Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: cJwoc8A6ZPDQ1GUZ8TgXBf8CvwGV+v0cf/G4OrUzsqY=
Subject key identifier: F3:E5:E0:8A:7D:1D:CB:9C:78:52:27:AD:B9:1B:7D:AE:43:8F:89:DF
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 01984C9D56B048F89F3538AEE6E494FEA55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 16:00:36 +0000
Manifest this update: Sun 27 Jul 2025 16:00:36 +0000
Manifest next update: Mon 28 Jul 2025 16:00:36 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: 5wD/szpuFqSpFscsSThWP57xVbJ5odSzMOtpNdzMOgs=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:56:b0:48:f8:9f:35:38:ae:e6:e4:94:fe:a5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Jul 27 16:00:36 2025 GMT
Not After : Jul 28 16:00:36 2025 GMT
Subject: CN=f3e5e08a7d1dcb9c785227adb91b7dae438f89df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:3a:3d:ae:46:d7:6b:53:4d:9e:65:19:3c:
5e:f8:06:64:9b:62:dd:c6:14:79:34:d9:42:1c:f0:
33:ea:ce:20:78:6c:fb:24:c7:be:9d:10:95:4e:68:
a9:e7:44:60:e5:da:aa:4d:fd:31:5c:01:ab:d1:f8:
42:80:63:39:93:37:4b:8a:a0:a0:80:ee:57:53:d7:
28:53:4b:57:c1:e0:65:24:7c:8b:e9:98:1c:0f:8d:
b7:97:f8:2c:23:d4:ac:a9:41:b2:06:af:ed:b2:6e:
7d:6c:ea:85:52:d5:e9:80:95:86:5e:35:19:a6:90:
6d:e6:03:2d:92:ae:9d:38:64:eb:84:11:77:3d:c9:
a8:b1:9c:4e:e6:7c:b3:d6:e4:52:c9:43:ae:c2:51:
17:98:f3:0e:a7:f4:83:ce:08:dd:80:b3:47:04:54:
01:42:c9:b2:75:a9:f4:43:15:3e:f0:a6:7f:a1:d1:
24:fc:66:cd:9e:43:78:1a:37:7b:fc:c7:29:3e:13:
5f:f3:d0:2a:3e:75:75:c0:5a:31:16:17:87:ba:37:
9f:97:96:b8:65:71:56:c9:72:20:28:61:f0:d0:7c:
3d:4a:80:01:41:87:07:d2:ed:4f:e1:32:6a:e6:38:
63:95:82:ab:1f:f7:bc:65:10:75:18:c1:4e:03:b7:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:E0:8A:7D:1D:CB:9C:78:52:27:AD:B9:1B:7D:AE:43:8F:89:DF
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ce:e7:36:13:92:0b:b8:38:d2:25:54:d0:f7:19:bf:7e:5e:
2e:2e:33:2d:b6:00:14:58:eb:20:83:74:38:5d:76:79:3d:b3:
8d:ba:22:80:02:b1:9c:82:98:c3:23:cc:a7:ab:78:76:73:e6:
bc:7b:3e:3a:cf:da:31:11:3a:93:13:70:1c:23:85:7b:2d:7e:
db:75:36:54:43:00:ad:41:1b:63:48:23:b0:2e:91:43:23:76:
28:0a:15:f0:0b:43:7b:de:9a:dc:99:c3:62:4b:d6:c5:45:20:
25:00:b3:11:d6:22:5a:92:8c:d6:da:c1:80:87:1b:7a:16:8f:
a7:04:61:0e:0b:a6:f2:bf:57:23:36:64:23:a8:4f:76:28:b9:
65:52:c4:40:aa:fa:a7:25:a7:e0:5b:ff:98:aa:c1:ab:b8:03:
62:09:29:c0:97:42:b1:39:0f:79:08:d3:9b:20:f3:c3:cc:18:
25:c7:ac:25:10:f2:c7:ee:41:b0:4b:e8:fc:88:6b:05:41:0b:
09:58:f7:bc:e4:d5:6d:72:e9:89:f6:5d:bb:5b:30:4d:90:f9:
4b:86:50:59:d3:e3:45:9e:8d:56:32:e0:58:73:46:80:66:ab:
17:08:a3:93:47:fe:81:ec:74:8a:7f:d1:b5:92:92:d2:8d:98:
06:4f:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 22:22:16 2025 by rpki-client