Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: pF+reBTPtHOmqSUZDxt1W3tEsflvnrvi14TEYGFXvWs=
Subject key identifier: 22:51:81:70:91:F6:1D:A2:88:1C:54:25:0D:C3:13:1F:F1:55:8D:F0
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 01984B534BA82F35411BD36D0A7529811A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:00:06 +0000
Manifest this update: Sun 27 Jul 2025 10:00:06 +0000
Manifest next update: Mon 28 Jul 2025 10:00:06 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: bdiotnWz8qJcO6gXq6SBGRNUTGI6KX7R+fmjDVjWnqQ=)
2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:4b:a8:2f:35:41:1b:d3:6d:0a:75:29:81:1a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Jul 27 10:00:06 2025 GMT
Not After : Jul 28 10:00:06 2025 GMT
Subject: CN=2251817091f61da2881c54250dc3131ff1558df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:65:30:2a:71:31:da:98:25:d6:3a:64:b9:
15:47:c7:72:d1:3a:7a:4f:93:5a:28:3b:2f:38:cb:
eb:91:d1:4b:a4:9e:64:05:87:23:fc:bb:0b:4b:46:
f7:08:6f:dc:e0:76:9b:c9:71:60:4b:31:3e:9d:4d:
59:73:7e:29:0e:d0:68:89:34:ee:81:c6:b4:63:53:
86:fe:65:8a:2e:49:99:64:26:c8:54:08:73:e9:ce:
f8:9a:44:83:61:2f:b3:0d:f3:cd:5d:de:f6:81:b2:
e5:37:67:8d:a9:bb:be:ca:ea:2c:d1:1b:83:6c:85:
a3:94:e2:be:e1:10:ed:92:28:4a:57:15:85:f0:31:
2c:56:74:8a:12:78:42:4a:f1:bf:ce:bc:83:58:07:
09:eb:ae:e2:cf:27:5f:b0:7c:c1:e7:ad:5a:0a:c7:
f4:c6:f3:41:f7:c0:4b:c3:d9:42:fa:42:36:cb:eb:
21:eb:a1:37:06:7b:81:51:f1:ea:b2:de:38:62:07:
ff:f7:df:5c:e8:0a:a8:3c:5e:b6:71:ec:a5:fc:e2:
e5:42:86:be:5f:a5:5c:d4:bc:db:44:ad:35:de:33:
1c:e8:b2:50:a2:6c:2c:53:0d:32:b5:65:54:41:2c:
04:cd:3d:08:5e:cb:7b:73:7f:8e:ea:da:e9:fa:a8:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:81:70:91:F6:1D:A2:88:1C:54:25:0D:C3:13:1F:F1:55:8D:F0
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:8b:82:61:4e:e4:f7:7b:c2:b8:5d:0c:13:b7:00:74:c1:
47:28:74:fc:d4:84:98:80:0e:d9:ff:e1:de:d7:0a:b3:e0:88:
4c:60:65:56:15:6d:cc:ea:a7:73:1f:58:8d:cb:f8:7d:75:7a:
bc:d0:dc:ab:f4:56:ce:ff:1d:83:bf:65:0e:ec:f1:0d:c7:cb:
ee:e9:e5:60:40:92:80:e4:98:5d:78:ba:97:fb:03:59:af:e9:
bb:7e:41:e0:58:9b:5a:62:ba:cd:c3:4d:1d:88:95:e1:11:c6:
a9:a4:ca:e2:44:2e:b5:0e:18:02:42:5b:24:24:44:b0:79:40:
7e:ed:1b:e7:c8:29:70:1d:4c:00:ff:a5:95:c0:11:e2:ae:fa:
e2:ca:86:47:93:dd:b7:9e:c2:56:7f:e3:6b:e7:da:02:3c:90:
79:95:b2:e8:da:38:bb:8a:e3:fc:86:da:02:6a:b6:47:8b:7b:
53:a6:61:ab:6f:57:29:35:be:a1:a2:fa:3f:b2:36:4b:67:14:
59:97:f1:42:2e:29:2b:2f:7b:26:f7:17:ee:f5:55:f0:5f:76:
6b:ec:c0:5e:d5:39:85:41:c7:a4:d3:8f:95:75:00:68:27:0d:
9f:ee:aa:4f:91:bc:a5:0d:a1:45:4e:02:50:74:bb:50:f1:5f:
8d:0a:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:54 2025 by rpki-client