Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: EWQkepws2V3wiXilI3BgMBFkskxkVSQaCEOLnAvwypg=
Subject key identifier: 4C:F7:68:79:66:3D:78:52:C6:B7:3F:72:87:DB:4B:FA:08:F2:63:C2
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 01988B7D3EFDCB7B571D52E64F0019FEBE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 1213
Signing time: Fri 08 Aug 2025 21:01:37 +0000
Manifest this update: Fri 08 Aug 2025 21:01:37 +0000
Manifest next update: Sat 09 Aug 2025 21:01:37 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: Us1S8Je/RNrBagjW4OkTxCj0A4gN//OYdqLwM2vjriA=)
2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=)
3: Ui6ZcVR5VSgOavfnIix1oy38mjY.roa (hash: yRTuvXTUZnIOOWWsEOiOGa2OWkTQmK3kH5dqt1VxT5k=)
4: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:3e:fd:cb:7b:57:1d:52:e6:4f:00:19:fe:be:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Aug 8 21:01:37 2025 GMT
Not After : Aug 9 21:01:37 2025 GMT
Subject: CN=4cf76879663d7852c6b73f7287db4bfa08f263c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7e:eb:ed:39:3b:ff:3e:27:2a:f7:89:23:3d:
2a:21:91:ad:8a:8d:ea:8f:0a:b1:b2:93:9a:3e:6a:
04:3b:81:7d:f2:04:d7:a0:ee:3e:44:d0:48:3a:fa:
e2:49:f5:a7:8d:d6:c1:7a:fe:0c:87:db:1a:67:89:
a3:1a:7b:4a:60:45:58:a9:ca:a0:f2:91:0d:76:29:
f2:33:38:da:2a:19:2d:b0:b4:ca:04:30:6b:77:55:
a4:9f:00:5a:6d:45:e6:9a:ce:ee:5c:08:5f:98:58:
11:13:e2:c9:05:ed:c1:66:70:4b:ce:8f:b8:af:30:
cc:45:02:68:d8:ab:4c:87:ac:c0:4d:f6:fd:f2:fe:
3f:7b:ef:53:cc:9a:0a:ee:71:34:07:72:21:29:59:
2b:17:64:fa:6e:c8:af:ba:ba:d0:dd:34:e3:d1:28:
8d:4c:2c:5e:3c:cb:ef:86:eb:bb:d0:06:d6:92:06:
01:dc:39:b1:99:c2:ac:2f:6c:f3:a2:87:8a:84:e0:
1d:55:f7:dc:30:d1:16:fa:df:b7:c8:28:3a:04:5c:
5c:cd:96:1b:67:8f:29:cd:19:51:0c:57:54:21:83:
10:db:92:1a:40:3c:54:f0:3a:15:4b:91:ad:99:de:
ef:90:b5:67:76:53:02:fc:73:7a:e5:84:d9:0b:0c:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:68:79:66:3D:78:52:C6:B7:3F:72:87:DB:4B:FA:08:F2:63:C2
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:60:67:88:c5:f5:73:a0:2d:95:2e:73:51:00:be:9f:c6:50:
bb:c7:d2:25:9e:be:74:af:3a:07:4d:2e:2a:63:b6:05:3d:93:
4f:1a:9c:bd:fb:81:a1:5e:d4:b8:b2:a6:0d:d2:5d:90:a2:13:
dd:81:23:f2:c3:f5:cb:98:97:18:16:0c:53:ff:7b:65:08:df:
26:79:79:df:54:25:0a:70:21:f4:67:1e:87:a1:38:cf:34:6d:
b6:bf:d3:8b:cd:c4:9f:76:79:7b:8b:c1:23:d6:05:f4:e2:11:
0a:56:15:c3:3a:67:77:8b:1e:de:1f:4c:d2:15:8a:e2:fa:d9:
4d:1a:32:f2:a3:75:b2:c0:73:91:71:7d:0d:05:40:64:2b:7d:
39:1e:e8:49:3f:ef:ac:c9:fd:2a:64:0b:75:8d:30:f7:2c:3b:
eb:3f:c7:06:ee:e2:f7:a6:07:4d:db:ec:ca:98:19:14:39:61:
9f:dd:84:3a:46:3e:79:6a:e4:40:5e:c9:62:22:46:d8:1f:8c:
29:74:2f:e8:14:17:e7:cc:22:d9:df:8f:55:c5:4b:0a:73:40:
dc:10:24:ec:33:63:2d:64:fa:5c:e8:3b:2b:b4:61:04:aa:01:
0d:b6:98:91:aa:e1:45:c1:f1:27:19:1e:1d:1f:10:b9:a0:47:
fe:8a:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:16:29 2025 by rpki-client