Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: V8fjHn+iqNGJmE2msJUmdHIhZmorQTYKDgKKFgxcGTE=
Subject key identifier: DD:84:CD:8E:8C:84:32:B3:C6:4C:23:B2:85:C0:CC:35:42:DD:1A:87
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 01984965200C7EA18B870E1EABC23C5A16B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 01:00:20 +0000
Manifest this update: Sun 27 Jul 2025 01:00:20 +0000
Manifest next update: Mon 28 Jul 2025 01:00:20 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: brKg2vImy997DA7xnwiUj4Z1AhRsZ4j343nMY/IlbKA=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:20:0c:7e:a1:8b:87:0e:1e:ab:c2:3c:5a:16:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jul 27 01:00:20 2025 GMT
Not After : Jul 28 01:00:20 2025 GMT
Subject: CN=dd84cd8e8c8432b3c64c23b285c0cc3542dd1a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:03:55:46:a9:81:3c:21:a1:ed:67:4b:e8:
78:d6:e9:24:bb:ce:db:73:82:48:57:ab:04:44:5e:
bf:cf:60:27:c8:f8:59:7c:03:e3:93:15:3c:b1:84:
02:e2:7b:ca:61:14:d5:7f:4c:9c:ed:c9:bf:2b:c2:
b6:1f:6f:31:8f:93:d2:d7:dc:2f:1b:77:0b:6f:a2:
6d:e8:4b:93:82:a5:c4:bd:5b:6b:1e:cb:f4:a0:7c:
73:7d:45:07:2d:1b:f5:39:f1:5e:f1:1b:9a:9e:b9:
52:62:3a:e7:f9:2e:e8:dd:86:d6:13:66:77:35:14:
e7:45:64:19:2b:c4:63:e4:a1:22:cb:a4:52:cc:bd:
81:3c:69:d0:5e:c0:bd:a3:62:88:d8:73:12:d5:fd:
14:a0:16:4b:c6:92:d9:48:23:5b:03:a7:4d:a3:62:
9c:14:e3:cb:d2:fb:5c:52:8e:0a:30:85:48:14:bf:
ea:7d:4a:7d:18:0a:cf:a3:47:8e:fe:ec:68:6c:da:
ee:3c:b9:e7:bf:b1:8d:e3:1e:a2:60:2f:07:b3:ab:
3b:4c:f8:2b:e7:b0:ec:f4:2a:fe:75:df:89:a2:05:
22:bc:34:5e:1f:4a:29:fc:e0:ca:13:e0:9f:f7:43:
75:82:ec:6a:45:9a:3d:54:b4:21:af:5c:ff:bc:db:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:CD:8E:8C:84:32:B3:C6:4C:23:B2:85:C0:CC:35:42:DD:1A:87
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a8:f3:dd:6b:17:ad:c1:1c:0d:3f:75:ee:e8:3a:e8:0c:1c:
9c:23:0f:bf:dc:91:e2:1a:cc:4a:52:b8:13:9e:3f:0c:7f:f0:
a2:bb:ce:b7:a4:be:73:a0:36:85:80:bf:dc:cd:f4:a5:50:f6:
ae:2b:b5:81:b9:be:8e:c3:bf:d7:cb:42:4e:9a:08:6f:ba:11:
0f:3b:0b:a2:30:51:81:be:57:96:bd:51:71:be:09:36:f5:82:
20:37:be:28:3a:55:5f:86:92:09:d2:82:0b:6f:99:f0:73:a7:
03:d6:f7:05:8e:20:25:b4:e4:4d:43:f8:4b:f8:e8:fe:ec:ad:
03:b4:be:6b:3a:de:49:56:9a:9a:b2:62:f1:a9:a8:c6:78:d5:
1b:d7:86:a9:da:93:72:dd:f9:1c:7f:f8:c7:88:e0:3e:08:be:
6d:07:8d:03:9f:1d:61:db:25:22:2c:27:3f:b7:e8:e6:74:67:
e8:6b:1b:92:a0:05:33:8a:74:89:0a:cc:c9:6c:f1:7f:cb:d3:
7c:35:71:db:e1:c4:c7:7a:f5:85:97:8c:6c:d7:b1:c8:34:ae:
99:ac:82:35:b4:d7:cb:53:06:91:d2:b5:da:b6:c0:4b:0a:fc:
5b:da:75:99:52:96:36:e2:b0:aa:8a:30:be:cf:7a:7f:47:26:
62:b5:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:05 2025 by rpki-client