Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier: egjZ1TZoUHg2lCEjsOW2BAKfLbfxp2c1XcMiBGxVK8M=
Subject key identifier: 43:5D:10:2E:58:4A:34:39:66:D3:6F:97:1D:74:D6:10:69:61:E3:EA
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 01987D8B1DE2988A79C9BBA9E1119A980E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number: 1019
Signing time: Wed 06 Aug 2025 04:02:05 +0000
Manifest this update: Wed 06 Aug 2025 04:02:05 +0000
Manifest next update: Thu 07 Aug 2025 04:02:05 +0000
Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=)
2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: nDH0Dg0IGijrEogMjQzZ6weYbIT5bn9n9Y4G4qw0M5I=)
3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=)
4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=)
5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=)
6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=)
7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:1d:e2:98:8a:79:c9:bb:a9:e1:11:9a:98:0e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Aug 6 04:02:05 2025 GMT
Not After : Aug 7 04:02:05 2025 GMT
Subject: CN=435d102e584a343966d36f971d74d6106961e3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:f1:d0:9d:df:98:33:84:aa:9d:a2:49:4b:
b4:c0:f9:06:2c:ec:91:79:c9:7b:c1:a9:9d:3c:5c:
74:57:ae:df:b3:25:00:db:f8:81:7d:c0:95:a2:62:
43:f3:06:c6:c1:5b:ff:d3:46:d4:df:2f:01:23:72:
c2:86:01:62:67:6f:39:74:f8:b8:05:19:49:52:a3:
02:ae:e0:ba:be:65:56:b1:45:a7:64:3f:c5:4d:13:
fe:08:5e:61:61:3e:75:83:0f:7f:81:da:8a:5e:6d:
60:dc:0d:d1:97:80:9b:52:fa:ba:06:6c:34:d9:34:
79:df:af:e2:f3:0e:fc:eb:1c:88:2e:66:b7:64:fa:
9f:7d:b3:2a:2e:fd:1a:98:94:d4:3f:d6:9c:40:13:
95:94:1d:a3:03:85:31:04:02:d1:c0:5f:7f:6b:d2:
51:53:71:27:3e:a0:4a:65:df:27:b4:a0:f2:e1:ec:
59:50:a0:fc:2f:10:4c:97:b5:ba:47:a9:9c:04:a7:
a8:59:e0:7e:d8:5e:4b:45:19:64:91:24:fd:58:6a:
aa:2c:43:32:e0:c5:65:f6:35:36:72:a5:74:7a:78:
62:bb:db:70:93:a3:a4:aa:6b:11:55:0e:3e:45:aa:
a9:80:55:59:7a:4e:53:16:77:2a:d2:ba:63:b6:8e:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5D:10:2E:58:4A:34:39:66:D3:6F:97:1D:74:D6:10:69:61:E3:EA
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6b:dd:1c:5b:73:d2:8c:2a:33:8e:8f:af:6b:be:80:fe:c3:
f2:ea:09:a2:65:0a:6d:a2:23:bc:c2:3c:8b:b0:9a:ab:0f:2e:
a2:55:d9:bd:41:4d:66:e1:5c:72:25:44:90:32:46:4b:86:4f:
8e:ce:65:d1:0d:0e:89:15:38:f0:eb:34:f2:d0:35:a8:62:52:
97:34:1b:ff:f1:a2:0e:cb:64:44:30:40:12:86:6a:7a:6c:6c:
78:60:ad:53:e7:11:46:7d:e5:ff:20:36:90:34:42:ac:4b:fa:
23:ff:8e:a0:9c:7d:71:a1:9f:73:82:0f:82:eb:61:40:1e:4c:
7d:55:c6:ce:3b:ed:69:36:03:90:31:74:c0:6f:f7:7d:10:a8:
f0:78:dc:1e:06:35:ef:3e:23:3e:92:8b:92:a3:d7:b1:46:28:
f3:d9:1a:0a:c1:58:80:69:b7:85:a6:17:08:6b:c6:48:e2:23:
ca:2d:4a:74:2f:78:9b:71:3b:8f:00:78:20:9e:26:0c:e9:fd:
20:87:dd:14:6b:a9:19:ec:67:b4:2d:8b:5d:da:2b:32:f9:72:
7e:f3:f5:f7:ad:92:f9:52:3e:93:27:ac:8e:57:22:30:4e:b2:
c6:cf:04:8d:25:6d:5d:b1:14:d6:57:51:42:e9:7d:ff:9c:bf:
57:18:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:50 2025 by rpki-client