Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: bsNYO+wal6z8u0sgT/M1cxOZEfJ3WsvlGc1kabm/SyY=
Subject key identifier: 57:E8:5D:E5:5B:E0:16:7F:AA:F8:C7:88:C3:6F:6A:CF:82:04:D6:F6
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 019892C939F2881AFA3CB1420769C4FFCFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 07:01:57 +0000
Manifest this update: Sun 10 Aug 2025 07:01:57 +0000
Manifest next update: Mon 11 Aug 2025 07:01:57 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: VbqWgSsxuz8rwRcwJ3MZZk6NlNNchJe8QDZIS/j/2EU=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:39:f2:88:1a:fa:3c:b1:42:07:69:c4:ff:cf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Aug 10 07:01:57 2025 GMT
Not After : Aug 11 07:01:57 2025 GMT
Subject: CN=57e85de55be0167faaf8c788c36f6acf8204d6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8d:10:57:3e:f3:4d:1c:73:1f:73:6a:e9:d7:
e8:d2:22:a4:bc:c6:4f:e4:c0:34:4f:ec:00:ff:59:
3b:e1:a8:15:18:96:3f:cd:be:01:c9:30:b3:a2:c9:
c1:0e:e3:1e:f5:9d:ec:d3:7a:07:2d:49:06:3c:31:
c3:48:68:b6:e0:f7:b4:31:20:ac:42:00:3f:4f:54:
78:70:50:13:16:43:5a:0a:77:ff:4e:eb:7b:a3:2c:
51:78:c6:67:48:fe:a4:16:9d:09:6e:b8:26:d3:06:
56:64:2c:98:1a:95:85:6b:c9:1c:83:c6:58:9d:ca:
fc:54:c3:7e:6f:20:ac:20:34:5f:5d:f3:88:8f:ee:
4b:a1:76:2b:ee:b6:de:eb:04:11:3a:24:e0:52:79:
88:b4:0d:8f:a5:69:70:78:ae:d4:03:0f:07:8b:99:
82:ee:c6:7f:ac:b1:42:be:29:3f:31:18:ad:9f:46:
e3:e1:6b:b9:40:19:5e:85:b7:0f:31:11:33:3a:fe:
42:e8:94:67:fe:6b:d1:31:85:7a:a0:f6:4e:a0:0c:
3c:47:b5:04:48:c4:a0:dd:f4:05:ca:b6:70:32:46:
31:55:86:d4:d2:3a:0a:cc:d7:fd:64:1a:19:7c:68:
94:57:73:b8:24:0d:c8:18:81:fe:d2:db:72:db:ae:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:5D:E5:5B:E0:16:7F:AA:F8:C7:88:C3:6F:6A:CF:82:04:D6:F6
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:f2:b5:b4:ed:42:a0:ce:b1:9f:ff:89:e0:d8:d2:c5:39:
7f:cd:62:45:fb:63:29:91:ff:f5:3f:ae:52:6c:cf:d8:55:56:
a5:e1:31:a0:c6:24:d9:e1:07:af:1e:6d:e3:9a:ac:e7:69:99:
11:7d:8c:1f:86:42:bd:28:54:10:2f:36:7a:6f:74:0e:55:35:
e5:b5:49:03:6d:b2:2f:27:22:ba:4e:ef:15:50:87:4c:0f:97:
a9:5d:6f:67:a8:f5:a5:85:89:62:98:70:9c:06:53:e5:fc:32:
1f:e9:4c:e6:72:54:7a:e6:5f:b0:52:22:81:a6:47:ad:c5:5a:
41:cb:72:ed:70:21:00:e2:ec:01:5d:a3:74:f2:94:a7:09:78:
40:30:c4:c1:b0:35:cd:f7:39:3a:47:de:c0:4c:72:51:7a:5c:
c4:05:15:d8:ff:c4:c5:04:b1:0c:aa:c3:a4:ef:6c:73:94:a4:
a6:d7:00:77:51:76:db:4a:d1:d7:47:a9:bf:34:35:24:8d:e1:
c7:61:7f:33:fb:63:24:5f:f4:88:ae:29:7e:eb:1f:28:0a:5a:
2f:ec:70:bb:6b:41:b9:ca:81:51:fe:67:d9:39:dd:5c:c1:1f:
e2:ec:5c:1d:95:73:7c:13:d5:2f:00:73:4f:17:99:d4:39:3a:
a5:c4:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:46 2025 by rpki-client