Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: WJIc9Q/PlhWkBUYc0OMoc7tqV6VP5D6h24ej3o1Jyak=
Subject key identifier: C1:F7:C1:2A:31:96:93:CF:EF:56:9D:79:AC:E4:26:78:33:AC:20:6D
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019849650EABA690E6B15561B7C2DB334731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: YGfuufQZj7DqQasUI2VQSk8yT3K1g63DOCTrFChYzdE=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0e:ab:a6:90:e6:b1:55:61:b7:c2:db:33:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=c1f7c12a319693cfef569d79ace4267833ac206d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:29:82:7e:ed:50:2a:63:18:37:7d:37:c5:
4a:b3:bb:38:70:cc:4b:bf:4a:7c:50:f9:03:62:23:
2d:4f:0b:8d:01:91:55:fc:bc:a1:6c:2b:f5:c6:f2:
fb:1e:d8:5b:9b:29:99:27:1a:22:6d:d4:23:99:7d:
a7:79:59:94:1c:77:a6:4e:75:0b:25:5b:5b:e4:36:
36:b1:9b:94:3b:6c:f9:7d:08:4f:27:8b:25:86:cc:
2f:52:89:18:7f:21:8f:62:e2:d8:a5:5c:bc:86:40:
30:68:b1:1a:41:b9:f7:5b:d8:6e:3f:c3:07:bf:87:
11:59:e9:f3:ff:60:8c:cb:23:e9:e1:02:66:fb:98:
09:22:07:d8:83:ca:d0:9e:ab:be:43:3c:76:48:97:
d7:a3:a2:f7:51:4d:58:20:95:36:73:a1:e4:ef:4a:
ea:b7:41:5a:b9:3d:2b:bc:77:13:9f:c9:c7:51:e1:
e3:68:20:bb:60:ce:22:e4:c2:eb:3e:ca:64:c1:ba:
10:77:0e:c2:29:fc:6d:8b:94:2c:3e:53:10:00:cd:
42:3e:94:98:df:c3:23:c4:c3:4d:10:33:42:53:04:
2d:19:9c:d4:c1:ea:d7:a2:2d:ca:94:21:d4:de:89:
42:84:96:08:55:cb:4a:e5:5f:75:7b:65:a8:2b:9d:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:C1:2A:31:96:93:CF:EF:56:9D:79:AC:E4:26:78:33:AC:20:6D
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:7a:cb:db:b8:76:8a:4d:59:8c:b0:a6:64:48:98:76:bd:
2c:6d:23:9d:7e:4a:36:e2:54:7e:76:45:42:c5:54:73:71:0e:
ab:f3:12:cf:b5:89:f7:03:0c:85:f0:5f:45:af:4b:2e:e8:0d:
2a:31:c1:ba:3b:04:b6:ea:48:74:20:88:1f:07:57:42:73:16:
bf:f2:b3:4e:77:34:d9:c2:cb:58:96:63:1e:d3:74:99:cf:76:
a5:51:24:07:5f:c7:fc:77:77:f8:91:49:45:41:35:c3:5d:45:
3b:7a:c3:70:8f:55:76:6a:5a:88:ee:5a:f6:8c:99:c4:59:45:
ca:7d:33:7c:f6:71:a3:14:e6:67:4d:9e:5d:82:68:3e:38:9f:
58:84:f4:da:34:cf:a4:b0:41:72:a6:f6:6f:0a:2f:0c:01:a5:
43:21:f1:72:45:8c:25:ae:ce:80:ad:6f:52:06:08:52:97:cf:
28:06:b1:b6:2c:3e:15:8b:e9:37:b2:c3:ed:64:40:25:7f:c2:
4f:99:11:88:7c:e7:a9:32:4a:aa:a7:ed:84:b6:0e:23:f9:bc:
fc:18:a5:66:f8:19:c2:25:3c:46:b7:e4:0b:86:d5:6d:74:90:
76:0d:f0:c5:73:fe:b5:07:91:c7:88:88:55:71:11:4b:2b:45:
11:6b:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:45:30 2025 by rpki-client