
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: hQSLODgw12vu4yUpwF9ncYvfLiz30G6L0d0nxCnHsCw=
Subject key identifier: F3:48:10:86:6F:4E:7B:B7:1B:30:58:AA:E4:E8:66:C1:34:B4:72:69
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 01988844C0008FEA2F749770E25D212CFB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 06:01:03 +0000
Manifest this update: Fri 08 Aug 2025 06:01:03 +0000
Manifest next update: Sat 09 Aug 2025 06:01:03 +0000
Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
3: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: KA34KVEo/xjjnEwUiVUM87BKBNvQvAtfVkLZHf1r+PE=)
4: tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (hash: V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=)
5: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:c0:00:8f:ea:2f:74:97:70:e2:5d:21:2c:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Aug 8 06:01:03 2025 GMT
Not After : Aug 9 06:01:03 2025 GMT
Subject: CN=f34810866f4e7bb71b3058aae4e866c134b47269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:5b:d0:84:b1:6f:f7:fa:e7:dc:be:b1:50:
a8:1a:27:62:c6:b3:7c:2a:38:c4:8d:19:d7:74:f5:
2d:32:e5:35:f5:fc:ab:e6:1d:4e:43:bb:2b:db:1b:
18:d6:50:43:7e:58:e6:15:ea:de:0a:4b:31:bd:15:
f8:8f:bb:fb:ce:7b:00:9e:6d:c1:d4:97:dd:4c:4c:
a8:04:bc:a8:e2:02:3c:99:03:22:58:d5:c5:6d:8b:
f0:aa:a2:6d:d2:97:82:ce:5c:5b:b4:a5:ff:0c:f4:
9f:37:23:3a:5d:5d:81:b7:14:ab:54:42:b4:46:12:
4b:1f:30:80:ed:46:8e:7e:39:8d:39:93:d1:50:46:
08:69:d8:21:3d:5a:4e:41:5c:8d:1e:b4:6c:b9:89:
7a:e6:1a:45:5e:25:94:0f:26:76:7e:2e:a8:1c:30:
94:5e:b9:ed:ee:ae:6f:de:8a:7b:1b:48:26:72:74:
1b:d1:32:a2:e7:9f:bc:10:94:d8:ad:c2:4e:e4:65:
42:dd:2e:7d:18:d3:0d:a2:b8:c7:36:52:f2:a2:0c:
7c:6c:e2:4f:b3:d0:97:c3:e0:60:36:24:84:c6:bd:
72:5a:4c:5e:be:05:ee:d2:7f:2b:fd:ce:d8:17:6e:
4c:46:c7:8f:79:70:09:1c:74:dc:74:82:31:8a:f9:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:10:86:6F:4E:7B:B7:1B:30:58:AA:E4:E8:66:C1:34:B4:72:69
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5c:2c:dc:a0:9e:32:5f:78:a3:1d:b3:11:e6:60:1a:95:6d:
55:13:6f:a6:af:28:39:f0:44:4f:99:9b:62:51:b1:d5:52:6b:
24:6f:86:0d:1c:c1:2f:b8:ff:1a:e2:e9:a5:3d:82:c1:51:30:
80:2e:51:d1:9d:8a:2e:c5:88:48:19:b1:53:1e:a6:fa:a5:ba:
7c:95:a3:4f:52:c6:76:cd:d5:68:c8:e2:69:3b:fe:3d:11:d9:
e6:27:84:e5:ed:0b:b2:41:fa:d3:5f:e8:c4:e0:71:12:e8:bf:
32:6c:9f:3a:4c:7d:95:f8:51:6a:e0:3c:28:86:59:f4:21:b7:
8d:b6:6f:3f:c0:9a:08:c0:a6:4a:3c:dd:e9:01:ef:5b:15:4a:
db:19:7c:c4:c8:f0:9a:88:e6:fe:1b:79:31:ad:30:88:d0:5b:
d1:25:a3:50:e9:27:7f:9a:ab:cc:de:41:31:f2:74:48:8a:12:
d5:a4:ca:8a:0d:65:68:f8:7c:b7:05:6b:ab:90:8d:dd:32:4c:
ff:4c:44:c3:98:22:e2:f9:f4:a4:21:35:3a:25:da:bc:d3:8d:
01:e8:e9:eb:4d:96:06:38:34:43:32:48:16:26:fb:61:4d:99:
75:9e:71:ea:bd:44:21:4c:f6:45:2f:3f:2b:ad:84:c1:d1:bf:
e5:d0:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:27:03 2025 by rpki-client