Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: 4OJX+mbxMUcvEaY67xUTcqT6BF3Ojwun0kl2Lu/fNj4=
Subject key identifier: DD:CB:7E:D1:B1:6F:8D:81:CC:56:02:88:54:BB:21:2C:04:BB:76:D5
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019874F4B4D7BEB2076FC139D4B4B4AC3CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1199
Signing time: Mon 04 Aug 2025 12:00:50 +0000
Manifest this update: Mon 04 Aug 2025 12:00:50 +0000
Manifest next update: Tue 05 Aug 2025 12:00:50 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: kDkC+d8veGzFBdkF/fmLrofslTOUcqclTa16Rsd2olk=)
2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:b4:d7:be:b2:07:6f:c1:39:d4:b4:b4:ac:3c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Aug 4 12:00:50 2025 GMT
Not After : Aug 5 12:00:50 2025 GMT
Subject: CN=ddcb7ed1b16f8d81cc56028854bb212c04bb76d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:d4:ea:d6:a5:89:70:f4:38:0c:87:3e:ae:
23:27:e8:3f:36:ae:27:f9:cb:d4:c0:d2:a8:31:c3:
39:27:12:55:17:b8:53:83:8c:f1:3f:73:c0:1a:4b:
39:ac:32:bc:19:05:62:42:62:55:cf:6a:be:1b:c2:
ed:77:61:96:e1:35:e9:b4:88:c4:ff:7e:7b:29:c0:
96:65:e4:c3:45:0d:f3:64:2b:0c:13:8f:01:c6:80:
b8:a4:d4:00:e8:ea:40:e3:5b:3a:fc:fd:9d:26:4a:
d9:84:7f:04:b4:66:69:a4:be:b4:77:58:c6:99:da:
19:4c:49:2b:b4:d9:9f:66:5a:a8:da:05:d9:9c:a8:
48:12:1e:2d:24:51:67:13:00:ac:1b:01:2d:6c:59:
b5:f3:f8:12:88:84:06:14:cc:1c:66:a3:0a:f4:07:
50:80:0e:11:44:cd:5f:07:3a:ae:52:b8:9f:b0:cc:
15:43:53:4f:02:9a:27:32:5a:90:13:5f:2a:82:de:
e4:8e:c7:64:a0:0b:d0:e0:e5:18:91:64:55:e3:b0:
95:c4:83:d1:85:1c:aa:16:f9:56:ea:c9:49:ee:b8:
5f:70:c1:7d:54:83:33:e8:5f:3c:ee:e3:8e:b0:70:
d4:a7:83:d2:8f:21:ef:7c:d0:7f:ab:81:a2:91:a5:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:7E:D1:B1:6F:8D:81:CC:56:02:88:54:BB:21:2C:04:BB:76:D5
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a2:04:1b:9b:7f:ae:b9:2a:97:91:f9:f2:4d:99:7c:17:f4:
4f:6c:3b:3d:8a:9d:d0:b5:ef:17:52:33:a3:2e:fc:f0:23:40:
9b:8f:3d:4d:5d:bd:dc:87:05:89:4c:09:64:01:67:64:39:3b:
78:11:31:a7:a7:bc:5f:f3:fd:d5:d1:54:f7:4c:b7:7b:31:93:
f5:01:aa:51:f8:cf:0a:6b:92:95:17:e1:69:4c:1d:6d:1d:a2:
24:d5:fd:73:2f:62:b5:71:01:31:2e:30:82:c6:87:33:5e:53:
88:70:f9:dc:25:db:d8:13:da:4f:27:15:a4:a9:ca:7b:d9:eb:
53:80:fd:57:99:f0:d1:f7:e6:2c:90:32:9e:1b:ba:19:66:55:
7c:bc:36:68:3e:09:c9:d5:e5:00:cb:eb:e9:51:1e:51:fa:10:
ea:be:02:a9:01:7c:9a:50:51:1f:d0:27:d4:3c:68:5c:a9:52:
4b:1f:cb:e7:0b:c5:77:9b:41:23:fd:f1:d5:d9:db:01:ce:04:
34:ac:ce:8a:e9:d5:39:f7:68:11:45:91:87:e4:77:12:4b:80:
9c:9f:ff:c7:2d:d8:cb:d7:33:73:5e:69:87:57:97:f6:0d:0a:
cf:3f:85:53:0b:c5:0d:92:21:b3:f1:d1:1e:66:bc:d3:eb:d2:
be:93:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:38 2025 by rpki-client