Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: I0WiqQGoPexYXWKsk0/2r21MVUGln4wTH8bZ1eZv5lA=
Subject key identifier: F5:BB:47:D9:A5:DE:26:DE:B9:0C:4A:BC:34:13:88:84:4F:AE:D8:22
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 01989411F9D8C37FE7CC8F3DB0AA35A94365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 13:01:02 +0000
Manifest this update: Sun 10 Aug 2025 13:01:02 +0000
Manifest next update: Mon 11 Aug 2025 13:01:02 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: zD/VbadYoUP2TEUUB9FlDvc7OvATSBMeFkMH3NKSPgw=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:f9:d8:c3:7f:e7:cc:8f:3d:b0:aa:35:a9:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Aug 10 13:01:02 2025 GMT
Not After : Aug 11 13:01:02 2025 GMT
Subject: CN=f5bb47d9a5de26deb90c4abc341388844faed822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:0a:fb:f8:f0:0a:76:d9:9a:d0:7a:24:95:
ac:fd:47:8b:c0:f4:f0:5e:b8:03:fa:2f:bf:91:5f:
da:cd:e9:24:cd:ed:43:16:17:55:a9:3c:46:b6:15:
23:67:57:86:58:71:7f:b9:cc:53:2d:c0:1f:5c:a6:
ab:66:53:26:fa:6a:24:10:e6:64:6b:7c:6b:ad:8a:
7b:05:fb:94:20:8f:51:57:19:15:69:f8:bc:67:6b:
31:fc:d3:90:2d:b0:7d:92:0e:06:98:12:53:09:dd:
3f:4d:a8:8b:b1:4a:49:0b:97:d9:71:76:f3:71:ad:
29:87:a3:7a:8f:8a:79:1b:cb:51:5d:4b:ab:54:af:
13:4b:8e:e3:8b:e5:ae:84:37:f0:7a:58:cc:ec:24:
58:c5:07:77:c7:e4:44:c8:36:e6:5e:34:28:6d:94:
88:d1:a6:a5:83:ab:65:cc:1a:4e:13:7e:f5:0d:d4:
05:f0:92:9a:a9:1d:05:e2:49:62:ef:da:7b:be:5c:
f8:71:74:3f:9b:a7:6e:ec:84:da:fb:81:78:34:2d:
92:18:0b:cb:36:5c:cf:d6:56:ac:14:66:ba:e2:7c:
66:42:39:f1:49:f8:17:4e:6d:72:f5:ed:6f:79:66:
7f:27:4f:b4:f9:5d:b3:84:6a:3f:7d:ed:c1:53:c3:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:47:D9:A5:DE:26:DE:B9:0C:4A:BC:34:13:88:84:4F:AE:D8:22
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ed:76:3e:6a:31:51:bc:92:f2:6e:a1:02:62:d1:45:c7:9a:
8f:bd:a3:ba:14:db:d4:7a:a4:20:3f:f5:3c:23:73:c4:e6:c0:
a1:43:36:bf:0f:36:25:2b:70:e1:75:aa:ff:4c:e6:1c:75:81:
86:15:a6:a8:80:7c:2f:92:cf:bb:8b:31:66:8d:b8:84:6a:bd:
c3:32:f0:a0:a7:26:6a:d9:a0:cb:74:9a:af:f2:78:7d:98:73:
69:4b:49:ef:07:72:ee:53:f8:72:17:b8:da:ef:98:54:b8:7a:
4a:1e:4e:86:cd:5b:52:e9:37:5d:18:60:55:18:e9:0f:52:13:
e7:7e:ce:a5:5e:10:b9:e6:f4:d5:c4:93:4e:01:0e:07:cd:bf:
aa:3b:2c:3d:3c:41:b4:a7:bb:5d:d9:23:e4:71:5b:63:a8:3d:
4d:48:af:19:48:1d:49:a3:90:70:a3:02:41:88:46:8a:41:b8:
df:4e:be:f5:fd:35:d8:b6:35:1f:a5:a4:8a:70:bc:46:82:dd:
37:a8:d9:4d:d6:de:6f:08:a5:46:04:96:6b:ed:17:d1:a7:43:
0a:1d:e6:55:db:55:28:67:30:eb:7b:10:dd:33:58:fa:1e:92:
69:84:4a:91:85:54:5f:d8:a5:3e:e0:93:da:a0:39:69:7a:79:
e1:dc:9e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:24:44 2025 by rpki-client