Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: FNwc3RuX9zirp/Hs6MIk7WMmTq/Awc8qSpm10VgLJI4=
Subject key identifier: 7E:00:7C:21:71:22:B8:25:82:44:F6:BD:80:F8:A1:BE:49:A1:BF:D0
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 0198D5BC23D2C7CDB059C74D4647155352ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 1638
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: wQBDvwvLECyhYvWrb5/99xijl1DaR0l8FrgMsRtSvAg=)
2: j0TS7sWufeH5UA9R8L5Lar1dfN8.roa (hash: 4uoOp+ywbPIH2GvAsL/CI2u9RgmZPn6i2PjYhgr/qBg=)
3: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:23:d2:c7:cd:b0:59:c7:4d:46:47:15:53:52:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=7e007c217122b8258244f6bd80f8a1be49a1bfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:d0:8a:f0:66:d7:ce:66:29:51:2d:cc:58:
3d:3e:34:32:4e:44:b0:41:a1:27:2f:90:7e:7a:d0:
1a:3a:9c:23:f3:94:d4:e4:14:95:df:9a:e0:c5:bd:
02:0d:23:01:e3:20:39:4b:92:27:df:3c:31:ed:40:
a3:59:af:72:79:55:ab:d0:9e:9f:3c:fe:b8:f6:fa:
09:dd:f0:88:7f:c5:4d:18:5e:a5:f4:a8:7a:9f:f5:
f5:14:81:2f:97:a2:02:52:0c:d4:d0:c3:bd:69:01:
9a:5d:81:5e:97:a2:e3:cb:f2:ad:c6:f3:a2:ad:a1:
e7:75:c3:c4:86:c6:35:e5:5c:f2:3e:ac:bd:46:d8:
1f:6a:95:a1:2e:f4:d9:55:a3:e9:a0:1e:60:65:62:
f3:04:05:94:43:fa:bf:f5:68:8a:f8:20:66:9d:97:
b3:04:4d:0a:0c:18:df:e5:fc:88:96:b9:8c:34:1b:
61:2a:d5:e5:8f:80:bb:93:33:41:b5:38:9d:4e:99:
41:c9:ea:99:12:55:ba:61:36:57:af:a3:91:88:36:
b2:30:34:df:cb:f9:c2:a6:0a:22:d2:ec:3b:fd:0b:
72:2c:ee:b6:c4:18:d8:35:f1:2e:e1:ea:ee:a5:d0:
90:f8:15:97:03:d4:02:bf:ec:a3:0a:e3:aa:5d:82:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:7C:21:71:22:B8:25:82:44:F6:BD:80:F8:A1:BE:49:A1:BF:D0
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:02:ef:dc:ce:fa:e0:61:3f:5e:5b:d0:18:6f:2b:b4:f9:
71:ac:d9:c5:6e:94:24:37:7e:af:c1:d7:48:36:65:8a:57:ee:
75:b4:88:00:ac:36:c4:76:4c:4e:07:b0:7d:84:03:4f:d0:08:
c8:c8:1d:c4:a4:0e:aa:d1:97:f8:f9:1f:78:12:b4:23:50:16:
38:93:4f:b1:e6:e7:1c:64:c0:2e:1d:dd:16:fe:5b:73:cd:d4:
e2:69:46:4d:a9:71:83:83:a4:f2:ae:47:2d:51:60:a7:15:fc:
16:c1:b1:a4:ac:12:2b:91:c6:1a:8e:2a:ab:54:6c:45:89:f8:
81:fa:79:16:ff:9f:87:53:bd:5b:0c:ee:a3:ab:c8:dd:8f:96:
71:ef:2b:38:65:d9:b7:d6:8e:c4:09:12:ef:7a:0b:64:db:be:
d0:26:8e:b6:8e:16:d4:7c:19:dc:bf:a7:e4:1d:1e:7a:61:1a:
72:da:c4:bd:68:32:de:88:3a:8b:07:47:92:b3:fa:eb:97:6a:
7d:97:4e:aa:fb:9c:1f:b4:7f:a2:b6:25:7a:90:41:55:4d:4e:
05:98:6c:8a:62:f9:e4:e8:c8:e0:52:77:70:b0:54:50:b5:f5:
95:8c:ce:dd:af:81:ff:35:6b:3d:1e:0f:a0:86:3d:7c:9d:8e:
2a:a0:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:31 2025 by rpki-client