Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: Fj6Buuz7cES67iAM3MimL/fLxRtSMQkdzqkEzjjXTxA=
Subject key identifier: BA:97:05:27:8F:8D:28:A1:59:A4:1A:2E:01:FB:C7:88:77:46:B0:3C
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019827479D89645F867090B29C4B9BE0B54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 1038
Signing time: Sun 20 Jul 2025 10:01:01 +0000
Manifest this update: Sun 20 Jul 2025 10:01:01 +0000
Manifest next update: Mon 21 Jul 2025 10:01:01 +0000
Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: /mly3nzL8dI1Wg+nlu4pZGeRh/LPf+/8dB6926ZI694=)
3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:9d:89:64:5f:86:70:90:b2:9c:4b:9b:e0:b5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jul 20 10:01:01 2025 GMT
Not After : Jul 21 10:01:01 2025 GMT
Subject: CN=ba9705278f8d28a159a41a2e01fbc7887746b03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:ff:90:be:39:0f:f3:e0:c7:df:b3:56:ad:
73:f3:a4:f5:2a:b5:c4:0f:d2:fb:47:ef:2a:5f:cf:
b5:74:bb:05:16:85:1e:ae:91:ed:16:57:35:93:24:
89:44:22:97:02:f9:21:29:5f:6a:06:4a:02:ba:f7:
ba:3b:7c:21:14:74:28:1d:75:b2:ab:6a:2a:b5:a4:
f6:86:35:d0:c9:26:bb:6b:a0:56:10:bc:cf:14:a9:
b6:c7:44:0e:c0:22:bf:3a:0e:9e:24:e5:2a:d3:e4:
03:97:60:05:76:1a:ec:2b:2f:5e:74:ef:b0:05:e5:
e3:44:c3:fb:35:78:f4:88:33:33:74:12:5b:73:25:
07:18:f7:eb:f8:3e:a3:4b:b7:fc:10:f7:da:ab:0a:
18:f2:82:a4:55:1a:e5:01:01:ae:54:ae:66:5d:ff:
ba:62:27:e2:58:db:15:76:8f:e3:f8:86:20:a9:2c:
cc:7e:89:29:2c:af:ea:30:aa:3f:97:de:71:75:bc:
77:7f:f6:19:79:b8:6a:c9:43:ac:48:99:8b:59:cc:
77:90:e2:0e:1c:0e:98:c8:93:36:89:88:c3:d4:93:
a0:12:25:59:9d:a6:97:54:ab:36:e6:e7:c9:d2:d8:
25:d1:2c:d4:67:6f:21:45:df:c5:10:a7:4e:db:c7:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:05:27:8F:8D:28:A1:59:A4:1A:2E:01:FB:C7:88:77:46:B0:3C
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:43:2f:53:f0:d7:95:39:ff:29:63:62:59:b6:96:34:75:39:
c8:14:fe:16:55:48:11:bb:a4:72:72:07:68:e1:e5:62:f9:6b:
26:c5:aa:d7:57:7d:4a:e3:3f:85:ec:7f:51:6f:ad:6f:54:ef:
18:ad:42:34:8a:08:99:fa:a3:5f:56:05:34:c7:c1:b8:76:26:
20:fb:03:51:de:6c:0e:5b:b5:c1:aa:8a:67:1d:a0:45:4c:d3:
18:bc:e0:41:49:f9:09:bd:c5:97:b5:25:5d:c1:e8:bf:26:8f:
27:c3:73:ac:c1:88:f4:16:7e:fc:37:43:04:49:69:a1:1b:55:
24:6a:d4:78:ae:68:85:fb:5c:0b:20:c8:19:0a:d4:00:23:23:
45:d8:9d:45:a8:ea:37:42:0e:af:88:07:be:2b:e4:93:d0:be:
ff:92:cf:1c:5d:4e:cd:d6:45:d1:1d:d5:8f:73:95:04:3f:02:
c0:a1:96:44:b0:8f:34:3a:b8:91:8c:1f:3c:d0:c3:52:7e:2e:
f9:66:da:26:95:d4:7b:bd:c3:4a:25:38:e6:bc:8a:1c:22:1c:
78:1b:b5:aa:6f:5c:a9:2a:80:98:f6:71:4b:92:5c:b1:cd:74:
05:5a:b7:16:09:3e:97:ce:e6:a0:17:41:72:c4:68:3f:e8:a0:
d1:08:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:50 2025 by rpki-client