Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: xrWjybhsloERYQq9Djj7EZ0yaxqrQhuoyEqPPQCaQhU=
Subject key identifier: 1F:96:23:D5:EC:88:11:F5:53:53:AE:85:3A:02:B5:E6:53:B7:DF:FA
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 01984889B4A274678D7623384DA2BA2ED6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 160F
Signing time: Sat 26 Jul 2025 21:00:40 +0000
Manifest this update: Sat 26 Jul 2025 21:00:40 +0000
Manifest next update: Sun 27 Jul 2025 21:00:40 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: I5+Xi/iL0Hl85ZpA0apQemDEPwbWA9HcuWBFrXhG85o=)
2: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=)
3: ae03YOkS1ofM34wdhj2KqmDyBno.roa (hash: urHsIcZ4xBvpG+piPTKwb+t4LjinRiEgOkguvBfEZMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:b4:a2:74:67:8d:76:23:38:4d:a2:ba:2e:d6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Jul 26 21:00:40 2025 GMT
Not After : Jul 27 21:00:40 2025 GMT
Subject: CN=1f9623d5ec8811f55353ae853a02b5e653b7dffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:8e:41:38:a7:c5:45:b7:52:53:f3:9d:25:
41:2f:c4:f7:53:c3:52:f5:33:1b:f8:85:23:f7:03:
eb:34:c6:38:13:1c:92:49:e2:f9:d2:74:6c:17:03:
cf:04:90:73:48:ed:1b:aa:98:1d:8c:07:0c:cb:a5:
d1:10:9a:76:80:8c:26:ec:66:e0:7d:76:76:f9:3d:
48:80:35:94:58:8f:fd:7b:2b:c1:f4:3a:93:e4:33:
e7:dd:6b:b1:1c:27:f6:9a:88:85:ed:58:bb:07:02:
52:56:4b:1e:4d:15:d6:ac:21:b2:4a:0e:7b:40:a0:
3c:7d:ce:60:86:c5:ea:e9:c8:c5:af:ee:1d:9b:42:
52:f8:bc:7a:e7:6e:f3:dc:70:5c:8e:24:ab:b0:1a:
cc:9e:ec:5d:c2:8b:45:b3:14:9f:a1:b1:70:ac:04:
87:20:a8:a4:15:bd:67:83:6d:c8:4d:0e:bd:a1:96:
0d:25:50:13:91:d8:83:95:82:6a:fc:86:2e:70:ec:
af:7b:b8:bd:5b:0a:07:09:9e:50:82:41:41:c3:45:
fe:17:c6:92:02:de:92:48:b3:7c:07:ba:02:d5:19:
45:2e:e3:89:02:9f:86:e0:ba:c3:f7:85:98:72:94:
24:85:61:85:c1:b4:7f:44:94:32:2b:ca:4b:03:64:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:23:D5:EC:88:11:F5:53:53:AE:85:3A:02:B5:E6:53:B7:DF:FA
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:26:37:2c:96:b5:a7:4e:3e:08:ef:93:b8:47:01:76:fb:b2:
75:43:e0:14:6a:78:2b:26:ac:93:3e:8d:0c:03:f2:a2:cc:0d:
86:c0:31:df:b2:6c:0d:6e:c8:06:52:f0:df:b3:6e:8d:04:45:
ac:57:1d:dd:30:77:d5:22:f9:c8:0f:a1:07:08:b5:5c:a9:44:
0c:fb:5d:29:d8:e4:66:ef:93:46:5b:4e:85:7f:31:ef:85:a8:
c6:ac:00:ac:ea:19:be:57:c8:ae:92:81:ae:8a:76:74:46:5c:
00:4d:93:ed:02:c9:71:7e:c6:a6:8c:55:23:93:c9:e4:6f:26:
4d:68:66:c6:3f:b1:0a:14:af:ea:08:a2:2b:89:e4:e4:da:e8:
28:7d:b2:87:a9:85:85:bf:e2:b6:2b:0e:ef:1c:06:f2:41:71:
94:7d:cd:0b:ea:a5:b4:50:c6:d7:4b:e4:ac:3f:e2:9b:73:e6:
b7:6b:54:f4:ee:48:61:8b:1a:fa:64:e4:d3:84:22:b4:f6:fb:
6e:68:f6:9c:c8:37:c3:81:82:71:d3:32:07:c8:f1:0e:f9:c4:
00:69:9c:56:e3:c7:f7:cb:54:16:06:3d:61:bf:ab:5b:ca:16:
d6:4c:d4:36:10:8a:a0:7e:0a:2c:24:87:84:ce:da:1d:f5:09:
2a:ff:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:11:56 2025 by rpki-client