Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: L4F54h6/TTLa2GM5IJ6UZm7zXA0uJcabAySch5cqRVA=
Subject key identifier: 80:3D:D4:AC:C2:97:4C:87:BD:31:3C:5D:08:A3:AE:83:21:EB:C1:0E
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019928C5E07DFD4AB3B2EECF41102AD2EA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 1663
Signing time: Mon 08 Sep 2025 10:01:20 +0000
Manifest this update: Mon 08 Sep 2025 10:01:20 +0000
Manifest next update: Tue 09 Sep 2025 10:01:20 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: oYUe+NGK01e1QsMU7sfBhFTzx5V/oTxo4uJizplkgHA=)
2: j0TS7sWufeH5UA9R8L5Lar1dfN8.roa (hash: 4uoOp+ywbPIH2GvAsL/CI2u9RgmZPn6i2PjYhgr/qBg=)
3: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:c5:e0:7d:fd:4a:b3:b2:ee:cf:41:10:2a:d2:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Sep 8 10:01:20 2025 GMT
Not After : Sep 9 10:01:20 2025 GMT
Subject: CN=803dd4acc2974c87bd313c5d08a3ae8321ebc10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:98:fc:8d:6e:8f:85:33:8c:36:1d:d9:5e:
f4:12:d5:6d:68:24:c1:df:0a:30:e1:94:c2:51:97:
d9:52:57:d7:15:dc:19:14:85:43:96:d9:0f:62:a8:
30:b7:c1:eb:bc:c9:23:28:a9:2a:2d:b3:29:49:84:
86:1b:1c:40:7b:b8:f5:fa:32:ce:e3:76:5e:11:4b:
01:72:90:fa:41:cd:fc:07:bd:09:dd:69:86:6d:51:
70:7b:8a:cf:e6:f5:c8:d6:48:31:d0:c9:9c:a8:70:
b1:6d:bf:58:6b:29:0b:68:e1:58:13:89:d9:a8:41:
47:c0:27:02:87:73:9a:79:f6:48:8c:5f:ea:25:6c:
48:b1:e2:81:2e:cc:80:28:b7:a1:91:58:34:79:72:
91:53:6f:7a:ba:9b:3a:79:b3:d3:ec:bb:ec:e4:84:
0d:6b:9c:58:ef:81:39:e4:d6:1d:5a:46:7e:c5:47:
67:8c:46:3e:d0:2b:5c:d4:4d:1c:ea:8b:ad:8a:fb:
dd:21:e9:81:f7:c1:c8:de:bd:82:39:6c:f0:9d:50:
7a:d8:04:63:1f:19:94:59:dd:fb:da:46:a5:21:68:
8a:25:18:33:55:54:38:d8:83:c9:fd:00:05:db:4d:
03:69:05:79:7c:d8:a4:6d:ae:1a:b9:33:ac:b8:f1:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:D4:AC:C2:97:4C:87:BD:31:3C:5D:08:A3:AE:83:21:EB:C1:0E
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:15:22:69:dd:f7:0d:8b:42:8d:35:4d:23:ae:0d:8e:01:16:
7f:d8:2c:35:b8:7c:29:37:a5:ac:40:e3:9a:68:07:3d:39:07:
37:3f:65:ed:aa:88:12:6d:f8:0f:d3:b0:ef:fd:4b:58:7a:87:
41:f1:c6:7e:d8:8d:03:2f:fe:8a:b4:55:24:1c:24:5b:8e:d6:
ce:b2:1c:1f:fb:af:c3:74:5f:73:13:2d:1a:52:5c:05:4f:d4:
af:e3:c1:9f:cc:19:75:ac:90:66:f3:c4:50:dc:04:2b:44:77:
16:40:ef:6e:2e:4f:b9:e2:30:be:f7:21:7e:4a:3c:19:37:09:
6d:ae:9f:f5:aa:93:06:a2:b2:e4:09:87:b3:80:a1:f4:3b:4e:
35:c1:1e:11:d8:51:cf:fe:2e:c3:6f:17:5f:ed:dd:b2:23:97:
55:71:b9:04:10:7a:a2:ce:71:0f:b5:fa:f5:c3:22:e7:12:fc:
86:46:86:a5:d4:51:92:b6:24:3b:27:47:e1:8e:a5:e6:13:b7:
b3:a0:84:97:b4:fb:5d:40:6e:52:5c:8f:a0:4b:75:fb:b5:a0:
5b:e3:18:e6:31:fe:e7:e1:fc:ae:c6:e3:88:d2:8b:65:dd:02:
70:fa:56:4d:aa:0a:eb:45:a5:17:ff:5c:58:42:89:eb:7e:dd:
d6:de:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 11:16:17 2025 by rpki-client