Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
File: 8QEB-_qGP-Reriv2uX4O_n7IMSU.mft (raw, json)
Hash identifier: gmaSTvvBpMU3vwFZVPykkP/BfEt6XhtEk/LT8gAybu8=
Subject key identifier: 5A:A3:8B:1C:43:31:C5:D5:8A:A9:19:D6:41:7D:76:B6:63:D8:20:AF
Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
Certificate issuer: /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Certificate serial: 019847ADCD394717C5CF2D72ECEA06011C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
Manifest number: 05AB
Signing time: Sat 26 Jul 2025 17:00:29 +0000
Manifest this update: Sat 26 Jul 2025 17:00:29 +0000
Manifest next update: Sun 27 Jul 2025 17:00:29 +0000
Files and hashes: 1: 1-_UwL6gJgWy3pN6NrkEbXBFBiRw.roa (hash: g97v9R+PoC4iu0w5rkLd1FzagNbwQyMIzICsh2OGkRc=)
2: 8QEB-_qGP-Reriv2uX4O_n7IMSU.crl (hash: v3JEzujJF9EE7qP+0EMmXmt0MPf7Z3w3IzOwc8pYTFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:cd:39:47:17:c5:cf:2d:72:ec:ea:06:01:1c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Validity
Not Before: Jul 26 17:00:29 2025 GMT
Not After : Jul 27 17:00:29 2025 GMT
Subject: CN=5aa38b1c4331c5d58aa919d6417d76b663d820af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:a9:b3:27:ad:a4:21:16:94:15:fc:0f:de:
0d:1e:78:af:91:52:dd:2e:ca:23:a0:7e:ea:87:32:
ad:ed:4a:16:88:38:0c:c6:7a:70:5f:e9:c2:2f:90:
e6:6e:0b:9e:f9:bd:62:a7:ae:78:22:09:b1:12:29:
5a:2a:b1:af:0a:92:a2:37:1b:68:ed:9d:8e:69:24:
17:01:71:98:3b:5e:97:20:31:ac:8d:35:8d:85:fb:
0e:0d:87:a8:56:9e:9f:4f:af:d5:a4:c6:58:ec:6c:
42:f9:38:c7:73:d9:17:10:39:b5:88:35:03:41:56:
b1:5c:4d:db:a0:11:92:10:93:cb:c8:d5:69:cf:e2:
4d:1b:3b:80:a2:0c:af:cd:78:27:3a:6b:64:47:b3:
0b:9e:f9:84:b3:14:77:79:95:3c:2b:90:2e:9d:7a:
de:99:a1:22:41:a4:74:ff:52:e3:07:d4:ea:3b:83:
42:06:79:09:47:7b:c3:13:f8:e3:a3:8c:bd:3a:c3:
d8:29:be:c2:f8:90:ff:37:aa:04:f6:8d:1f:67:0b:
b4:54:aa:26:67:4a:b4:52:93:46:5d:da:c9:a6:87:
b4:e5:b8:89:36:3d:9f:1c:de:4d:14:57:1e:bc:c4:
d4:78:ff:65:81:eb:58:68:93:e0:1a:5b:3c:d5:0c:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:8B:1C:43:31:C5:D5:8A:A9:19:D6:41:7D:76:B6:63:D8:20:AF
X509v3 Authority Key Identifier:
keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8f:30:57:68:76:2e:1f:d4:fc:8a:d7:88:06:7c:fd:e1:e6:
04:ad:83:80:6f:f6:a5:36:aa:7c:99:9d:06:49:f2:92:14:ef:
79:9e:aa:7c:a6:d1:a9:e5:bd:51:50:a0:f2:c0:c2:a1:cf:36:
99:a2:b5:e7:d1:06:71:67:05:eb:87:88:52:72:08:d2:81:6a:
bc:62:09:19:d0:66:73:79:aa:e2:79:18:a7:ee:a9:5c:cf:51:
ce:57:88:6b:93:3b:0f:f3:29:54:8d:28:ab:8a:50:16:d1:9f:
69:7b:2d:cb:cb:86:4d:17:6a:90:28:94:61:77:12:17:c9:0e:
ac:5b:58:c2:ea:5b:d9:08:4a:9c:6f:36:bf:3d:a5:64:5b:94:
e3:e4:70:6c:f7:61:4e:49:66:1d:2e:f7:8b:2b:ef:13:b4:e7:
b9:61:9d:a8:74:31:f0:fb:fd:38:99:49:5a:62:2f:c2:d9:ef:
9d:05:1a:47:df:6a:ee:81:92:a9:08:c0:b0:fc:f5:05:90:ed:
3f:c0:68:d3:0e:e5:10:d6:d6:e1:c1:05:88:f9:54:58:3f:38:
d6:81:87:35:11:df:72:a3:fa:13:ee:02:8d:b6:e7:f1:07:69:
b4:a2:0a:50:3e:3b:0e:ec:5c:c6:83:1e:53:fd:eb:e9:1f:01:
e5:69:fa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:21:14 2025 by rpki-client