7:9f:8e:51:df:24:3c:3c:b2:09:0e:20:f5:5c:64:8e:d8:
e3:99:58:a4:7f:f7:30:1a:68:6f:d8:b7:7b:e3:2c:cd:40:bc:
5e:48:a0:b5:d6:1d:e0:d3:a4:f7:c1:a6:65:7c:96:29:f6:5e:
63:98:67:cc:5e:a2:2f:2c:58:8a:aa:80:2b:ca:ac:a7:b7:53:
cb:b9:de:50:1b:43:e5:89:e6:b2:e5:64:54:5a:1e:e6:69:a4:
da:3f:84:e7:bc:a8:e3:ba:2c:93:c8:65:03:c5:4f:f1:1f:d7:
cc:54:a7:c4:2d:f1:05:06:64:ef:2f:0c:cc:31:a4:9d:c5:12:
5b:4e:f9:6e:f8:d1:01:00:d7:7b:b7:e3:b3:8a:61:89:de:77:
5b:15:ee:ee:c8:e7:1e:92:e4:d5:a6:f4:c9:76:2d:77:db:57:
1b:69:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:45:44 2025 by rpki-client