Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier: 35H7FkXEW05rsCE/V1oP9BwZzxEPDMvm/ZWcAnvn8N8=
Subject key identifier: CC:4A:AA:17:14:B0:DA:C5:36:72:75:97:49:E3:02:DA:04:48:C1:0C
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 01988BEAEF1826335A04559C248FE5C729AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 23:01:26 +0000
Manifest this update: Fri 08 Aug 2025 23:01:26 +0000
Manifest next update: Sat 09 Aug 2025 23:01:26 +0000
Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: xBrnaq4BZ69PSoqL7iOEKiX+pmSCZ8JyBEoyKNio3sM=)
2: nqRXNoUiyTb4TmIe2_b86I-CG4w.roa (hash: uh5jetKJYfrnWeF7nxGsrvO4F6Y6S/Ud8IP3anKzhdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:ef:18:26:33:5a:04:55:9c:24:8f:e5:c7:29:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Aug 8 23:01:26 2025 GMT
Not After : Aug 9 23:01:26 2025 GMT
Subject: CN=cc4aaa1714b0dac53672759749e302da0448c10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:8d:4a:20:5c:49:7d:8e:2d:e8:cb:9c:4f:
e1:ae:78:de:4f:ee:e2:86:b7:09:b4:77:e3:69:ac:
46:43:9e:91:e5:ec:b5:60:9c:98:8e:5e:4f:bb:8c:
f7:dd:9e:25:64:66:92:94:61:e7:91:a9:e0:b8:c7:
55:99:05:ca:9f:f1:5b:70:6b:02:71:a0:ff:88:3f:
4b:0d:69:95:e4:ce:d3:cc:94:89:7c:e3:55:16:ec:
80:c7:52:8d:9c:a8:ee:ae:74:1e:c2:9b:1b:da:c6:
63:52:01:47:45:63:f6:13:49:6e:ff:7c:72:df:ca:
b2:78:80:52:9b:24:f0:e9:cd:ac:ca:51:b1:7f:e6:
5c:3a:41:08:d4:7a:12:0c:35:49:b9:a7:67:25:d2:
b9:19:8f:ad:78:94:c1:2b:f8:79:ae:ab:6a:30:e2:
6a:39:c9:07:27:dd:04:7f:4a:39:ee:46:c9:a8:03:
fa:47:8c:3a:7d:fd:bf:d0:cb:04:27:15:8a:bc:9f:
19:1b:e8:d1:7b:11:05:f9:b4:37:1a:26:b9:18:5d:
64:15:30:1f:e7:87:eb:01:43:fe:fb:72:6d:95:20:
72:9c:99:3e:2a:89:14:55:0e:a7:2b:91:3f:af:40:
11:cc:44:33:2c:08:f1:7a:00:13:60:62:82:5e:f0:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:AA:17:14:B0:DA:C5:36:72:75:97:49:E3:02:DA:04:48:C1:0C
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f4:92:27:c0:09:f1:aa:33:28:45:65:6e:62:f9:c1:35:eb:
3c:95:bd:e0:69:bb:0e:ef:8a:7e:42:90:c5:f2:be:bb:36:03:
ec:89:c6:26:5f:55:be:49:e6:88:61:ae:f8:9c:83:00:d8:bb:
27:f0:de:f9:4a:5a:6e:d8:56:b5:f5:bd:f9:59:54:f4:e0:a5:
3e:c8:86:e2:a8:81:f3:8d:2c:5e:bb:77:d9:1f:53:38:89:eb:
ec:19:0c:a4:86:44:0e:77:48:99:c1:16:70:95:3f:84:b6:d8:
89:ed:7c:4b:5b:b6:75:5b:b8:08:42:e2:98:46:db:da:4f:64:
b2:27:b5:b9:1b:53:95:bd:14:b6:94:13:23:b6:8d:e4:f6:3a:
a4:a4:7f:11:97:cb:ff:fe:0f:09:a4:7e:61:a8:fc:fd:ce:18:
7c:9f:c7:cb:e8:14:1c:e3:07:94:12:6b:4c:98:aa:3a:38:af:
f1:01:27:43:37:90:dd:bd:47:5b:d8:54:76:cf:30:c4:c0:c2:
d0:b7:93:ba:80:2b:be:1b:e0:15:87:1a:35:50:72:4c:64:32:
fe:11:f2:e1:3f:0a:ba:33:57:44:6b:1b:36:8b:60:c3:5e:30:
62:63:65:cf:b1:30:8a:fd:e7:7e:29:24:f7:f3:bf:a4:72:02:
40:75:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:52 2025 by rpki-client