Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: 51WJ8My3MGzq45+9IbRb4uKIC07XOgYprBFEU9eVdwc=
Subject key identifier: 18:76:CE:9A:84:DA:4A:EB:51:6B:76:B9:66:BC:75:61:23:B3:AA:65
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 019892C94632C125B8D5B9FDE8C6E390D6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 11D1
Signing time: Sun 10 Aug 2025 07:02:00 +0000
Manifest this update: Sun 10 Aug 2025 07:02:00 +0000
Manifest next update: Mon 11 Aug 2025 07:02:00 +0000
Files and hashes: 1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=)
2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: Wc1bLeZ1aba9swiKJ5cvAlMEEMd6KGPwzhwj8uJ/WSI=)
3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:46:32:c1:25:b8:d5:b9:fd:e8:c6:e3:90:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Aug 10 07:02:00 2025 GMT
Not After : Aug 11 07:02:00 2025 GMT
Subject: CN=1876ce9a84da4aeb516b76b966bc756123b3aa65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:4f:b6:a1:bc:77:ad:4f:82:38:57:7a:cc:
17:9b:17:e2:84:ce:ae:42:1a:a1:25:45:b0:7b:4e:
be:8d:4c:34:4c:87:e3:84:0d:cc:f6:29:5b:39:1a:
7e:7a:22:0e:8b:4e:d9:7a:c6:83:85:6a:7d:2b:21:
de:b8:64:32:fb:eb:35:8c:ce:13:82:4a:07:36:fe:
69:24:e0:e1:bf:54:9b:44:4c:01:d9:3d:e2:04:9d:
b4:f2:1e:5e:42:20:64:2b:57:6c:a9:73:f5:7c:ec:
08:41:b9:30:5a:ee:aa:e2:c8:84:68:d9:27:ba:39:
4f:e3:31:c4:bf:87:88:0f:3c:86:29:26:10:d5:5a:
8f:72:57:ba:18:04:a1:1b:cb:43:64:45:f6:d4:81:
b0:91:0e:07:81:af:0b:2a:e3:e9:54:10:fa:55:7c:
ea:5a:7f:99:19:d8:62:77:ec:ac:38:5c:ad:d7:cd:
dc:5c:e8:91:95:c1:38:14:8e:ce:cf:32:04:5c:99:
44:18:b7:0f:72:6c:4f:04:f6:2d:08:0b:13:05:b2:
18:c6:d9:81:59:4d:c3:96:3b:c3:d8:30:d8:e8:1b:
99:98:b8:27:5a:17:55:1b:16:2c:41:90:d4:14:3d:
75:ea:bf:dc:9d:35:dc:c6:39:b8:23:50:f6:2d:72:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:CE:9A:84:DA:4A:EB:51:6B:76:B9:66:BC:75:61:23:B3:AA:65
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ac:a5:2c:af:7f:1b:58:fb:61:99:dd:d2:88:25:81:90:d2:
57:e6:83:dc:9e:90:c6:78:03:6f:1d:38:e8:b1:5e:71:32:d0:
bc:65:ff:68:3b:c8:e3:56:f4:c1:82:98:3e:38:47:c1:4a:c4:
ed:c0:66:7c:a7:d0:66:f6:64:42:4a:03:58:95:ac:06:32:06:
13:68:3b:e3:ff:33:de:c8:4b:0c:6e:81:08:5a:ec:0e:96:0f:
f9:5c:31:77:87:5d:22:82:41:78:9c:cb:8b:0f:c3:5c:5e:07:
48:87:96:a9:d7:0f:32:83:f5:25:19:b2:94:b4:65:ee:b9:e5:
17:ef:c4:5b:7b:05:45:ca:00:05:1b:5d:ae:f2:da:bf:3f:0f:
4f:74:fd:7c:84:28:80:bc:39:59:54:31:b4:60:a3:b5:5a:8a:
ef:f7:0e:34:1b:af:41:cf:3f:1a:7d:1a:44:70:4e:d8:0d:01:
07:b4:49:f0:c5:6f:26:c5:a6:10:68:82:56:6a:98:48:22:08:
ad:24:d3:50:05:09:0a:e5:6e:a5:e8:8f:fc:ad:f2:d8:0e:a4:
f7:69:06:92:c2:9c:28:5c:02:2a:e8:06:95:68:e9:55:7c:be:
e2:ec:fb:45:3f:e4:96:b7:d8:1f:26:d9:04:4b:f3:d9:30:6a:
be:1b:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:26 2025 by rpki-client