Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: B2vF71CWRYXi7fPB3Oz4Xnxpw1+c+BfdTgz0KPoBSss=
Subject key identifier: CB:1C:89:96:6E:71:3E:88:4E:03:F3:13:C0:FE:1B:9D:65:EB:B2:91
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 0198481B5BA6CF0BA30F688E0B03EFB6AC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 19:00:09 +0000
Manifest this update: Sat 26 Jul 2025 19:00:09 +0000
Manifest next update: Sun 27 Jul 2025 19:00:09 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: v33vcfK26AVVnWa9ruqz8ntl5cYvkNzrCLv8dqDbzp8=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:5b:a6:cf:0b:a3:0f:68:8e:0b:03:ef:b6:ac:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Jul 26 19:00:09 2025 GMT
Not After : Jul 27 19:00:09 2025 GMT
Subject: CN=cb1c89966e713e884e03f313c0fe1b9d65ebb291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:93:24:92:b8:65:6b:d2:d0:62:c4:32:08:
6b:6e:59:a3:5f:61:c4:44:14:c8:83:02:24:ce:65:
8e:e1:c6:ed:2b:cf:84:49:85:c2:ef:35:97:ec:9f:
fb:ed:ae:f0:fc:ce:37:f0:7e:9e:61:b9:8e:8b:90:
ce:63:f6:a5:c3:f7:15:a0:ed:58:fe:e2:12:f2:a6:
05:aa:19:8d:c4:9d:bd:17:4c:15:1c:d5:8d:2e:cb:
3f:0c:92:66:d8:84:7b:62:81:52:a5:62:d7:ba:d1:
69:d5:36:b1:50:b8:73:54:85:cf:df:bf:33:13:22:
76:4e:0e:7b:42:73:72:86:0a:ec:06:60:fd:85:45:
44:8f:6c:34:c8:e2:38:4e:1d:e5:be:ab:1a:39:72:
17:69:5c:b2:b1:e3:c6:07:35:92:dc:e2:a7:ba:44:
c1:d0:79:0b:40:ef:4a:40:11:46:da:8a:83:68:24:
9f:f1:29:cb:cc:7f:91:5e:68:54:63:ef:57:5b:ce:
3f:58:b8:77:e5:70:45:7d:d9:49:b5:24:06:81:51:
cb:47:12:4a:69:86:35:39:a5:2d:29:f7:ad:ab:88:
3b:37:28:eb:c0:bc:1b:69:dd:92:0b:04:96:6b:22:
d0:9a:b5:1b:c0:fe:8f:0c:c8:fb:00:2e:8b:98:ce:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1C:89:96:6E:71:3E:88:4E:03:F3:13:C0:FE:1B:9D:65:EB:B2:91
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3b:b0:78:fb:f0:6d:73:a1:db:21:45:15:a3:e2:6f:21:5f:
28:82:0b:93:39:31:84:76:45:a9:a4:4e:cc:6c:a3:03:b7:e4:
0b:58:4e:fe:ac:fc:74:32:e3:ee:2f:80:93:79:29:bd:36:9a:
7a:cb:e3:f0:ba:d5:67:af:2c:90:64:00:48:a2:f4:44:01:5c:
2e:64:23:bb:39:cd:50:91:84:2a:d4:1f:62:3e:ea:55:f0:97:
c9:02:b4:9c:54:94:a7:8b:0b:6d:5a:8e:29:a9:20:24:8b:81:
fb:d0:e4:4f:f5:47:36:cd:f5:46:e6:42:65:31:47:ab:bb:d1:
54:d5:3f:6b:e2:31:56:94:d9:a6:2c:a5:4f:d1:2d:de:6a:44:
10:b8:be:22:17:88:33:24:c6:2c:5c:d1:b7:51:71:f9:5a:fb:
0a:ca:ae:c1:01:98:52:59:42:7a:3e:b2:fd:15:9a:08:3e:b7:
fd:dd:75:cf:a0:1b:f3:32:89:ef:25:72:81:68:a4:9d:3a:af:
85:d5:d8:83:e2:a5:79:fa:00:24:d3:4c:1a:c3:ed:7d:0a:30:
b3:1f:11:54:0e:06:c9:8c:c9:50:69:4c:55:90:12:c0:43:35:
61:6a:d8:8d:5f:a9:58:1f:bc:91:86:f5:79:26:61:1c:03:39:
bb:37:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:57:54 2025 by rpki-client