Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: t0w1vKjeHuiJT9s7Aa1bC1DJF7mR3KMvo6tKWU3A7SE=
Subject key identifier: 44:A2:95:E5:7D:9E:9C:E8:F1:02:F8:6C:1E:8C:F6:57:D9:66:48:F1
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 019888B272D39B0475B62A3854B9C602A4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1627
Signing time: Fri 08 Aug 2025 08:00:52 +0000
Manifest this update: Fri 08 Aug 2025 08:00:52 +0000
Manifest next update: Sat 09 Aug 2025 08:00:52 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: TUnGOJdFRlPgEql40WQnClBVF1hhVpJofp8VP2gZcrQ=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:72:d3:9b:04:75:b6:2a:38:54:b9:c6:02:a4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Aug 8 08:00:52 2025 GMT
Not After : Aug 9 08:00:52 2025 GMT
Subject: CN=44a295e57d9e9ce8f102f86c1e8cf657d96648f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:df:34:83:ff:bb:93:47:8f:22:0d:8f:ce:
ac:70:62:73:02:4b:66:5f:be:ba:5f:70:f2:5f:a0:
35:05:36:25:7b:a1:03:86:d8:64:1f:83:4a:cd:c8:
e6:47:b5:f0:19:e4:82:f5:50:28:82:0a:59:2e:fc:
52:0d:ec:f8:51:de:4c:34:47:78:f3:19:8d:9b:e4:
8e:dd:c8:6f:f5:97:6f:a0:a2:0d:52:fa:a2:80:95:
52:8d:d9:e5:72:ef:53:7b:74:30:04:92:46:f6:14:
ce:76:2f:4d:87:de:da:e5:76:f4:69:ce:3a:cc:ef:
23:13:79:e3:e2:04:72:65:12:c9:9a:f4:d5:ee:5a:
e2:e1:70:8d:e6:e5:f1:c0:50:ee:7a:7d:b7:1e:03:
c1:c6:ef:44:0d:fd:1e:e6:b4:8c:f3:2f:e0:5d:d5:
76:d5:35:c7:7e:f9:9b:32:87:99:62:67:1b:cc:aa:
21:d5:43:ff:b9:6f:27:33:5e:40:4c:86:b3:f9:fb:
4f:5a:dc:95:bb:e7:9b:80:02:73:3b:62:c9:bf:f4:
ff:c1:c5:c8:3f:78:4f:10:d3:f8:fa:ec:5f:f5:15:
0b:5a:09:e5:41:43:33:c6:68:ff:9e:39:7d:99:6e:
c5:48:97:c1:e4:ed:29:f6:77:84:e0:d6:ba:60:46:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A2:95:E5:7D:9E:9C:E8:F1:02:F8:6C:1E:8C:F6:57:D9:66:48:F1
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cf:55:dd:d6:ea:e1:fa:3b:1b:c5:13:3f:01:6d:b6:b2:c2:
07:f5:bf:32:7f:0b:e8:0c:3f:e5:fb:a7:e7:ea:36:59:54:4f:
0d:c9:4f:20:8f:d7:cd:1a:d7:63:a7:a0:fc:cd:3e:57:84:7e:
68:d9:b4:f7:aa:ae:92:df:79:ce:1b:63:4a:dd:d3:0c:30:cb:
ff:fd:e4:d9:18:e7:5b:6a:0f:df:94:53:e5:28:ca:70:7d:57:
02:f0:71:1f:d0:94:4d:43:d8:81:e0:1b:86:1a:76:23:2d:f3:
89:a1:b1:c1:45:70:4e:fd:2d:b3:d4:10:08:50:16:64:fa:a0:
39:4e:37:c9:67:77:18:50:d7:e5:c3:8d:38:ad:ab:c3:6f:54:
f4:9a:d5:8d:a6:d2:1a:a4:ff:3b:d5:c4:40:4b:6a:96:54:02:
a8:95:63:6e:73:bf:82:5a:23:85:63:55:74:ae:45:4d:26:95:
b7:dc:28:81:58:99:25:fe:ee:fb:b0:ec:b1:59:0d:d6:f5:b3:
9b:a3:4b:28:c3:91:21:4e:54:bc:0f:26:e4:8e:f6:27:af:c8:
0e:13:81:04:a4:b6:64:7f:36:7a:cf:77:87:3b:01:ec:74:32:
39:30:2a:be:9f:9d:0c:d4:ae:28:f2:1a:a2:8a:4f:87:3e:89:
58:38:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:13 2025 by rpki-client