Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: 25oiWNuwD6yvlkQ8Qs5bD650sREG6jCUIG0njv2vugI=
Subject key identifier: B0:DD:1E:F4:0F:77:B7:D1:C4:54:57:BB:55:4A:92:BD:D4:98:5F:EB
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 01988A6998924FB00B5D22618F144A93852D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 16:00:32 +0000
Manifest this update: Fri 08 Aug 2025 16:00:32 +0000
Manifest next update: Sat 09 Aug 2025 16:00:32 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: Vk58bkHjuscF/pfAn0cF3eUlHuFjizqBUILWV6KQYY4=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:98:92:4f:b0:0b:5d:22:61:8f:14:4a:93:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Aug 8 16:00:32 2025 GMT
Not After : Aug 9 16:00:32 2025 GMT
Subject: CN=b0dd1ef40f77b7d1c45457bb554a92bdd4985feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:cd:bf:5e:42:c4:fe:1b:e8:c4:ec:01:bf:
2d:15:aa:74:e6:67:2e:e5:ab:34:61:13:7d:07:b1:
8c:24:24:0c:1d:67:14:aa:09:34:30:80:bf:47:6f:
08:d7:3a:39:7a:50:af:5d:2d:d1:4b:db:9d:48:c5:
5b:88:d3:b7:70:c4:59:45:0c:44:59:f4:69:eb:9e:
d1:b3:cc:07:5f:b9:f3:ed:ba:00:3f:7f:de:27:86:
db:8f:4c:72:83:dc:20:25:07:ec:3a:11:2d:69:dd:
40:6e:ac:fb:e4:be:6f:a1:86:fc:ec:46:b3:8a:21:
a5:03:5f:c4:d1:48:f4:38:8c:c0:c1:00:15:cc:c1:
a0:9c:e5:9c:f6:90:3d:3f:0a:e1:58:74:66:fb:63:
84:54:b3:ea:bf:1b:32:42:cb:0d:c9:a6:d0:d9:20:
29:31:a3:dc:32:fc:ed:08:45:40:85:b2:20:6f:10:
d4:d8:5c:86:5e:6e:b7:93:08:3a:4d:93:27:dd:eb:
45:1e:9f:5f:ec:4b:c3:d7:75:fc:8b:1e:21:98:6f:
f7:19:b8:bd:b2:26:97:93:a7:1f:09:87:82:1a:a3:
d2:be:1a:b4:53:74:19:c0:25:3d:61:a6:a8:63:00:
ec:aa:33:2c:aa:79:83:b6:aa:f6:cf:f6:ed:83:b1:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DD:1E:F4:0F:77:B7:D1:C4:54:57:BB:55:4A:92:BD:D4:98:5F:EB
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:73:e7:00:5c:ae:8a:95:01:2a:e5:cd:56:f5:49:9b:c4:1e:
dc:56:cd:ec:9b:cf:1b:fc:3c:67:92:b4:7d:72:01:24:dd:c9:
74:8c:c7:de:ab:63:b8:c5:77:6f:13:79:43:83:4c:18:11:ab:
5c:3c:cd:eb:0f:58:c0:95:7c:12:9d:2c:dd:ea:49:bb:00:6b:
73:57:0f:f0:d0:68:be:1e:09:46:25:cb:d5:5c:9f:2c:f8:73:
af:95:80:80:4e:88:b0:5e:e3:1b:6d:9b:b4:2a:ce:96:b1:bb:
c9:01:44:89:06:c1:22:25:75:82:c3:3b:b7:8b:ab:ef:50:24:
d8:2f:e3:01:fc:35:dc:ad:ac:ff:97:9a:b1:aa:0c:d9:bc:f2:
16:4d:93:d3:e7:2c:c1:fc:e1:52:e1:6e:4d:28:50:34:ca:53:
05:36:e1:d6:cd:d7:8e:91:7d:25:94:14:d4:02:98:56:b2:16:
f4:c5:82:07:c8:6e:89:90:56:d8:42:1a:15:03:7b:96:5c:ad:
ac:71:15:2d:13:a3:b1:24:b4:69:76:27:7f:ea:46:d7:17:8b:
f6:3f:84:f9:85:1f:3d:42:eb:9e:d6:58:98:a0:9e:0a:af:8d:
8c:7b:0c:57:44:ab:d9:b9:05:18:f4:48:ca:c8:9c:b1:63:50:
b9:a0:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:54 2025 by rpki-client