Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: xIKgRguBhCjPxOnNwBqMTDUYAwr+t7oBUw0EYOGQJYU=
Subject key identifier: 54:30:B8:83:F1:18:88:69:A1:62:63:F9:4B:66:F0:AD:F1:B8:2F:C3
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 0198745017EEA7D27C31F94D2F9052CEAC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:02 +0000
Manifest this update: Mon 04 Aug 2025 09:01:02 +0000
Manifest next update: Tue 05 Aug 2025 09:01:02 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: 7KVQtVgZk4nvP7MiuJrOqSThVIsIFcnqe/dNHHMUfwk=)
2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:17:ee:a7:d2:7c:31:f9:4d:2f:90:52:ce:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Aug 4 09:01:02 2025 GMT
Not After : Aug 5 09:01:02 2025 GMT
Subject: CN=5430b883f1188869a16263f94b66f0adf1b82fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:23:b7:67:9f:ce:00:d3:bb:59:d8:bf:15:
d8:3f:13:6e:99:f2:45:69:1f:1a:b3:68:c4:19:59:
2a:66:c9:ec:48:ce:a5:c6:f6:5c:3a:24:22:ed:c9:
d5:7a:da:b4:40:a1:f1:b0:c3:cf:85:54:c8:3b:ba:
a9:2c:b8:35:00:6b:c5:95:02:ab:87:7c:50:9c:4e:
88:23:de:57:66:80:8b:82:d9:00:15:60:d5:cb:74:
25:1e:51:bb:db:ba:41:26:3e:6f:38:bc:5d:b2:1f:
23:47:07:c7:1c:c7:9e:a1:a5:f2:bf:5b:95:38:23:
6e:9c:56:44:d4:77:f8:28:13:3a:ca:67:51:cb:15:
5d:24:b9:58:ed:cb:d6:4f:20:40:db:14:fb:33:b8:
2c:6a:03:8b:e7:1a:ac:41:de:2d:8d:3e:5b:58:0b:
2d:fd:1c:ed:2b:ac:b0:c0:43:8e:23:a5:9f:2d:52:
2a:2c:e9:e1:10:cc:f6:20:f1:9d:a5:9f:ab:db:4d:
98:3a:b3:7f:62:72:e0:1c:7d:0e:53:e2:20:e7:db:
51:6d:cd:fe:42:f3:37:a6:28:5f:32:b4:0c:85:8b:
99:81:0f:82:7d:a6:a4:09:98:38:df:9d:40:0a:b9:
7c:41:2a:09:66:bf:f7:e9:9f:4c:b9:dc:60:71:be:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:B8:83:F1:18:88:69:A1:62:63:F9:4B:66:F0:AD:F1:B8:2F:C3
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bf:cd:a6:70:5f:50:bb:4d:ea:1a:bf:63:ee:60:7c:e0:79:
6d:bb:17:65:fc:3a:d0:36:36:1b:8e:b4:ab:b2:5e:1d:f2:11:
27:7a:7c:9d:3a:84:25:ea:12:92:3c:23:e3:b5:72:d0:d5:be:
d8:ee:c5:54:a6:b8:86:fc:2a:09:cf:42:a0:61:c3:f9:ab:7b:
72:cc:14:96:a1:df:74:57:36:4a:ca:5f:6c:a4:a2:e4:1a:5a:
a5:d7:25:ca:91:c5:19:1d:21:ee:38:cf:0d:d4:ea:de:6a:a9:
ca:21:8d:07:2c:fe:5d:63:71:8a:d4:bf:ac:5b:97:41:47:78:
a9:88:9e:c1:f5:49:27:6d:6b:ce:5d:7a:a9:65:b7:01:14:f3:
66:5b:07:95:52:b9:50:f2:d2:87:e2:75:32:5f:08:63:ba:fe:
70:af:45:70:a3:d8:68:ce:78:36:c7:92:7f:39:50:99:00:a4:
9f:ee:bc:68:3f:3b:e4:65:b6:3e:d5:26:74:b2:23:87:0f:f8:
89:f9:60:c1:bb:dd:78:ff:f8:6e:30:f4:9f:f7:67:dc:51:94:
d1:eb:77:79:06:13:48:bf:b8:1b:98:0d:0d:8c:2f:90:d1:80:
1d:1c:c7:67:84:2a:53:b3:58:55:33:f1:a4:4e:11:a9:9c:57:
5b:4a:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:07 2025 by rpki-client