Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: GuTW6lCCSQ7+y+kUGCp92QQ6FDVWzDqLJr74UsZ/+5w=
Subject key identifier: 63:9B:41:77:27:CD:41:9A:BB:DE:19:8A:FA:17:11:D9:C5:A8:88:0A
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 0198586AD71C3FA8DB4B0D45CE56D693FE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 066A
Signing time: Tue 29 Jul 2025 23:00:53 +0000
Manifest this update: Tue 29 Jul 2025 23:00:53 +0000
Manifest next update: Wed 30 Jul 2025 23:00:53 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: 34zn480gJrdkct2k54odYa+L/ADwSHS6XGvXyxXvYR0=)
2: ieIY7b0KhvQU4QgMPfI50NN4QnY.roa (hash: 5XIl/Vpt8manbA7AG4mG7L9mNTT0fdofSZrC08n/ke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:6a:d7:1c:3f:a8:db:4b:0d:45:ce:56:d6:93:fe:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Jul 29 23:00:53 2025 GMT
Not After : Jul 30 23:00:53 2025 GMT
Subject: CN=639b417727cd419abbde198afa1711d9c5a8880a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:de:27:36:47:cd:05:cd:7b:84:c7:e1:66:
ba:2d:0f:ef:e6:c5:ec:c0:e6:57:0b:09:f3:3e:5c:
49:bd:a3:ae:cd:62:8a:23:01:e3:4f:c6:13:10:f6:
04:5d:d1:92:f4:bd:79:7f:05:07:a6:f1:2c:41:8d:
19:50:c5:4f:ab:0b:94:ea:6a:e8:a1:c0:ad:1b:a8:
62:be:54:4a:28:f3:75:31:07:cd:59:d6:3c:dc:19:
26:69:bd:88:64:c5:92:f2:11:4e:68:08:a5:84:1c:
a1:3f:a1:0c:82:69:55:0f:22:06:29:a6:27:8b:a7:
20:69:8f:02:73:96:a0:96:ac:ac:a3:87:6e:c7:d6:
7a:4c:0a:d9:dd:20:91:08:b7:ed:df:08:d8:f9:a1:
cd:6e:c7:49:16:43:75:3c:b4:ba:b7:89:4e:b6:3c:
9a:b4:1a:25:d7:84:68:8a:f9:57:57:24:6f:14:89:
c7:da:9f:fd:3a:5e:21:cd:39:92:c5:46:00:bd:88:
d6:12:a3:bb:c0:5f:98:86:c1:a1:22:d5:c5:aa:40:
b7:59:3e:92:91:29:30:0d:b4:fc:6e:4b:64:c1:02:
51:1b:fb:cd:04:3b:e7:40:80:d9:a2:b5:25:a0:96:
89:59:bd:1f:ca:37:d2:3e:cd:0b:f0:a9:99:be:9c:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9B:41:77:27:CD:41:9A:BB:DE:19:8A:FA:17:11:D9:C5:A8:88:0A
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:16:7c:33:b1:2e:0f:ed:1a:67:3b:c8:58:52:1e:dd:79:68:
77:b5:2d:9d:5c:e8:e0:89:7e:19:56:f1:a4:eb:44:a7:14:9d:
15:5e:aa:ef:e7:2e:be:f7:97:f0:aa:9f:8e:25:f1:5b:4b:64:
94:58:a5:e9:84:fb:d2:c8:a4:87:df:91:58:b5:d3:32:73:8a:
e0:04:7d:6a:16:61:f0:4c:22:e5:6d:f1:0d:50:2d:43:a6:38:
20:1a:20:b3:5e:74:72:93:72:68:6f:cf:2b:61:03:f5:92:22:
82:01:36:4d:ea:c5:17:55:d5:f6:57:30:38:5f:f3:8a:33:d6:
dd:98:9f:f4:ee:a1:fe:f7:46:39:ee:5c:55:b8:ad:03:f7:7d:
bf:74:52:3a:14:45:57:7b:d3:f4:0b:79:56:3c:a2:62:93:5a:
f8:dd:c4:13:f6:b1:bd:2e:fb:18:19:0f:37:d5:a5:a1:eb:72:
d9:85:fb:7d:d6:37:5a:ed:39:2d:a9:7f:47:8e:d2:79:c4:25:
35:9d:61:41:50:2c:f9:56:00:58:cd:7f:1c:3a:e9:86:26:8f:
75:2a:7b:26:b7:40:2f:27:72:78:e8:58:0f:6e:ec:74:cc:f0:
b7:6d:db:89:a4:7e:0c:03:88:fc:aa:d0:26:72:75:72:2b:64:
9e:c4:b0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 06:27:36 2025 by rpki-client