Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: sGcpty5FsP62eb8GU26KUTETwSGozdDhMz4HQL3EdY4=
Subject key identifier: A7:65:C4:8B:EF:F1:13:55:A3:6F:39:D7:D2:28:B4:8D:F7:73:E0:0B
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019889FBB81919EBF2167371D90A6CEE2BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1629
Signing time: Fri 08 Aug 2025 14:00:31 +0000
Manifest this update: Fri 08 Aug 2025 14:00:31 +0000
Manifest next update: Sat 09 Aug 2025 14:00:31 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: 8EsX6DI0/+vPHCKFrUZC/bXPfyDwVZxU1msCLUPiR8E=)
2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=)
3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:b8:19:19:eb:f2:16:73:71:d9:0a:6c:ee:2b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Aug 8 14:00:31 2025 GMT
Not After : Aug 9 14:00:31 2025 GMT
Subject: CN=a765c48beff11355a36f39d7d228b48df773e00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:35:48:8e:4b:a9:f6:c7:da:78:8d:67:a8:
e9:9e:5e:67:f2:2e:33:34:43:55:37:fe:dd:7d:a0:
67:e2:f6:9c:96:0a:d9:6e:de:47:0d:2e:29:52:5a:
78:2a:f5:7d:ef:0b:ce:54:8a:1f:dc:d2:30:4c:60:
ab:19:c6:2a:6c:21:71:2f:cb:c9:93:a3:2b:98:0e:
14:f8:0a:52:42:60:e7:72:a7:7c:e7:7c:2e:5b:63:
f5:16:b9:4d:cf:4e:d9:78:e9:c1:98:86:87:0d:09:
88:17:11:0d:bf:15:a8:05:ed:02:ae:9d:b7:6c:da:
11:7b:64:f8:1a:84:0b:50:b1:5f:90:cd:2a:de:61:
2f:df:58:cc:e6:ac:03:a6:fc:33:8e:00:98:fa:32:
d3:57:d9:44:98:a8:60:bb:5e:0c:a0:e8:00:2d:69:
2d:f5:79:42:f9:44:8d:99:e3:1d:28:06:b1:ee:d3:
b3:c2:6c:ca:8a:4c:17:31:14:bf:ec:4a:f8:78:05:
e5:40:1d:3a:38:88:46:45:7e:46:19:eb:10:c7:e6:
fa:8f:3d:c7:af:c9:ac:ef:b7:9b:70:2b:56:19:6e:
bd:7e:95:24:05:38:c7:7e:71:f8:db:fc:ac:f8:3c:
84:43:89:d5:22:bc:d0:f2:c0:c6:a7:d1:7d:3d:9c:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:C4:8B:EF:F1:13:55:A3:6F:39:D7:D2:28:B4:8D:F7:73:E0:0B
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7d:f4:27:95:42:c0:86:b1:63:62:8f:f6:d8:f9:ca:7a:44:
1a:82:1b:51:36:10:4b:66:58:92:17:bc:cf:4e:2b:72:50:c9:
f1:2a:d5:df:f5:96:7e:42:2e:45:26:02:57:6b:6f:a1:a7:77:
85:ea:44:36:08:56:81:e6:a7:13:5e:2f:a4:27:0f:1c:61:4c:
18:4a:21:94:7b:48:55:dc:0f:6c:62:8f:c6:a8:97:6e:a3:20:
7f:eb:8e:0c:44:ae:d6:a2:9d:47:42:c2:ec:6b:76:75:e0:f8:
d6:e4:87:ae:9f:26:af:88:bd:9f:86:40:41:75:24:82:19:b4:
8f:92:4f:c7:b3:68:56:61:df:b5:e5:2e:9a:f0:b1:68:e7:05:
2b:bb:03:31:05:ae:2c:ca:63:32:5a:ea:19:8e:ce:a0:d3:f8:
79:30:ad:ec:3a:d3:d5:af:5e:f6:84:e1:87:19:13:44:f5:14:
a4:73:e6:59:37:96:e8:37:a2:77:ef:cf:bb:e2:23:9f:fb:ce:
20:f5:ca:ca:77:a8:96:e3:4e:d1:06:9f:08:a6:a7:9c:f8:f0:
f1:73:7c:57:fe:dc:2d:39:ba:75:5e:93:45:c9:61:be:14:6b:
61:40:4b:f0:7a:35:e2:cf:8c:c2:d6:90:77:de:0b:da:65:8b:
33:9b:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:42:44 2025 by rpki-client