Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: Uze3ZzVib7i1NfKFSlnKJs/ZzJ3kVQK5lIj/aNbGdtU=
Subject key identifier: 60:3A:66:84:A6:89:7C:5F:93:B7:FD:FB:52:09:C8:05:69:71:DA:A2
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 01984AAED7CB5EAA822425547F9CF9E88EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 07:00:29 +0000
Manifest this update: Sun 27 Jul 2025 07:00:29 +0000
Manifest next update: Mon 28 Jul 2025 07:00:29 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: DIhY8Er5+2Y/UxoMeviAvCfYS0Ux79EHMyd4lTtKmgY=)
2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d7:cb:5e:aa:82:24:25:54:7f:9c:f9:e8:8e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Jul 27 07:00:29 2025 GMT
Not After : Jul 28 07:00:29 2025 GMT
Subject: CN=603a6684a6897c5f93b7fdfb5209c8056971daa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:6d:a5:d8:7a:20:8d:f7:c4:cb:b9:bd:ee:
74:6d:e4:fc:e2:02:ca:c4:91:b6:0a:f7:3c:2b:bc:
50:d4:44:8f:8d:4e:03:ad:d8:c6:df:01:00:5a:a8:
a3:37:a7:85:b8:67:87:6e:ad:f1:99:96:4c:8c:8b:
63:c0:69:67:7d:55:9b:15:c5:3c:80:44:a1:3c:92:
db:c7:88:2a:9d:51:b4:46:31:f1:fc:1c:9b:21:0d:
02:d2:d6:79:19:1a:d9:fd:a6:38:11:48:ab:48:21:
60:85:20:be:7e:6a:80:ba:0e:42:a6:2a:92:58:6f:
c2:39:82:29:08:04:7e:76:37:b9:88:10:48:54:46:
71:31:f9:d7:fe:c4:f4:a3:24:1a:c4:59:ea:a1:08:
ca:5f:fe:ef:57:f1:50:e2:7f:e3:3d:4f:e3:10:1a:
78:f9:e2:8b:d1:7c:c5:12:e3:c2:26:81:57:99:32:
a0:ef:ec:fa:ea:e5:e6:92:a0:18:76:d0:d3:96:bb:
70:a1:d1:3e:6d:0f:fc:0f:03:08:03:2c:6f:b5:47:
40:e0:fc:23:33:9b:07:36:eb:f3:4f:3b:3a:9a:5d:
c8:94:92:01:83:83:a1:22:5d:92:75:fd:89:96:cd:
e2:ad:53:93:90:8a:2f:59:89:ad:48:d9:e8:e5:a0:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:66:84:A6:89:7C:5F:93:B7:FD:FB:52:09:C8:05:69:71:DA:A2
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:41:48:de:73:92:8d:49:dc:38:cf:28:c6:1c:c8:da:5d:
48:ce:d2:aa:09:8d:cb:38:ed:87:d6:da:a2:7f:bc:95:e4:e9:
38:bf:58:a3:aa:4f:9f:90:32:dc:79:30:39:a4:2e:e9:e1:05:
7a:0f:a3:69:2a:39:24:b6:2a:59:41:0b:54:80:29:08:e9:3a:
14:cf:69:26:9a:1c:4b:1b:e5:77:0d:a4:c4:82:64:c9:91:d5:
0d:88:6a:83:63:5e:5a:78:8f:a7:f3:22:ab:cb:d3:ae:95:3f:
14:99:bc:f1:06:9d:87:d3:75:86:a5:ad:3c:6e:c5:bc:a8:90:
dc:3c:33:0b:fc:23:9e:52:3f:a7:19:12:41:00:01:f7:1e:03:
e2:81:16:e6:24:65:26:3b:bf:99:a0:ec:da:7c:d0:ab:7d:57:
2e:28:33:9d:0c:27:aa:2c:db:e0:06:49:73:b4:be:d3:3a:cc:
cb:0c:78:6f:65:bf:12:c1:3b:13:9e:98:84:45:7c:ba:ee:c1:
58:7e:33:96:bf:e3:20:a5:ef:aa:ca:e1:a1:d0:12:d6:ba:69:
6d:49:ec:87:17:71:79:ad:79:1a:7f:5b:97:ad:28:c0:15:35:
e3:48:a6:9d:54:e1:88:b4:18:c7:a0:a0:7f:6d:d2:3a:06:6b:
b6:c9:96:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:50 2025 by rpki-client