Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: JeY6g7kxn2mX6H/frUj4kiEYCRnXT7d2N3nvrutYp70=
Subject key identifier: A9:6C:43:03:16:8F:25:3D:B2:3A:12:83:61:9F:60:18:E7:4B:DA:87
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019848C02D2BA668678DEEA24F27786FEEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:10 +0000
Manifest this update: Sat 26 Jul 2025 22:00:10 +0000
Manifest next update: Sun 27 Jul 2025 22:00:10 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: 3oVzQCywt0Ncd07n/8udfgxZ3EI7qLaiHCM77gURw0I=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:2d:2b:a6:68:67:8d:ee:a2:4f:27:78:6f:ee:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Jul 26 22:00:10 2025 GMT
Not After : Jul 27 22:00:10 2025 GMT
Subject: CN=a96c4303168f253db23a1283619f6018e74bda87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:e6:e3:58:97:20:ff:b9:56:9b:4c:6d:37:
d3:d8:af:4d:19:b1:86:19:5e:e4:dc:14:9c:2e:fb:
2b:80:8f:4e:65:7d:ee:38:66:30:37:ca:09:ad:cc:
05:9d:28:01:a3:ba:cd:90:d5:a5:b5:8b:0d:68:a5:
4d:16:ac:a2:0f:4a:e7:9e:6e:ba:0e:f2:58:36:2c:
94:a2:b0:b2:0c:dc:8e:03:a7:a3:49:22:2f:9c:7f:
1c:c8:73:c3:2c:ee:48:7a:bf:0d:0e:d8:80:1c:9c:
89:1b:48:bc:26:99:6d:04:b2:2a:51:37:01:d9:f5:
4b:0a:7d:36:03:d3:47:c6:2f:50:1f:bd:57:74:6f:
5e:14:a1:36:be:44:5d:9e:33:8d:e6:ac:17:9a:3c:
0e:91:2b:88:c0:07:9b:9c:6a:7b:6f:6d:41:19:07:
bc:85:a2:5a:f0:66:7d:a4:a0:58:d6:22:5d:df:1d:
63:e6:ab:13:ab:57:0e:4d:65:06:b7:cd:21:bd:c5:
c3:9f:f3:7f:84:04:ff:03:2c:bf:bb:96:3c:59:6a:
6b:d7:7f:95:32:83:b1:6d:98:69:1d:c7:26:e7:9c:
2a:77:28:12:ae:bb:ac:46:fe:95:1c:69:e7:37:6b:
5b:08:fb:53:ed:84:cf:ca:ca:7a:97:d9:42:67:e9:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:43:03:16:8F:25:3D:B2:3A:12:83:61:9F:60:18:E7:4B:DA:87
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:79:ac:e8:02:b5:ee:f0:56:22:61:0b:3f:70:a7:be:09:06:
7b:7a:8f:b1:af:e1:df:d8:6a:de:17:2c:08:c7:a9:aa:52:e6:
c9:5d:16:3c:1e:76:a0:bf:9e:7d:cf:88:be:71:8a:f6:8f:93:
78:6f:b2:76:35:a2:fb:f2:7e:10:06:32:8a:5a:1c:ed:16:bc:
19:dc:59:1f:00:fd:7a:cf:99:17:f5:f0:20:25:8d:fa:36:c2:
84:36:6e:2f:49:10:b3:be:b6:64:44:77:13:96:74:31:dd:fb:
9d:1a:06:50:88:a5:51:fe:d0:d2:74:a3:80:45:b6:32:69:05:
6e:a1:2e:e9:fc:0f:ea:b6:51:d5:2a:89:19:84:70:8f:11:9c:
63:a6:1c:44:68:7b:1a:3a:4f:97:ca:6b:20:89:e3:a1:6d:8e:
99:45:60:70:20:79:aa:81:7e:0e:ac:50:f1:2f:19:5a:dd:a4:
4f:da:ff:fd:b0:cd:ee:8b:fd:ea:b4:c9:b0:52:e0:ca:2d:dc:
eb:bd:08:cb:cc:cf:ac:df:c8:45:82:0e:8f:58:d4:4f:4c:c1:
52:8e:eb:c7:bc:56:66:44:ee:45:f3:c7:43:9f:94:10:02:05:
22:8c:ef:10:22:a7:af:26:48:57:02:2a:0f:0a:de:3b:c2:94:
d0:9a:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:43:57 2025 by rpki-client