Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: YL+t4aPzhQQF8O21IGPqhZYxI2KnahHAtK8Hu+qrYLg=
Subject key identifier: B0:47:11:F7:B8:98:E2:D9:5D:9C:07:BD:CA:5D:13:A8:78:C8:DB:AF
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 01989147C1DC91089E5491FFA464546DD3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 088A
Signing time: Sun 10 Aug 2025 00:00:55 +0000
Manifest this update: Sun 10 Aug 2025 00:00:55 +0000
Manifest next update: Mon 11 Aug 2025 00:00:55 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: zxbdDSvpzVGz1ALjAegeqnin3MCTdVjQXHx6mczn3q4=)
2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:c1:dc:91:08:9e:54:91:ff:a4:64:54:6d:d3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Aug 10 00:00:55 2025 GMT
Not After : Aug 11 00:00:55 2025 GMT
Subject: CN=b04711f7b898e2d95d9c07bdca5d13a878c8dbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:91:85:92:68:39:83:ff:5d:7e:81:11:da:
f6:e3:39:b7:9c:66:d8:6f:71:b2:1a:92:38:84:d6:
74:96:0d:c0:7e:fe:4a:74:ca:4e:3b:93:09:7a:21:
6f:db:ef:d8:9b:ec:39:bf:ce:a4:c8:a8:b0:a5:98:
c9:bb:06:13:ef:eb:6b:68:ef:b5:0f:34:a1:8d:e6:
0e:3a:e4:e4:4b:02:b5:16:24:df:55:1b:50:d2:78:
c0:49:e2:be:bb:ec:d7:8a:25:aa:7f:7b:24:92:22:
47:f9:2d:b1:53:78:4d:76:84:e2:c0:bd:96:1b:3a:
58:9a:7e:ff:c2:df:8d:70:55:50:39:15:a2:1f:30:
a5:83:21:48:4b:f9:a2:b8:f0:4c:68:a1:06:e6:4b:
3d:8a:64:96:2b:16:d7:ad:59:04:81:f7:f6:7d:4f:
76:17:57:db:10:4b:fa:bb:89:e3:81:af:4a:c0:01:
d5:cd:56:da:fd:81:02:5c:c4:fa:9d:a9:e0:fe:a6:
b8:89:ac:b0:59:31:8d:ee:b8:69:fa:98:f6:75:de:
cc:d0:40:91:ff:ad:9b:9a:f4:e8:b6:8b:20:9a:5d:
a4:8f:0f:92:58:79:2f:ac:83:14:55:6b:77:a1:b6:
31:8f:73:38:bb:20:34:ac:39:1b:4a:04:1a:06:8a:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:11:F7:B8:98:E2:D9:5D:9C:07:BD:CA:5D:13:A8:78:C8:DB:AF
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7f:69:54:18:01:e3:94:8f:57:f7:bc:11:a0:99:a5:10:a6:
ff:0d:5e:bb:b2:32:4d:6d:5d:fb:70:ef:da:b8:52:55:35:aa:
36:1e:3d:b4:cb:5d:e7:b7:f3:84:c0:a3:87:2f:66:c3:f9:1c:
11:83:57:0d:de:44:4f:48:12:58:15:84:4a:f1:4f:5c:1e:bb:
11:b5:52:48:26:89:9b:2d:c2:d4:53:82:b3:db:eb:bf:37:68:
9d:8f:cf:ba:57:0a:e3:ba:e2:f2:36:ef:b3:f4:ec:64:18:ad:
33:6e:1b:c6:a0:b7:da:50:94:87:db:f9:6e:16:c0:bb:33:e1:
28:9b:14:0c:34:a7:61:ef:e1:85:f9:4d:d0:27:64:eb:b4:df:
ed:c6:0c:cb:90:fd:a0:d3:66:cd:49:1c:53:b2:bd:4a:af:dd:
30:85:4f:ad:e7:70:45:02:a3:13:b4:09:07:f8:d3:6e:07:e4:
22:4b:9f:25:bd:2c:6a:5d:b6:cb:b1:ff:53:53:0b:6f:96:59:
5f:59:08:42:8c:39:a7:dc:db:e6:b2:62:c2:26:d4:99:da:e2:
d4:f8:ed:b2:06:5b:ad:76:d1:d1:53:be:a1:9a:f8:64:0a:26:
fe:d6:87:ec:8d:17:7f:db:b9:57:7a:38:b6:a8:3b:db:50:f6:
06:44:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:17:27 2025 by rpki-client