Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: j8yKG9Wf56w4vAV6vZMIFDPd9xmFuNxc3ecuvCGCqN0=
Subject key identifier: FF:DF:C7:0B:FF:B7:91:D2:8E:2B:DF:13:B3:F0:19:EC:DD:EA:9A:DD
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 0198499BF8D974C821C1B9BD218C006B140B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 05AC
Signing time: Sun 27 Jul 2025 02:00:15 +0000
Manifest this update: Sun 27 Jul 2025 02:00:15 +0000
Manifest next update: Mon 28 Jul 2025 02:00:15 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: OIhKZjyOI0K4d0/VlU+2na1iYLHcA4mpCrWwrHp0fuA=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f8:d9:74:c8:21:c1:b9:bd:21:8c:00:6b:14:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jul 27 02:00:15 2025 GMT
Not After : Jul 28 02:00:15 2025 GMT
Subject: CN=ffdfc70bffb791d28e2bdf13b3f019ecddea9add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:5d:3c:b0:ba:b8:c4:75:48:4a:9f:4a:00:
22:f5:c0:a8:63:7d:3f:37:da:04:25:52:0b:6d:fe:
6a:de:cb:40:c1:e3:8b:17:68:f2:22:b6:9d:21:ab:
f3:80:bd:8c:af:f3:96:2f:eb:d2:20:fb:4c:a7:95:
2b:be:a0:65:42:b2:ca:c8:f6:a3:7c:33:40:e5:96:
a7:36:56:10:f7:9a:9b:9c:79:51:ac:20:76:02:27:
f2:16:a5:4b:fb:67:18:e6:68:64:c6:64:20:73:8c:
c8:6d:43:c1:2f:be:c3:8a:8d:c9:6d:bf:1c:64:a2:
24:1d:c2:42:e4:f3:f6:36:61:c0:61:7a:59:d4:1f:
3d:16:80:00:7c:5e:62:4e:9e:55:7e:ba:af:a1:6c:
b1:b1:4f:39:22:ef:76:a9:ba:08:1f:0e:cc:2b:cd:
46:67:18:67:54:4c:4d:66:8f:27:05:8c:a8:d3:a3:
47:6e:71:4e:85:6c:96:a9:bb:a2:79:b6:c6:01:35:
2e:6c:d5:c8:70:21:b8:e4:38:64:e7:7a:7e:4b:36:
1a:12:4d:0c:d3:dd:3f:a0:2f:89:0a:f4:b4:12:4a:
2a:2f:80:0b:23:ea:e6:51:27:ad:37:52:5c:51:57:
7a:5d:7b:5a:a8:0a:63:c8:1f:72:c7:76:cb:09:b5:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DF:C7:0B:FF:B7:91:D2:8E:2B:DF:13:B3:F0:19:EC:DD:EA:9A:DD
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:10:66:2b:dd:12:4c:76:39:67:51:ea:2e:28:79:1b:94:ea:
07:f4:3e:e9:90:2b:7d:1c:2b:fe:18:27:54:56:1a:bc:64:ac:
b3:e4:0b:02:48:6f:ed:d4:91:ca:6d:b5:2d:17:a4:34:82:7b:
42:c3:e4:4d:0e:de:d5:56:62:d3:cd:24:3a:01:dc:d7:0e:fa:
ed:dc:5a:1b:d2:5d:9a:ee:ac:38:05:4d:43:fd:98:50:ee:8b:
95:9d:49:84:8d:4e:2f:b9:7e:9d:cd:06:2c:2e:5a:22:4f:21:
c8:4d:2d:cd:8f:0b:fc:21:2d:67:1c:81:2e:e1:c2:a6:bb:3a:
c3:c2:3d:eb:b9:ed:0d:58:53:83:dc:a8:cc:9c:22:37:b1:e7:
ec:ff:44:f4:ea:e5:38:20:f6:e0:dd:01:87:d5:3c:30:d7:53:
bb:60:41:6e:32:ef:ca:2b:e0:7a:e7:b7:55:57:82:7b:12:63:
bd:f9:c8:60:fc:ca:90:14:0b:55:97:cd:0e:cc:8f:b3:d8:10:
8d:9a:a3:49:be:4c:75:4c:d0:3d:22:10:5d:21:7b:99:7a:58:
aa:c6:16:bb:15:80:a9:83:03:d3:03:4c:19:bf:de:6a:38:a4:
4e:d9:71:b6:2f:5e:21:25:5e:1a:37:1c:c6:c4:64:58:61:c4:
c8:c0:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:22 2025 by rpki-client