Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: RtCSOyQO9TpbzX06+u8ZMpVq2GHi6LqaT2XGD8l38Oo=
Subject key identifier: DF:59:8F:0C:01:FB:D7:FD:35:A6:CC:96:74:73:A4:1F:5B:E3:74:6F
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019873E309945CC76F7BCC2906A0E0CCF2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: C1
Signing time: Mon 04 Aug 2025 07:01:55 +0000
Manifest this update: Mon 04 Aug 2025 07:01:55 +0000
Manifest next update: Tue 05 Aug 2025 07:01:55 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: 0MxvfiPvEUw8voTzpTo4iGChD+U/7znL+NDnTwl5JRQ=)
2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=)
3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:09:94:5c:c7:6f:7b:cc:29:06:a0:e0:cc:f2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Aug 4 07:01:55 2025 GMT
Not After : Aug 5 07:01:55 2025 GMT
Subject: CN=df598f0c01fbd7fd35a6cc967473a41f5be3746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:ac:e1:ed:4d:41:8b:0e:8c:55:0c:c8:5e:
2a:76:ce:2a:da:26:0f:b8:e1:93:c1:a7:be:8f:ac:
50:ad:61:d2:f5:4c:6f:e4:16:ce:94:4c:18:f9:59:
7e:f1:7a:b4:ad:72:69:da:25:ba:d6:39:73:1d:e0:
fd:df:bf:91:0c:ae:26:83:07:d3:6f:78:d0:fe:43:
83:2e:62:aa:c0:bc:f3:4d:37:df:78:91:7e:61:b5:
e7:c6:79:e2:8b:00:8a:d2:22:df:4e:01:ba:6f:cd:
ab:a3:24:67:9d:39:c1:5e:07:f5:45:09:bd:e5:0a:
84:b7:3b:72:3b:0d:48:0b:85:26:10:c8:f0:36:09:
c6:8e:df:4f:ab:bf:de:a1:bf:e6:06:b9:f8:22:b0:
9a:4a:1a:06:29:df:fb:e0:b7:e2:28:3c:a0:f6:77:
28:70:bb:c7:12:3c:ce:2b:29:84:38:19:47:cd:7c:
54:b4:a5:a3:f2:2c:7c:59:fd:2e:44:68:5b:17:53:
75:38:3c:ef:c8:e3:9f:03:ed:17:13:a1:b4:0a:e2:
a1:17:fa:97:5c:c4:54:a8:52:29:30:9a:b4:ca:81:
ef:a5:dc:03:e5:ea:17:22:b3:2b:74:27:c2:0e:3f:
59:c3:d1:ae:7f:80:e5:fc:1b:7e:06:65:63:43:83:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:8F:0C:01:FB:D7:FD:35:A6:CC:96:74:73:A4:1F:5B:E3:74:6F
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7c:88:d0:0c:d4:7b:92:26:4e:e7:28:ac:c5:dc:8b:e5:e4:
ce:83:8a:c3:a7:66:a3:e5:7b:0a:71:45:4b:11:42:ea:50:99:
fa:54:45:ba:d7:93:f1:42:36:3f:a8:a9:8e:0f:b4:ed:53:21:
e0:75:09:4b:e6:4a:c2:f5:d1:c3:5e:99:fd:68:ad:b3:50:9b:
0d:e6:1e:f1:92:c3:e8:b5:61:4e:10:1c:c5:df:50:a1:ab:2a:
f1:62:68:2d:0d:6d:1c:21:fe:87:c9:a3:4c:e4:4b:40:6d:78:
94:f2:6d:8a:0c:37:0d:1b:e1:da:81:e2:c4:61:c4:9e:17:ef:
fe:39:e2:c1:d8:a3:38:03:9d:3e:e7:e5:f4:71:3f:c3:29:32:
95:33:ee:e6:02:fd:50:de:7d:1f:51:c4:98:a6:ff:4c:d1:39:
9c:db:5d:0d:87:d9:77:f7:61:40:7b:2c:78:c6:96:cf:19:ed:
7e:6a:10:6a:3e:b9:7a:4a:4c:e6:e4:ea:a0:05:09:7d:0a:fc:
61:7b:d6:74:38:96:2d:04:28:9d:a1:96:d1:96:c3:48:cb:5d:
b4:db:a3:4a:f3:68:20:9a:b9:4d:eb:a0:26:62:6b:d4:0b:8d:
a5:a3:b3:37:69:96:60:8e:35:1d:5f:3c:6a:f2:5b:db:28:50:
ef:31:13:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:36 2025 by rpki-client