Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: 9R0xGSFBXptEAsEs1lxoyL47qOdyazZR3NQZvld1T/k=
Subject key identifier: B1:7A:78:13:EA:0F:23:07:EA:42:E6:D5:C8:F6:02:EF:89:7E:78:31
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 0198469B33CA11E0F9133EDBB29401EDD22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0CAF
Signing time: Sat 26 Jul 2025 12:00:32 +0000
Manifest this update: Sat 26 Jul 2025 12:00:32 +0000
Manifest next update: Sun 27 Jul 2025 12:00:32 +0000
Files and hashes: 1: 5-tO1DtUPdvn-gHncHuAbgt6OiM.roa (hash: L6Z02H1tfyOJ9fsH+lsAomG7wfqgJlWMWjJh/1Ka9SI=)
2: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: yYtiWe0QSEqGqKqfnipyQwKWLioD+AK/dpIwhHApcHE=)
3: gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa (hash: 5qjlUc3/t7psPBo135Wzs5OYxrc/B+KKSYzn0gcEaGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:33:ca:11:e0:f9:13:3e:db:b2:94:01:ed:d2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jul 26 12:00:32 2025 GMT
Not After : Jul 27 12:00:32 2025 GMT
Subject: CN=b17a7813ea0f2307ea42e6d5c8f602ef897e7831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:07:c8:0e:d9:b3:05:85:36:f9:a9:48:e9:
0a:fa:0e:a7:a7:35:a5:7d:67:7a:8e:bf:e5:43:94:
e4:91:fd:84:6f:6b:3b:87:13:09:1f:72:b2:3c:8e:
46:d7:49:57:6b:cf:39:f9:88:09:92:cc:0a:4b:1c:
03:df:5b:59:76:cb:42:c3:e0:38:bf:7e:e1:0c:0e:
d0:87:98:dc:db:72:67:36:b7:36:de:9d:11:a7:71:
03:d8:65:c0:21:3c:20:2d:e9:b8:e5:60:25:d1:c4:
37:18:a4:83:27:4f:68:74:7f:55:45:4e:ce:b2:37:
86:97:76:67:f0:37:1a:c1:34:5a:4e:3e:7c:4a:3e:
97:42:bf:6e:23:4a:6c:3d:7c:3a:0d:68:11:07:85:
37:22:bb:fe:02:57:92:37:26:36:36:a6:36:88:b3:
93:c3:af:ee:ed:0d:5c:2d:a2:c3:5a:1b:d7:31:18:
56:f6:46:0f:cb:85:1a:48:68:ea:cb:a9:7b:e1:4c:
40:b4:8d:f4:ec:69:76:44:24:fb:49:5f:1c:7a:f9:
1b:c7:89:84:a7:79:63:38:9a:57:3b:43:1f:d4:d9:
ff:cd:59:1a:e3:87:a3:61:fd:0a:10:bc:0f:41:da:
1e:5d:01:2b:dd:de:31:08:4f:ae:5f:de:ac:12:b7:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7A:78:13:EA:0F:23:07:EA:42:E6:D5:C8:F6:02:EF:89:7E:78:31
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:5a:a4:62:77:f3:92:7e:c1:b7:26:9f:99:46:0c:5c:38:
43:c9:db:db:be:b2:bb:6b:f5:68:56:24:3e:ce:4a:18:30:91:
17:ff:1f:ba:cf:08:0d:04:e4:37:bb:dc:39:44:f6:69:f4:2d:
49:e3:12:be:27:ae:eb:b0:35:2f:fa:91:d9:dd:37:9f:b9:80:
70:56:f7:bb:3d:5e:c8:3d:38:43:02:ee:84:83:d1:77:91:5e:
bc:c9:28:94:ff:bf:d7:1e:c6:23:1c:63:8a:00:1f:fb:76:b3:
c7:07:cf:4f:6a:9e:2d:19:d7:03:99:89:4f:46:b1:f0:58:7c:
1f:3f:67:c7:b4:04:12:d7:8f:da:42:ad:6a:1e:a4:0f:f1:66:
6e:61:40:72:55:ea:b6:1d:ed:cf:27:d2:32:d8:4c:85:0d:c9:
60:9f:95:53:34:0f:9a:e6:26:cf:17:9a:f4:8d:c8:cb:88:05:
60:7f:d9:04:4f:1b:c9:8f:29:04:18:2e:be:7e:82:74:a4:d8:
65:7c:ef:7a:5b:a4:87:93:ad:65:65:b5:42:fa:f4:9f:4b:33:
77:69:1a:65:bc:98:dd:51:84:1a:81:a4:ad:14:15:20:63:5f:
8d:f6:77:04:90:79:fd:f8:e1:90:51:e7:f4:a0:f5:77:ba:43:
ad:7d:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:41 2025 by rpki-client