Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
File: 8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json)
Hash identifier: kKsQaWpiDaSGI42x2Qw+rgkA7GZIrakIc7ATxnZKtx4=
Subject key identifier: C5:10:78:40:40:60:22:EA:40:21:D5:AF:5C:37:56:E9:47:E7:C8:B9
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 0198819E58E82AA4D4B0DCD38BC23894D569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
Manifest number: 1570
Signing time: Wed 06 Aug 2025 23:01:34 +0000
Manifest this update: Wed 06 Aug 2025 23:01:34 +0000
Manifest next update: Thu 07 Aug 2025 23:01:34 +0000
Files and hashes: 1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: e82STDKSACUqaYVDyoc4Opw3mAb2wcRafIjUXQuKmbo=)
2: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (hash: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:58:e8:2a:a4:d4:b0:dc:d3:8b:c2:38:94:d5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Aug 6 23:01:34 2025 GMT
Not After : Aug 7 23:01:34 2025 GMT
Subject: CN=c5107840406022ea4021d5af5c3756e947e7c8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:e3:ce:be:84:ab:07:d7:3e:3b:32:73:6d:
5b:a0:6c:00:13:9f:65:ab:7f:1c:05:30:bb:68:54:
99:5e:b4:0c:98:b2:0d:63:91:58:fd:6a:66:30:cf:
97:9c:44:c6:67:78:ca:3a:1a:2f:f7:61:d7:c4:d4:
6c:93:a7:51:cc:65:89:1d:07:3e:1b:72:4d:b2:3a:
5e:cd:a4:68:05:91:ac:55:34:b8:6b:2f:9b:8f:35:
fd:e8:08:51:d5:1e:8a:af:17:40:a1:49:f0:e6:7b:
a8:2b:09:ce:92:de:5c:0a:fa:ca:9c:b5:16:2c:e3:
94:f2:6c:9b:98:2f:fe:87:ad:56:f1:83:85:ee:d3:
66:20:4c:cb:2a:b1:02:1f:43:2a:74:f4:4e:a4:a5:
5a:01:b1:83:8f:bb:51:67:38:ec:90:96:e2:b5:fb:
f5:7a:3b:8e:f4:c3:e6:53:e8:7b:5e:84:49:aa:e9:
4b:e7:02:23:a1:09:46:80:bf:a2:1b:5c:10:b9:e4:
4f:d7:03:71:db:87:84:54:b1:13:78:28:41:af:5b:
2b:0a:4b:fe:d2:3c:d0:3a:f9:7f:a9:2c:43:6b:0c:
17:a8:c4:a0:44:a7:a3:f0:e1:39:5c:51:b7:ac:2b:
81:6b:6a:11:87:78:1f:de:5b:a7:f6:d6:76:01:8e:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:10:78:40:40:60:22:EA:40:21:D5:AF:5C:37:56:E9:47:E7:C8:B9
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:45:54:87:49:65:ec:20:95:1c:05:b5:22:3e:f7:d6:a3:37:
a9:6e:33:de:60:af:06:63:08:9c:22:0c:18:29:c4:b0:ff:bb:
63:f0:20:da:87:1c:b6:3b:1f:f6:d2:85:80:da:67:17:60:1e:
39:37:87:12:e1:8b:57:85:2a:c6:8e:90:97:3e:67:a4:b3:7b:
cf:c6:48:6b:3c:1c:71:00:0b:84:12:8f:37:e6:ee:b3:f8:89:
96:b0:6f:74:02:93:02:24:bb:af:13:16:2d:7f:6e:58:21:d7:
30:5d:16:c3:41:0b:d0:40:ff:db:6b:47:a7:4f:9c:36:da:aa:
4b:c8:eb:3a:e7:02:4d:aa:af:ae:2a:be:e3:ba:01:ce:45:9d:
05:5e:cd:44:25:68:a0:35:4c:dd:36:4f:3b:36:96:78:4c:f6:
2c:08:5f:f1:ce:ec:4b:79:8f:5d:b6:64:9e:d6:2b:d1:e0:15:
65:5d:f2:cc:ab:70:c0:00:b1:02:da:e1:45:ae:4c:6e:48:e6:
59:98:75:d3:c1:b5:04:56:f9:f5:1f:21:37:c2:c9:3d:9a:bc:
46:a5:bd:ba:e7:6a:f5:f6:2d:8e:27:76:7d:07:7c:62:84:26:
32:8d:eb:3c:ce:c5:e2:a1:b5:e4:49:bc:6a:8a:cb:a2:38:9d:
a0:5b:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:31:14 2025 by rpki-client