Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: 33ZdkAKwXCPPK2rgyaRLgJGZYHTv6vbByWyG+ytcxy0=
Subject key identifier: 87:87:B6:C8:40:BE:14:19:1A:C8:54:02:CB:F1:BE:24:2A:48:A1:16
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 0198499BF33E45FD5063F6B5B5C55C2F3F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 0186
Signing time: Sun 27 Jul 2025 02:00:13 +0000
Manifest this update: Sun 27 Jul 2025 02:00:13 +0000
Manifest next update: Mon 28 Jul 2025 02:00:13 +0000
Files and hashes: 1: YhU5HITXmEzEZK077V2NUQi5G0E.roa (hash: hsmvHe6gnKNA2Q3OE6zeLGrGjvqCoU3tN+crhtSom4Y=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: 7K3O7qcmDs1PhZLax42g+ldAFC1XCx+ij57XP23LkCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f3:3e:45:fd:50:63:f6:b5:b5:c5:5c:2f:3f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Jul 27 02:00:13 2025 GMT
Not After : Jul 28 02:00:13 2025 GMT
Subject: CN=8787b6c840be14191ac85402cbf1be242a48a116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c5:a9:f7:ca:a3:92:fc:2a:b9:ec:4c:5f:a0:
83:ea:3c:e8:bb:84:f5:de:75:06:4b:ec:d0:dd:42:
57:94:2d:37:4a:cb:68:0a:33:8c:ff:97:a4:be:ca:
bc:90:52:42:24:08:85:f3:b3:2b:88:6f:3c:c0:65:
8b:72:00:b7:fe:20:6b:8e:1d:68:79:ef:b5:9a:c5:
17:4f:6a:44:d2:ea:1a:39:07:0a:22:e6:8a:9e:55:
e0:c5:6e:0a:01:f1:f6:f9:c5:a2:b8:54:de:eb:76:
da:a3:36:f2:c8:c8:5f:20:88:83:30:55:68:2b:62:
ca:0f:e0:0f:0c:34:19:25:b7:03:1b:24:6e:99:dc:
f7:65:b3:dc:f9:d9:cf:dc:30:e4:dd:dd:1b:03:bc:
ef:13:83:af:eb:03:58:c1:6d:ea:39:0f:64:4e:37:
12:35:4e:81:85:52:35:f1:91:dc:aa:11:42:e5:86:
bf:16:6b:77:79:57:49:06:74:73:fb:5d:fd:bf:5a:
9c:07:c2:c0:b6:e9:e3:51:f0:2b:d1:d2:29:2d:87:
bb:ed:f6:4c:e3:3c:d9:41:fb:67:d9:0b:da:4b:46:
b0:38:cb:e1:22:4a:a1:ab:66:c7:ab:55:81:ca:a3:
f1:d5:29:d0:5e:f8:be:d8:77:01:97:86:69:4c:1e:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:87:B6:C8:40:BE:14:19:1A:C8:54:02:CB:F1:BE:24:2A:48:A1:16
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:11:d9:6a:64:ad:84:c8:31:de:9f:07:32:5d:7e:87:94:3b:
f3:a2:45:3b:81:d1:53:18:47:9e:40:8d:09:80:5c:f2:b1:32:
5e:af:5a:59:e1:aa:ab:2a:64:15:79:e4:e1:cb:f7:ef:4b:a4:
db:f4:a4:11:ce:e9:b6:c2:73:76:ef:65:9d:43:59:57:60:9d:
3c:fa:4a:b3:68:e7:ab:fb:5d:3c:4c:7a:5a:dc:42:d9:97:f1:
37:b7:88:21:9f:a8:11:9d:ab:67:db:0a:09:1a:e5:39:c2:7a:
34:ff:3f:2d:c3:16:70:65:23:ee:cb:61:97:49:c4:48:8d:3a:
19:24:8b:6b:bf:5e:64:62:ed:f9:7f:40:4a:9f:38:87:a1:65:
77:09:5f:9f:eb:96:b8:6e:0d:e9:27:22:b1:d2:f1:af:23:89:
0a:51:c1:9b:45:af:bd:2e:fb:94:18:3b:21:5e:a6:16:55:2a:
53:98:34:bd:c1:f7:e7:60:4b:bf:ad:65:6a:fc:7f:4f:41:28:
7b:e8:fe:30:47:d6:ed:92:28:bc:8f:ea:ba:12:13:2f:4d:ce:
76:b0:21:5c:a9:98:c4:91:0f:02:76:2f:4d:a0:4b:96:90:25:
f1:c1:44:36:d8:2c:16:fd:08:85:6e:7c:7e:87:39:bf:b6:8a:
7d:e4:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:31:04 2025 by rpki-client