Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: a7RZmKBqg6BZYHr0yBW86qtJ/vtGizd3qd+mAAQUJpU=
Subject key identifier: 59:31:18:EB:56:55:43:63:70:8D:D4:B6:98:C5:3C:F5:BD:60:F3:0D
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 01988BEAA70817C162D6987BF82FE1ACC202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 23:01:07 +0000
Manifest this update: Fri 08 Aug 2025 23:01:07 +0000
Manifest next update: Sat 09 Aug 2025 23:01:07 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: CnyqIrTbJR5BPQ3mSSF4liJ2Lso4Tiw5NVqDOtBTIgs=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:a7:08:17:c1:62:d6:98:7b:f8:2f:e1:ac:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Aug 8 23:01:07 2025 GMT
Not After : Aug 9 23:01:07 2025 GMT
Subject: CN=593118eb56554363708dd4b698c53cf5bd60f30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:27:69:66:fa:a9:17:76:49:fd:5b:13:35:
d3:29:ea:ea:fe:f4:2f:7c:72:40:5e:0d:4d:f3:16:
f7:51:d3:71:44:06:8b:69:b5:35:0c:20:b8:05:58:
c8:81:5d:24:ae:a0:6b:b2:84:39:f8:5a:0f:c1:f4:
38:5c:46:85:98:84:aa:b2:8c:c5:4b:65:58:d4:74:
bb:9c:cb:f1:cf:0d:6e:ca:29:51:22:d7:a8:14:bb:
34:84:4e:fd:ed:6f:d7:13:72:75:fc:82:3f:af:7b:
32:23:20:17:06:c5:f9:df:12:3c:f8:f0:74:28:dc:
aa:fd:ce:46:c6:9a:37:ab:63:a1:a3:1c:67:11:81:
3a:43:1f:3d:5f:9a:b8:5d:d6:bf:1d:9a:d7:16:89:
bf:f4:d8:b8:fb:90:3c:a0:f2:5e:85:c2:6a:2e:ec:
af:3f:07:04:b4:8d:48:5c:6f:d4:1e:0c:01:32:ee:
56:52:e4:ab:40:18:a3:95:c2:e8:d7:ec:67:f3:a8:
51:95:69:2e:f4:9c:30:d1:bb:d0:44:dd:d8:d2:43:
55:cd:0c:5a:86:10:24:2b:22:db:67:50:f3:96:00:
a6:43:ba:42:d7:d2:f0:18:09:88:50:aa:df:8c:a6:
b2:f1:a0:5d:8b:11:06:c8:6a:33:95:07:84:d9:09:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:18:EB:56:55:43:63:70:8D:D4:B6:98:C5:3C:F5:BD:60:F3:0D
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:19:d2:e0:1c:76:cf:67:67:89:30:6f:f2:d0:e5:a4:5e:c4:
50:36:3c:09:63:b2:e8:c1:c9:a1:4b:3f:c2:1d:c9:3f:cf:c4:
0f:11:b5:b3:21:c1:df:5d:0d:a9:19:4c:0b:af:05:62:1c:52:
80:91:3f:5d:ea:d7:47:77:d8:64:52:cb:84:6d:1b:bb:d6:b2:
7c:24:38:19:9e:f4:2d:59:61:10:f3:5e:f8:7a:d6:1a:25:13:
2d:9c:44:fa:65:5e:78:72:a5:d4:60:76:65:83:0f:ec:ef:3b:
95:69:e2:42:48:65:b5:06:52:70:13:c0:ea:44:b2:40:d2:61:
7f:bc:d4:31:c7:2c:8c:19:33:49:22:72:17:25:a9:b0:70:67:
1f:25:34:7b:a2:61:d8:40:24:2d:ed:41:58:eb:ca:68:d3:97:
a2:a9:fb:d0:0a:78:88:c5:f2:00:e7:39:49:b9:4a:c7:20:78:
17:1d:31:73:da:de:00:f7:80:ca:08:d9:32:86:9b:03:47:e5:
b1:7b:d0:e5:f2:14:cb:a0:3b:f3:08:8a:d8:2f:7b:6e:32:d4:
ee:fb:97:fe:77:f1:03:bb:29:2c:11:3e:35:3d:86:b3:77:74:
07:a8:fc:85:fe:eb:e2:66:b6:b1:0d:b6:c8:77:59:fc:7e:77:
6e:04:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:11 2025 by rpki-client