Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: cxvD3f0+8jxoQEtKN36eDSjXy4sX3Ta9ZycJJsS0R8U=
Subject key identifier: 73:D8:BB:5F:E9:96:67:CB:F8:43:46:4A:EE:1C:AF:96:BB:5A:2C:92
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 0198542007FA0E94EE98C7073C4340B42740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 03:00:41 +0000
Manifest this update: Tue 29 Jul 2025 03:00:41 +0000
Manifest next update: Wed 30 Jul 2025 03:00:41 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: d7weaXZAmMVFZ3ba3+yg8WsfVjDtTIWWYllaoo9LgL4=)
2: G6K_DWhWU68de4ypb82fcRNbq1c.roa (hash: Gtd0kHs/yyYgjTN6WOR+S2KJ5GiQ71eqM+ooEqk1CdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:20:07:fa:0e:94:ee:98:c7:07:3c:43:40:b4:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jul 29 03:00:41 2025 GMT
Not After : Jul 30 03:00:41 2025 GMT
Subject: CN=73d8bb5fe99667cbf843464aee1caf96bb5a2c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:1e:10:f5:e6:1d:46:7d:c5:16:f5:7c:62:
72:0a:3d:fa:9f:c0:9b:c2:6e:1d:ea:9f:8e:d1:95:
46:3b:cd:a4:6f:56:e7:48:e9:ad:1f:eb:ab:45:87:
f7:79:bf:88:e6:4e:ec:f9:0d:e6:44:03:5c:da:13:
59:4b:e1:4b:6a:89:8d:33:31:97:e2:2f:f3:34:e4:
11:99:fb:f6:7f:bb:01:d3:ba:b9:de:ca:4e:6c:1f:
ba:70:35:c2:83:d1:04:7e:7e:45:6c:85:9c:d7:ed:
95:8e:55:5d:c7:f9:80:b3:1f:f9:52:4f:22:26:13:
a7:f0:11:e1:37:7a:7e:98:5f:d5:d6:4a:20:a5:71:
70:03:c1:da:90:9f:e7:3b:be:2c:64:56:ff:42:3f:
e3:73:80:6d:f3:86:83:1a:7a:b2:a2:15:3e:a7:90:
bc:b2:cc:d2:9c:2c:94:45:88:5f:39:bf:3d:58:bd:
86:b8:c7:c8:01:4e:3a:37:58:53:de:4e:7f:b8:ea:
2b:38:37:1d:10:3f:ff:92:3e:70:47:46:58:a5:d6:
f5:c6:e8:8e:3c:51:84:ba:57:d4:d6:8f:ed:c2:47:
2a:cf:ce:df:47:d9:5d:19:43:28:2d:7a:c0:40:c0:
3e:5f:78:ab:57:27:92:30:63:2e:02:b5:17:43:c3:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:BB:5F:E9:96:67:CB:F8:43:46:4A:EE:1C:AF:96:BB:5A:2C:92
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d0:e5:88:f9:6d:78:40:29:35:a7:29:df:b3:9c:25:69:30:
5a:d6:bd:3f:82:fc:e1:ce:80:24:50:a6:f7:6d:3f:61:9f:5d:
68:13:1c:8b:f5:a5:cc:58:92:aa:50:40:cd:16:d5:af:c2:9a:
7e:cc:0e:11:92:92:cb:93:9b:1b:0a:a9:17:69:4f:03:f5:f9:
31:94:39:56:87:58:93:ad:bc:13:ad:b1:7e:c2:a4:66:3a:70:
bb:2d:c8:e2:a4:3f:0c:f5:10:b5:bf:1e:70:a1:66:b5:49:63:
cf:b8:d7:56:a9:d1:5d:12:47:81:a9:21:1a:7f:4f:e3:2e:24:
d9:00:4b:cb:23:4e:63:ff:26:0c:33:24:c3:08:49:68:28:c8:
5c:9b:fd:31:fa:a3:aa:59:90:1a:24:9e:e3:e5:18:67:68:d7:
a4:12:19:97:3d:fd:bd:67:53:a7:ec:d4:39:d3:32:0a:ff:91:
e9:09:c1:13:64:ad:ae:51:40:38:51:d2:6a:ea:f9:05:98:dd:
a9:e5:c9:93:35:d1:45:62:f0:68:1a:ab:0d:b8:4f:0e:90:e8:
1c:f5:a6:84:32:89:b1:fe:a4:4b:b2:41:44:4f:ec:22:95:d5:
da:d5:e4:b1:7a:64:57:0c:ff:51:e0:31:f5:04:6a:0c:cf:69:
77:29:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:46 2025 by rpki-client