Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier: F6znWBr5YHCRRpeMInaUfHlJoIjMDqfjraNkR/ji44Y=
Subject key identifier: EB:CD:37:00:0B:C5:10:76:B8:D4:9D:85:59:C6:D8:F4:34:E6:10:F7
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 01984A414280CC6A71B5B15ECE48762DF1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 05:00:47 +0000
Manifest this update: Sun 27 Jul 2025 05:00:47 +0000
Manifest next update: Mon 28 Jul 2025 05:00:47 +0000
Files and hashes: 1: 4yNv1AmPL0eETqaVsG5JTwwRl3A.roa (hash: eTktrEnbGg3fLOei98QUmpv9AxL2dhvENDzZ4cYi6lk=)
2: AbDDieAjiM47QPI38uwxhNFokMk.roa (hash: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=)
3: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: pLWnQb3Pl3iwnrbxuOVAk9h3HyznXoQGUaKp/s6InTA=)
4: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (hash: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=)
5: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (hash: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:42:80:cc:6a:71:b5:b1:5e:ce:48:76:2d:f1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jul 27 05:00:47 2025 GMT
Not After : Jul 28 05:00:47 2025 GMT
Subject: CN=ebcd37000bc51076b8d49d8559c6d8f434e610f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:b4:81:10:bc:51:04:91:25:e5:eb:3e:7a:
39:a7:1f:b5:0d:80:7d:77:30:79:a4:a1:29:2e:42:
7a:9c:91:be:53:24:95:d4:79:48:be:db:4b:c4:7b:
01:73:39:fa:f1:00:72:f6:df:38:dd:0a:95:13:84:
eb:cc:18:a1:f0:65:77:14:d2:59:b2:9c:81:91:34:
a5:a9:45:8f:9f:2d:c7:6c:06:21:b2:8c:89:68:eb:
24:1e:3d:ee:42:14:54:58:20:30:79:34:82:24:da:
dd:ae:92:9c:4d:21:3f:cd:1b:85:d5:60:84:d3:1b:
ee:cd:ea:7e:7b:9f:d8:df:83:7b:9c:44:8c:94:e1:
a9:05:53:bd:89:e0:5f:94:85:b1:67:99:ba:95:33:
b9:1a:13:7c:1d:2d:21:35:d8:c0:2a:b0:76:c5:28:
25:17:91:c2:8c:c5:29:be:c8:d9:2a:f0:21:93:52:
2f:4f:3c:78:fd:02:37:d7:a6:74:95:65:d4:31:6d:
b5:f6:58:08:26:c5:d1:f5:1c:5b:ba:e4:e8:10:57:
c8:b0:26:95:ec:f9:e8:71:01:87:07:78:95:58:0a:
76:df:02:76:99:8c:b3:99:a2:54:d3:79:53:49:9a:
b0:a8:fe:4d:6a:67:f1:66:eb:70:b4:68:70:d4:63:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:37:00:0B:C5:10:76:B8:D4:9D:85:59:C6:D8:F4:34:E6:10:F7
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cd:4b:6a:37:8e:fe:c5:03:b7:a8:52:1f:84:ec:23:17:d9:
dc:92:54:45:4a:0b:33:26:d9:eb:38:d1:01:5e:95:64:4c:6e:
68:7e:49:f6:33:0a:b4:38:4f:6e:5d:5f:79:ee:67:dc:0a:0d:
17:f3:9b:2b:43:4c:d8:18:d1:fd:e2:fd:ad:36:f5:be:62:42:
f4:d5:8c:ec:e1:fd:0e:96:80:55:c3:05:4c:b9:28:66:2e:bb:
2b:b7:b3:28:76:88:20:f2:ac:50:e1:9d:d6:35:ed:67:48:8b:
c2:e4:a2:02:8d:88:f7:43:0a:8a:af:22:40:92:50:bc:d9:12:
0b:0c:1e:e6:be:b9:72:bb:12:f1:c6:76:03:fe:dd:60:d1:79:
7f:50:12:5c:47:d5:3c:d4:16:d1:ef:6c:bb:c3:e1:d2:88:1b:
3b:7c:06:3f:18:c2:06:e6:2d:b5:45:ad:ad:d2:a8:01:3d:cf:
85:9a:aa:59:b1:75:d5:34:f0:98:7a:64:3a:d0:ee:0d:25:49:
9f:6b:d6:85:2f:0a:8b:5a:5c:3d:b0:9d:04:86:4b:71:1d:a8:
a3:59:fd:08:de:e5:60:29:00:a0:20:e1:68:5f:5c:f5:a1:44:
30:60:5b:4d:1c:59:a8:cd:03:03:df:ca:d6:86:74:e8:87:de:
60:73:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:43 2025 by rpki-client