
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: xOyrs8mpjnSriSM7T+fuRL4Z50k6UZ9PNPzZHOgE7Zo=
Subject key identifier: 30:9F:18:7E:F2:E1:53:C9:75:7B:A1:1C:FB:87:20:6C:19:CE:26:CE
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 0198733D9B9282A4837E4CF1F74C860B7CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 1605
Signing time: Mon 04 Aug 2025 04:01:13 +0000
Manifest this update: Mon 04 Aug 2025 04:01:13 +0000
Manifest next update: Tue 05 Aug 2025 04:01:13 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: KqtwBNod2XaTftJ/J2yoH6mUvZIcHsMF9lyw59Fip7s=)
2: j0TS7sWufeH5UA9R8L5Lar1dfN8.roa (hash: 4uoOp+ywbPIH2GvAsL/CI2u9RgmZPn6i2PjYhgr/qBg=)
3: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:9b:92:82:a4:83:7e:4c:f1:f7:4c:86:0b:7c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Aug 4 04:01:13 2025 GMT
Not After : Aug 5 04:01:13 2025 GMT
Subject: CN=309f187ef2e153c9757ba11cfb87206c19ce26ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:63:f9:f5:70:d9:be:5c:e1:3d:4a:44:69:
57:4a:7e:db:54:d0:86:2b:ea:8c:5b:3c:b6:b1:22:
d1:75:a6:dc:68:88:e9:ac:0f:b6:c5:ac:6e:64:ed:
9a:78:c5:a4:b6:bd:b6:d9:8e:cf:99:03:d3:69:60:
f0:83:03:16:14:1a:79:66:90:59:34:28:34:00:7b:
ee:81:c7:09:50:83:d1:d4:fe:f1:50:b5:a3:e5:8e:
4c:a9:65:30:ad:f0:c9:20:ae:9d:20:a4:38:34:5d:
ce:6e:e1:c2:e0:aa:36:6b:fa:53:cc:b9:dd:58:af:
56:7d:3e:b3:63:84:af:95:04:a5:72:e0:44:81:5b:
4a:bd:96:ea:ed:09:af:64:fc:fe:ae:2b:ea:f9:a4:
45:b5:30:25:7a:de:7c:fe:70:a6:9a:36:30:8f:f8:
7b:be:9e:5f:bb:f5:48:10:31:ec:a8:09:33:d3:de:
50:34:c3:9a:ef:1b:00:52:ae:59:f4:52:b3:2b:49:
bc:0e:e6:85:f3:42:19:a5:a2:8d:3d:d3:e2:ea:57:
71:86:cd:46:fb:9a:46:53:c9:aa:fc:c0:b2:fe:58:
a5:af:5c:dd:62:9d:7b:e9:38:d4:4f:26:2d:15:c5:
82:d9:ee:5a:6b:e3:7e:ca:0d:f1:1e:1f:af:40:92:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9F:18:7E:F2:E1:53:C9:75:7B:A1:1C:FB:87:20:6C:19:CE:26:CE
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:52:de:e1:8c:4c:90:50:e2:78:0c:be:f3:92:e4:a0:40:
e4:41:de:92:7d:09:0e:5a:92:85:fb:e6:70:3d:4c:72:cb:c8:
34:07:c8:cf:26:95:04:93:64:66:43:7e:b1:09:44:91:08:c9:
80:02:0b:55:40:dd:29:ee:cb:90:58:11:2a:cb:cb:69:5b:4e:
49:cc:8f:e0:a5:59:be:f1:38:1b:74:cc:72:34:bd:fe:35:41:
71:7c:b5:68:cb:77:05:a5:b4:84:86:9e:d5:96:9a:ba:85:22:
97:25:9d:c7:bf:a5:b6:89:86:2a:8f:28:b9:39:bf:4a:1e:d2:
14:32:bc:19:86:11:e6:03:ee:26:fb:e7:56:ed:98:d3:e3:5c:
4f:4c:3c:0b:8b:30:4a:de:ef:9e:88:1b:f7:90:a4:e1:43:d6:
b2:d3:aa:6c:97:35:7f:01:2b:27:6d:cb:fe:bb:96:51:6a:e8:
53:cf:09:78:8a:4b:f0:f4:fb:07:77:9d:aa:79:32:51:48:71:
d6:31:ed:41:d7:e0:54:23:8a:15:29:53:5e:06:cd:4a:36:84:
68:8b:3c:7d:94:b7:61:e0:09:be:2c:84:50:d7:95:e8:93:4e:
58:b8:63:5d:5a:50:ba:5b:27:e8:44:fe:be:ec:00:84:27:70:
c3:05:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:47 2025 by rpki-client