Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier: U0YbyzjDOcK/O7QqaHy6Aa01Zk8m0Fg33XjG4tCWq7Y=
Subject key identifier: 77:A3:2A:EE:F8:31:90:45:21:D8:A1:A9:E4:05:14:F2:6A:3E:73:D7
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 01984A4114E7E9EC6BAE91DD73E6F7CB37AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:35 +0000
Manifest this update: Sun 27 Jul 2025 05:00:35 +0000
Manifest next update: Mon 28 Jul 2025 05:00:35 +0000
Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: mSbuB39lAJfPM6CG36RJJDFBxgmrE4uLONbth3z2gdo=)
2: nqRXNoUiyTb4TmIe2_b86I-CG4w.roa (hash: uh5jetKJYfrnWeF7nxGsrvO4F6Y6S/Ud8IP3anKzhdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:14:e7:e9:ec:6b:ae:91:dd:73:e6:f7:cb:37:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Jul 27 05:00:35 2025 GMT
Not After : Jul 28 05:00:35 2025 GMT
Subject: CN=77a32aeef831904521d8a1a9e40514f26a3e73d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:53:99:01:9a:ad:ae:91:06:69:9c:79:88:
cc:3c:ac:2b:10:84:aa:db:7d:92:e2:1c:47:68:01:
8e:aa:ab:da:1b:5f:74:3c:3d:b3:d9:1b:e7:06:01:
00:24:cc:8f:80:fd:4f:1d:be:27:a1:74:99:a5:1f:
91:98:d5:20:71:2f:92:c2:d9:b1:a7:50:59:4c:e9:
ee:a8:12:dd:af:fa:6b:fc:1d:43:39:0d:91:f5:d2:
62:5a:a8:2f:93:e8:10:c0:52:2a:29:0c:df:b8:1e:
c2:bb:90:40:a4:f7:0e:33:8c:c1:d5:5f:a5:d5:9a:
31:31:3d:d6:f3:99:69:a1:a7:6f:ce:3c:b1:b9:1c:
21:aa:30:89:9c:a6:c9:59:5f:13:15:47:9b:81:3d:
01:40:64:bb:ad:b7:2c:95:a5:f9:3f:b1:ab:ad:d3:
ac:f4:fd:8b:6d:40:e8:96:40:17:80:61:ab:8c:53:
0d:56:f1:20:8e:b8:a3:d2:08:f5:4a:e9:b0:d1:0d:
62:f7:cb:67:82:1e:9a:ce:44:07:b0:91:74:01:85:
f1:8c:a6:ce:2f:76:da:9a:32:58:02:a6:5d:bb:a9:
4a:fc:61:91:2d:3c:af:69:d7:2c:01:a8:ac:ef:4a:
5c:c7:fd:7e:2a:77:4f:9e:4c:50:85:5e:9a:5a:55:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A3:2A:EE:F8:31:90:45:21:D8:A1:A9:E4:05:14:F2:6A:3E:73:D7
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:31:9b:d1:15:0b:87:89:bc:b7:00:75:f5:09:27:13:c5:
cd:7c:e0:96:44:78:3d:ad:20:79:7c:e4:91:ed:0c:e0:2b:4f:
fe:c6:0a:7e:c9:a7:17:fe:9a:33:86:b9:07:b7:8c:03:a8:ac:
4f:17:53:54:af:91:9e:67:c4:11:75:c9:42:a4:8b:7d:e5:6b:
91:1c:df:83:e1:f1:cd:bc:b8:d0:53:2c:90:db:e9:79:9b:db:
f8:ed:bf:58:ad:4e:15:5b:ad:41:7e:fb:5f:c6:9c:00:15:ed:
22:d8:04:40:1c:18:18:f8:de:00:d5:2a:6c:fa:19:ab:c7:6b:
1c:b6:f2:a8:53:70:1b:09:b4:34:f3:eb:c1:57:65:f9:5e:71:
5c:e9:a2:7b:da:dd:1d:6b:6e:96:e6:05:54:6b:54:3f:bf:2f:
46:51:a9:60:78:2f:04:fa:bf:20:96:b6:1a:8b:9c:7c:38:0a:
2b:94:41:7a:35:d8:79:62:5c:fc:0c:d8:1a:78:f6:a8:f9:8b:
38:f0:88:b8:d2:12:e4:b5:8d:ab:04:d8:37:2e:36:87:5d:23:
24:af:67:62:22:c4:fb:2c:a5:de:c7:18:72:0b:6a:ec:66:83:
2d:83:b5:46:46:fe:02:60:21:26:78:f8:08:ec:71:27:8e:f4:
9e:5c:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:40:56 2025 by rpki-client