Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: 11o1Lm0PunKu6mTXaxhUhpnr5ZVSKEUX1m6RiTrXAt0=
Subject key identifier: 33:03:AF:93:A1:C5:F4:1F:9D:0A:33:18:E8:CD:E3:53:CD:F3:F9:83
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019874194DE1FC26C5D4F06918BEB5CDA9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 08:01:12 +0000
Manifest this update: Mon 04 Aug 2025 08:01:12 +0000
Manifest next update: Tue 05 Aug 2025 08:01:12 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: 5AGD3/4J2RhIhtIQRJyWT48LgOVreFmSxwQsR3xZhMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4d:e1:fc:26:c5:d4:f0:69:18:be:b5:cd:a9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Aug 4 08:01:12 2025 GMT
Not After : Aug 5 08:01:12 2025 GMT
Subject: CN=3303af93a1c5f41f9d0a3318e8cde353cdf3f983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:3a:73:98:01:ab:27:50:c4:d7:d9:24:89:
d8:b3:d1:6f:0d:d2:e5:2a:76:85:d7:1c:e6:27:4f:
f3:c7:b5:01:86:67:82:04:c5:b1:b6:71:ef:55:51:
9b:46:a3:98:42:97:6e:2e:80:07:aa:ba:24:f8:bf:
31:5c:e8:d8:d8:f4:f0:13:a8:41:57:94:16:3c:f0:
0b:89:2c:ec:b7:17:bc:eb:3b:a8:9c:9f:0b:ba:7e:
dd:f6:f9:0d:48:55:b4:10:f1:b8:69:d6:da:8d:9a:
45:5b:b0:d8:e4:e4:5a:3f:c8:4f:7c:72:36:45:17:
cf:19:f3:81:28:59:0a:97:3e:a2:d6:3d:f4:53:56:
36:a7:3c:63:12:28:f5:05:ef:34:8f:fc:f0:d7:90:
d7:f8:e0:64:b7:6f:d9:63:9b:87:45:86:ec:8b:bf:
aa:dd:67:23:21:4a:3c:83:5f:21:cd:d8:ea:44:2a:
e2:92:bd:a0:56:1b:e5:b9:0d:19:a5:26:17:c4:e0:
2a:df:49:e7:92:71:2a:fb:6c:ad:91:0d:57:36:85:
69:74:5f:2f:f1:4b:d3:e6:91:59:eb:0a:22:65:ec:
e4:a6:2b:45:41:70:b0:bc:e0:3f:4f:fc:c8:56:f8:
52:c9:75:8b:80:45:6e:c2:31:57:ce:60:4e:96:df:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:AF:93:A1:C5:F4:1F:9D:0A:33:18:E8:CD:E3:53:CD:F3:F9:83
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0e:ef:15:3b:80:6c:9d:f4:5f:8d:51:67:ee:64:5f:38:de:
ab:e1:fe:97:d3:d5:a6:41:dd:48:20:39:6b:a8:52:62:05:b4:
f3:af:d2:6f:5c:ef:a9:66:42:70:30:13:87:3b:1b:a8:5c:ec:
ce:74:09:49:de:5c:d9:25:ae:af:5d:b7:69:34:6d:0d:e7:54:
6d:9f:27:37:e5:3c:05:50:fc:00:f1:0a:cf:14:f1:02:d0:9a:
80:21:c8:87:44:f3:06:4f:2b:c0:39:20:32:f8:15:89:40:56:
0c:8d:7a:52:95:35:37:b4:7b:22:d3:09:88:8f:b8:25:e1:0a:
a7:6a:b3:3a:22:b2:25:a2:5f:fd:28:b5:9f:e2:63:2e:90:9d:
c5:d5:90:51:2c:6d:12:06:7c:10:0a:91:c1:54:e9:b5:ab:6c:
54:ce:46:45:33:d7:f6:9b:d4:2a:85:7e:e0:87:07:08:7e:5f:
e5:98:58:7c:ec:cb:1b:9d:17:51:1e:ca:4b:76:48:c7:64:4a:
77:9a:51:b1:fe:a3:86:41:ad:6e:0e:3d:6e:22:a3:f2:ee:ea:
e0:44:80:c3:6a:3b:65:67:60:c1:e2:f7:c4:3c:91:28:55:8c:
5e:f0:25:d7:17:94:ed:2a:4f:b0:ad:f2:ee:7c:22:ba:4a:69:
46:9c:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:52 2025 by rpki-client