Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: IpT5LKqGS4QMK3lVUqmrIfmypYl0oW93VddrqOj/M18=
Subject key identifier: 98:FF:1D:F8:1C:79:8A:81:00:55:82:11:0B:47:B0:18:53:59:2D:CE
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 01984A0A36E50200E082C025682721DDB0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: FD
Signing time: Sun 27 Jul 2025 04:00:39 +0000
Manifest this update: Sun 27 Jul 2025 04:00:39 +0000
Manifest next update: Mon 28 Jul 2025 04:00:39 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: SLRFnGG79rslfDFl3l7Dsp3QL6JDv1PBs/Z5WyI9IGc=)
2: g827ucs3EThsAfzbTT2FMhBdWaY.roa (hash: PzIDENEz83QkajYAOtSf7pvZj1/xEbuYaZgcwQILtJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:36:e5:02:00:e0:82:c0:25:68:27:21:dd:b0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Jul 27 04:00:39 2025 GMT
Not After : Jul 28 04:00:39 2025 GMT
Subject: CN=98ff1df81c798a81005582110b47b01853592dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:e4:b4:48:dc:49:8a:60:20:88:30:00:06:
73:e2:35:e8:54:61:5c:67:3a:29:e3:87:36:bc:83:
2c:ea:af:ba:d9:bb:6a:73:ee:7e:cb:10:a6:a6:a4:
31:2a:62:28:bf:42:81:7e:ac:50:99:61:b2:74:b5:
db:23:3a:8d:bc:5a:9e:81:ac:5e:2e:8e:85:cb:78:
cf:8b:7a:ca:a8:2d:df:b1:60:10:41:52:a8:f8:79:
34:47:7c:4b:64:ee:9c:df:5c:7b:cd:dd:47:95:6f:
81:26:0e:cb:a7:0e:88:88:4c:7e:fd:b7:a9:3b:95:
ef:da:82:89:e9:9a:1f:5b:d3:d6:2e:c7:cf:ce:4c:
8d:42:8f:b8:62:9e:4c:7b:fb:e7:36:53:a6:ab:ee:
c6:43:cb:a3:ed:4d:3e:05:39:ec:b8:dd:fd:48:f6:
04:ff:3e:4f:38:7b:64:92:bb:3e:be:d8:01:10:a9:
6f:69:ce:45:6a:17:46:99:6f:72:20:bd:7e:36:ce:
2b:c4:86:b8:4d:b1:63:28:93:d0:a4:74:24:e3:38:
a6:cd:fd:cd:a1:ef:a7:fe:e7:e5:55:b5:30:29:e1:
92:38:89:42:70:e0:ea:b4:fa:eb:8f:ca:f9:ff:3e:
ab:03:4e:d9:f9:81:61:8a:9b:33:dc:35:67:28:d6:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:1D:F8:1C:79:8A:81:00:55:82:11:0B:47:B0:18:53:59:2D:CE
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f9:9e:bf:d8:b9:fb:26:ca:80:fe:9d:46:76:43:87:9d:59:
18:ec:3f:e9:12:61:69:c4:10:4e:09:f8:91:5f:1d:58:50:88:
8e:89:2d:a1:22:0f:ea:2e:08:91:89:76:fa:cf:fe:1f:c7:af:
01:ee:0c:e4:67:6e:0b:6c:67:70:b3:19:c5:6a:ef:f3:75:bc:
aa:f8:29:fe:f2:b8:36:96:f1:ec:ae:23:81:fc:b9:6b:93:d1:
77:4e:99:ca:8f:40:17:0f:1d:c7:51:84:20:58:73:50:93:a8:
24:9d:17:bf:d6:11:57:c3:19:99:26:c4:fd:58:0e:14:fe:e8:
6b:c9:cb:02:2f:a5:fa:d4:97:ab:11:b2:d9:61:42:ca:91:cc:
a9:a3:4d:88:05:4c:bb:80:79:5b:f8:78:f8:19:4e:e4:61:7b:
93:72:51:da:99:3e:83:21:20:de:14:1d:aa:86:dc:64:29:e7:
68:9d:30:67:b1:09:bc:4f:2e:b3:83:c7:3c:22:40:11:56:b5:
ed:8c:8f:aa:99:c2:64:b6:9f:2f:e0:d4:fc:23:0a:af:b1:d7:
56:8e:40:b8:be:46:9f:5d:2f:1e:0b:bf:c8:06:4e:f8:96:6f:
04:e3:75:9f:91:63:0d:98:ee:1d:e9:1a:a9:1e:ca:6b:21:b0:
99:d9:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:58 2025 by rpki-client