Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: snE//S8QX/foyWnJ8o/2szcuh/KTBD4BRX95laGS0Hw=
Subject key identifier: ED:0D:FE:A6:D5:E1:92:83:7E:7C:5F:E2:E8:69:B0:06:75:12:8A:A9
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 01989592561E784F932D1E928F0B82BADEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 124F
Signing time: Sun 10 Aug 2025 20:00:52 +0000
Manifest this update: Sun 10 Aug 2025 20:00:52 +0000
Manifest next update: Mon 11 Aug 2025 20:00:52 +0000
Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: Jag839KpoliLOo/ID7gwlLnWDU7KgA6msyVUjeT/rYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:56:1e:78:4f:93:2d:1e:92:8f:0b:82:ba:de:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Aug 10 20:00:52 2025 GMT
Not After : Aug 11 20:00:52 2025 GMT
Subject: CN=ed0dfea6d5e192837e7c5fe2e869b00675128aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:cf:3c:ae:7f:60:32:1b:07:2d:aa:f2:58:
a2:b8:9a:79:5c:4e:c5:1a:0d:ed:8f:a3:7d:76:e8:
71:1c:52:ae:e5:ed:8c:86:33:71:bb:e1:99:7e:75:
d5:6e:f1:74:33:18:2c:99:4f:c6:80:57:64:12:fd:
bf:5f:78:87:9c:2b:34:4b:0f:78:60:e1:24:f3:b9:
35:bf:2b:a6:8b:06:2e:74:c9:7c:4f:19:ab:e2:db:
a6:18:b6:81:f0:64:83:8c:4a:b2:ac:b8:20:77:89:
4a:ca:17:aa:58:40:b8:66:64:82:b6:a1:af:d8:aa:
c2:36:03:6f:e2:98:89:1b:50:46:2b:db:03:6e:18:
53:2f:ef:67:45:af:74:0e:6a:fd:cd:57:4b:ae:2e:
17:59:89:b8:6d:28:fa:9b:d2:05:27:2a:02:0a:5d:
f8:91:10:d3:5b:8f:9c:8f:78:7c:40:ca:c5:18:bf:
de:12:79:3e:43:ce:f8:e9:91:1a:f2:72:35:fb:05:
90:19:cc:9a:59:6c:de:06:61:e7:00:14:d5:e2:36:
67:15:45:2e:53:e4:da:51:05:c5:3e:eb:71:9b:44:
e4:43:c6:ed:ee:cb:c8:24:90:d3:1c:36:1b:6a:00:
64:95:f6:7d:b4:f0:9c:3b:a7:77:6f:4a:16:19:87:
fd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0D:FE:A6:D5:E1:92:83:7E:7C:5F:E2:E8:69:B0:06:75:12:8A:A9
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:28:12:b3:58:57:84:0e:cd:e4:0b:00:09:7d:06:5a:96:70:
45:13:dd:36:9d:f3:88:65:e5:20:a9:1f:eb:74:ad:11:e5:f7:
d1:e6:90:aa:d9:de:12:17:ae:4e:07:12:c7:86:b9:b8:7a:27:
cf:a4:80:97:1f:c9:a0:52:80:74:3a:33:12:78:02:4b:d5:85:
4e:35:f7:8c:02:26:d1:d1:8b:d4:f9:ee:24:b6:3a:63:82:db:
48:24:c2:8d:f2:0b:fd:f1:19:61:29:55:7b:70:e5:aa:4f:2b:
7d:a7:68:11:d9:c8:f3:ec:9d:53:67:c0:6c:0d:3e:ef:24:f5:
3e:33:f1:7e:45:33:cc:71:c5:8f:82:f3:23:7a:0c:14:c0:e7:
ef:ab:02:a5:a6:ca:06:e5:a4:f7:3b:94:d8:b7:2d:40:aa:6a:
52:b9:19:bd:9a:89:1c:3e:46:d1:99:f3:fb:30:84:40:14:44:
85:e1:4d:0c:17:39:e4:d6:e5:1d:c7:bc:c4:b1:63:3f:dc:ce:
4f:0e:fc:e6:74:5a:b1:18:bb:ca:e2:60:a5:a5:b8:f0:3a:81:
4a:db:2a:56:9e:cd:f2:06:cc:41:ac:7a:98:e4:b0:e7:96:77:
d7:f1:f6:44:95:8a:58:4b:0a:81:07:6f:13:52:ae:99:78:81:
80:88:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:29 2025 by rpki-client