Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: yo0Np8rlvjUrk7rd8nEvW8teD9Mw/+N2dZV0HgeOyUg=
Subject key identifier: FF:1D:AB:AC:3C:48:1A:0E:04:F1:E1:D1:FC:93:F7:3E:F5:AB:35:94
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 01984A40ECD7C87B89F6ECA840B612E01920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 05:00:25 +0000
Manifest this update: Sun 27 Jul 2025 05:00:25 +0000
Manifest next update: Mon 28 Jul 2025 05:00:25 +0000
Files and hashes: 1: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: FKEfXawpYOF16gnfrB/Ys8cwjCEnRuM+HF8+BMdjI1A=)
2: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (hash: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ec:d7:c8:7b:89:f6:ec:a8:40:b6:12:e0:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Jul 27 05:00:25 2025 GMT
Not After : Jul 28 05:00:25 2025 GMT
Subject: CN=ff1dabac3c481a0e04f1e1d1fc93f73ef5ab3594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:43:6d:1a:4a:55:11:79:6a:80:a3:b5:9b:
28:b6:d7:1d:2c:88:ef:c0:53:17:c8:10:0f:4a:a6:
e0:4c:06:4c:97:e4:87:3b:d2:40:ee:1b:49:55:8b:
fc:b1:cb:8c:6f:1f:f9:59:cd:b8:0a:9c:00:da:15:
d7:92:fe:8b:37:fd:92:4c:ba:89:6e:77:4e:0c:43:
28:a6:f3:9d:19:4c:41:43:9c:fc:ba:fc:24:01:e5:
58:9f:da:77:5e:e1:7f:26:12:21:9b:55:ca:cc:fe:
e0:61:e9:f8:96:c8:a9:1c:bb:d7:e7:57:3e:75:2f:
93:24:97:50:26:aa:79:8c:03:ee:c7:ba:59:9f:bc:
b9:61:3a:b0:24:0f:a4:7b:b1:e5:d6:7a:a0:08:a7:
fa:3c:42:51:b9:a0:e5:b5:ac:5f:c6:31:ad:4b:40:
b2:52:35:f8:74:b9:5e:6b:59:7b:2a:c2:0e:7e:73:
e2:3d:aa:72:d5:24:44:86:f9:c6:db:33:52:23:07:
43:a3:30:49:ac:ca:95:f3:64:cf:6b:5c:b7:a8:92:
7d:fc:77:ac:e5:01:c9:4d:9d:88:59:18:e3:87:22:
5d:f6:2d:03:aa:1d:a3:9a:a5:03:ab:63:33:14:ec:
06:11:12:0c:35:f0:dd:61:51:9f:d8:4d:15:8d:e7:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1D:AB:AC:3C:48:1A:0E:04:F1:E1:D1:FC:93:F7:3E:F5:AB:35:94
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:23:97:e1:d0:0b:8c:29:af:e6:e1:ee:b4:3d:a0:bd:73:d5:
54:2d:6a:9e:f3:d9:08:fa:d0:04:d2:be:5f:c2:0d:43:70:d9:
5a:c2:83:19:a4:19:ea:67:38:d6:ca:06:b4:bc:17:1c:27:08:
7d:8b:1a:93:87:9d:9c:0c:de:0a:ae:1a:b4:13:0b:06:55:ad:
01:97:25:ed:fc:cd:cd:eb:85:c0:f1:09:b0:57:ba:7d:7c:70:
29:3a:ed:e2:c9:18:23:92:ff:82:09:3b:82:0b:24:a4:ce:51:
77:fb:f4:63:8c:3a:d8:d2:17:d3:a5:f9:47:c7:d1:fd:8e:fd:
b7:00:34:e6:40:cb:9b:4c:f0:66:1e:38:2d:5f:6e:13:c9:db:
b9:72:5a:b5:24:35:f6:79:e0:0b:5e:94:3b:f8:47:44:5c:35:
c4:8d:07:50:7d:75:1f:41:b9:dd:7b:cd:a1:96:f5:14:ba:a9:
b1:01:de:6d:ff:ff:49:67:3a:40:1a:15:cd:6d:55:b5:02:2f:
0a:24:61:0d:e4:d2:b9:bf:f3:03:91:71:4b:db:ff:3f:fc:9d:
92:95:d4:3e:cb:96:c4:6d:6b:a5:3c:7c:2b:74:36:05:94:f0:
ea:ae:99:80:75:1e:b1:a1:6d:fe:4c:fb:77:e6:40:07:5d:c3:
7a:dd:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:03 2025 by rpki-client