Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier: 3YwmEeDjcBS1gz/cUXdnZsVGZu/JtNZ/BC4VPlrzM/M=
Subject key identifier: 08:13:83:7B:0F:DA:6A:7B:4C:81:22:90:67:9A:52:04:99:D4:55:03
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 01982822D2D4C0EE0351E7C257B378AA9169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number: 2D
Signing time: Sun 20 Jul 2025 14:00:27 +0000
Manifest this update: Sun 20 Jul 2025 14:00:27 +0000
Manifest next update: Mon 21 Jul 2025 14:00:27 +0000
Files and hashes: 1: 1u5ksCdqTOqkYNw-ehshASHn4j0.roa (hash: LdEtJ4t/05jdyyXEWWYukCH8Uv/fk8odnJ8Q/aqBpdk=)
2: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: 9WLnmf3OOekL7AoC2wr5urWp6ET3GzZd0JO++4Mrv6U=)
3: _DQDgeYwOvMiNSu-NI_jTpHQF64.roa (hash: Kzdl0rivtS5Baf6WUvieNeyTAMf2/ZPIBPPVPszZJOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:22:d2:d4:c0:ee:03:51:e7:c2:57:b3:78:aa:91:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Jul 20 14:00:27 2025 GMT
Not After : Jul 21 14:00:27 2025 GMT
Subject: CN=0813837b0fda6a7b4c812290679a520499d45503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:91:9a:25:a2:66:49:93:d2:ef:22:af:4f:
2d:02:99:5c:ec:74:23:3d:6a:e9:11:61:47:c8:2a:
dc:e0:68:32:7c:65:65:f6:51:13:64:45:37:5a:48:
f7:56:4c:f5:ee:ee:fa:cf:c9:cc:b7:01:58:fa:19:
eb:5c:de:45:39:5d:6c:67:c1:7d:40:60:b4:6a:82:
3b:6b:cb:e9:54:83:11:c1:15:8b:5c:e2:bf:3d:71:
71:b1:5e:0c:3f:c5:04:34:ad:3b:69:0f:df:24:15:
f3:2c:88:4b:ad:0e:ce:88:80:46:68:ea:0f:21:e6:
ed:3a:c6:bd:de:e7:b4:65:3c:5a:de:b2:b3:c4:73:
b4:16:7e:80:63:ec:96:0c:1a:85:8b:31:be:e2:de:
37:3b:09:5e:85:a7:74:12:fb:02:94:ee:0c:bc:e2:
fb:11:26:74:3a:10:b6:58:70:d8:2f:cc:72:a7:63:
9e:f5:02:08:f4:00:48:1d:b5:5c:ca:7f:76:07:d1:
e2:f6:63:6e:ab:ca:85:79:38:a2:73:05:06:77:9c:
f2:df:a4:e0:43:9f:bc:86:7a:40:82:db:58:57:53:
41:89:ff:f4:36:87:64:05:df:e9:c6:40:29:68:f2:
ca:a3:46:9d:4b:01:19:7e:99:27:e1:64:70:1b:f1:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:13:83:7B:0F:DA:6A:7B:4C:81:22:90:67:9A:52:04:99:D4:55:03
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:96:04:0c:6d:c6:32:bd:5f:f0:76:a5:62:6d:10:4e:be:74:
26:7c:a2:ce:a0:18:0e:cc:22:1a:ec:bf:58:71:d9:fe:4a:3f:
a7:52:16:dc:04:5f:fd:75:95:fc:03:cb:aa:70:71:bf:3a:3f:
6d:08:f4:a8:97:18:30:db:60:07:d5:01:14:67:2a:83:34:19:
82:35:67:d4:9a:06:61:87:50:d8:d0:c7:1d:36:7e:c6:97:a8:
c7:e4:1f:dd:73:9f:68:48:23:0e:64:84:bf:79:26:98:f9:2c:
fb:4a:32:4c:8d:b9:79:6f:d5:9a:8a:f4:47:9c:12:ff:50:d3:
67:75:a6:2a:4a:af:96:a0:56:91:d5:02:81:a1:0c:f4:7a:c7:
d0:cf:27:c7:5e:f6:6d:8d:13:eb:46:52:20:61:96:49:a2:f7:
ce:68:37:7d:f1:47:f1:14:a7:16:45:70:cf:89:29:dc:25:7d:
38:b3:e7:fc:2f:de:41:af:a5:28:a2:bd:bd:12:a6:3e:a9:23:
c9:5d:39:84:74:ae:af:45:62:2e:e3:04:77:ae:3b:ac:de:0b:
96:19:cd:3d:a9:04:28:d0:ae:13:c9:8e:8a:84:0d:2f:3f:6a:
73:b3:95:13:5f:91:f0:54:fd:b3:2a:7c:af:32:bf:db:dd:46:
16:50:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:21:42 2025 by rpki-client