Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: 0K520W5SWzSClhyTgKVHGJJp+JWCWEb0+O3n3lx5CCs=
Subject key identifier: 5C:27:DE:70:46:DD:C8:F1:D5:26:AF:CE:5C:A0:E9:DA:BB:E2:DD:4B
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 019848897F7796BBEBC1AD8E59FE7C3682C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 03D1
Signing time: Sat 26 Jul 2025 21:00:27 +0000
Manifest this update: Sat 26 Jul 2025 21:00:27 +0000
Manifest next update: Sun 27 Jul 2025 21:00:27 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: DW+S+W7X2MYD8qzT//PTTUxRG7yntum6hh/JBznm2dQ=)
2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:7f:77:96:bb:eb:c1:ad:8e:59:fe:7c:36:82:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Jul 26 21:00:27 2025 GMT
Not After : Jul 27 21:00:27 2025 GMT
Subject: CN=5c27de7046ddc8f1d526afce5ca0e9dabbe2dd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:b1:03:73:6e:2b:60:28:e8:2e:e9:c1:66:
ed:ec:1b:6c:81:e7:8e:dc:c9:b7:41:95:fe:67:88:
a8:7d:f8:94:76:49:c3:f4:67:db:6d:39:f1:bf:0e:
2d:06:08:73:11:51:9b:a1:6b:94:71:0e:90:d3:71:
1c:fb:ae:d3:dc:7e:e9:c8:eb:62:75:a9:ab:9e:26:
17:39:fd:aa:58:95:72:84:84:8d:16:5e:4a:0e:4c:
d4:32:1f:2b:f4:bf:c0:04:37:c3:7c:e0:34:86:22:
df:0a:04:25:52:2d:0a:da:bd:9b:5d:e7:7b:73:bf:
86:2d:64:8d:b3:d2:ce:01:79:c3:17:47:01:4b:9e:
85:cc:42:49:17:b6:64:20:f8:c4:a3:df:12:8b:3b:
81:d7:f7:cc:f4:b9:2b:ca:db:02:97:92:96:bf:07:
53:ce:a4:81:d1:d3:96:b4:bd:ac:1e:f6:b8:7a:6a:
71:8b:17:8a:75:ee:5d:ab:7e:a0:99:bc:a6:49:3f:
f3:1c:dd:51:18:13:8e:a9:4d:73:58:4e:22:a0:86:
59:80:85:7e:c2:63:0d:3f:d1:f8:4c:1b:98:36:73:
83:61:c3:f4:aa:05:41:4a:3a:d8:03:25:df:66:c2:
47:65:35:a6:02:88:7f:1c:3a:de:22:f1:0f:f4:aa:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:DE:70:46:DD:C8:F1:D5:26:AF:CE:5C:A0:E9:DA:BB:E2:DD:4B
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ab:0a:27:6f:fd:18:3a:31:17:b1:92:9f:3e:4f:e7:02:03:
23:b6:b5:5b:2f:fc:33:b2:a5:b0:a5:83:d3:5d:6a:78:ff:ff:
f8:84:f4:34:f2:28:05:47:f6:59:66:bd:c4:4b:08:33:22:1f:
c7:2b:b7:b5:72:9f:13:c5:a8:c2:51:88:c4:ae:3a:3a:ee:ff:
b9:e6:94:6f:1d:70:0c:d3:67:23:23:94:fe:ef:54:d3:3c:e4:
1b:4d:fc:0b:b1:7c:98:64:41:b3:be:16:16:5d:3a:3c:38:d7:
97:0e:a6:64:4c:c1:c9:d5:50:dd:f1:22:c9:c3:d0:45:31:2d:
f2:bb:76:07:df:9a:84:ac:dd:02:a0:94:95:42:12:e0:b1:70:
84:73:23:39:97:e9:f5:88:07:26:3d:2d:2d:5c:1c:f6:88:a1:
4f:d4:3a:d5:e0:e3:b0:1c:4f:44:f0:06:3b:55:f7:d5:4f:e5:
cb:8c:a7:c9:ab:28:51:55:e2:3b:64:8c:e3:45:20:01:c7:87:
8f:13:22:b3:da:b6:80:5a:4e:bc:45:8e:23:1d:2a:6a:05:98:
76:60:ab:53:ea:33:7f:d9:8c:1c:a7:7d:f3:77:6a:9c:18:6b:
22:63:e2:ff:b0:b3:7f:50:50:cf:e3:a5:4d:e9:87:b4:0f:bb:
fd:f8:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:01:32 2025 by rpki-client