Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: kE4FveYiAAaek6+SFSfCXLZcUa5Rw4SE98n1ngDPtqU=
Subject key identifier: 18:84:D4:99:B4:56:A2:52:51:05:1B:C0:35:19:3B:43:C9:22:FD:5A
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 01988AA0CE15D0E0F9B644E3E9C01D9C4466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 17:00:50 +0000
Manifest this update: Fri 08 Aug 2025 17:00:50 +0000
Manifest next update: Sat 09 Aug 2025 17:00:50 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: BsGfRLzkz0y/raoJoIS876CgrTl34xyWuf5IeDdpV7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:ce:15:d0:e0:f9:b6:44:e3:e9:c0:1d:9c:44:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Aug 8 17:00:50 2025 GMT
Not After : Aug 9 17:00:50 2025 GMT
Subject: CN=1884d499b456a25251051bc035193b43c922fd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:9d:e9:1a:b7:4d:65:64:08:32:ef:f5:9f:
8e:37:3a:69:78:2a:4b:9f:24:b9:61:85:88:ca:b8:
4b:14:8d:1d:79:4b:54:5e:96:7d:4d:4e:e2:47:be:
7c:18:f4:35:d3:2e:42:05:94:0d:54:64:1a:1d:55:
f0:79:44:15:f6:98:ce:58:0d:3e:24:e7:a0:2d:52:
c3:c1:c4:05:ba:42:00:ce:11:2a:ac:67:97:60:ea:
4b:70:2f:da:16:6d:ca:4d:81:d5:7e:59:7c:b8:67:
18:cc:2d:de:8a:73:3a:2b:dc:db:f1:cf:72:03:a6:
80:d0:9d:bc:84:57:82:16:4a:19:7e:cd:dc:65:dd:
fa:29:5e:1b:29:63:c3:ad:2f:53:f7:fe:9f:e2:eb:
ca:67:06:bb:af:a5:6b:14:2c:f6:04:5b:e0:8b:29:
79:d5:3c:4a:ca:e7:91:2a:f0:d5:ed:f5:a2:ca:ca:
44:b5:0d:08:bd:f2:d7:29:2c:cc:dc:26:04:5b:7d:
fb:2a:a4:ec:66:3e:5a:e9:9f:29:ec:9b:b3:f1:37:
42:ba:a1:bf:83:6f:a2:aa:4c:6f:4b:be:b2:6f:a6:
05:51:cf:b8:f4:ca:4b:f0:d2:2e:53:27:12:ac:40:
f8:1c:27:1d:e6:0f:de:9c:d5:14:8a:24:0b:12:68:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:D4:99:B4:56:A2:52:51:05:1B:C0:35:19:3B:43:C9:22:FD:5A
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:42:0a:74:44:88:9d:64:e9:9e:d5:a4:35:ba:19:2a:dc:85:
e1:fb:16:13:5b:92:a5:79:ec:3b:14:ac:41:c9:09:57:d7:89:
38:64:5a:87:8c:b0:67:05:db:da:c3:4a:ab:3d:0a:4b:29:9a:
52:ef:3e:e4:27:29:30:3e:03:cb:d6:3c:13:bc:d9:f0:e4:6f:
0e:71:39:c5:41:3b:12:60:b9:c7:10:ca:09:55:07:ed:72:13:
0e:e2:29:62:76:21:aa:3b:5b:a3:b6:e4:cb:96:08:b5:06:60:
69:8b:b5:37:f1:27:06:df:40:c4:47:e0:e4:40:45:4d:be:6d:
8b:c7:9a:38:a7:da:19:65:ec:e3:df:6b:bb:ab:d3:75:ca:e2:
d6:86:28:58:70:ac:b4:af:ed:c2:ba:e0:27:8b:77:de:98:33:
df:d1:9f:ce:9b:3d:94:aa:9a:a9:88:2d:6b:e4:42:4a:41:d6:
53:c8:49:97:9c:9c:00:fa:d9:10:a0:67:c8:2a:9e:00:5b:a2:
09:96:85:62:bb:ce:b7:47:c5:65:ac:67:4c:50:ec:22:d7:4d:
61:e3:73:ca:33:f9:43:21:35:d7:58:66:e5:2f:93:e9:8b:91:
d7:8c:53:78:4d:f9:dd:bc:a4:b5:0b:8d:3e:ea:24:24:06:22:
ac:88:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:38 2025 by rpki-client