Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: LZDFijyfRXf3f0cNNukin6I1fDtlCtyKb6whXYqCZJY=
Subject key identifier: 48:7B:37:76:85:BD:24:EC:38:BA:33:AF:B1:9E:C0:AB:3F:3A:0D:83
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 0198D473BE94171F798CA8A8B0DE1C8B471A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:31 +0000
Manifest this update: Sat 23 Aug 2025 01:03:31 +0000
Manifest next update: Sun 24 Aug 2025 01:03:31 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: 7yfiuxZQO/uPleVNUgq3ITBpTLNTduVa23sjoZWeP6g=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:be:94:17:1f:79:8c:a8:a8:b0:de:1c:8b:47:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Aug 23 01:03:31 2025 GMT
Not After : Aug 24 01:03:31 2025 GMT
Subject: CN=487b377685bd24ec38ba33afb19ec0ab3f3a0d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:99:34:a0:95:29:16:00:08:99:71:0d:b5:
cf:c0:4b:2c:28:7c:87:79:cb:92:bb:be:c7:39:b8:
d3:72:26:f4:e3:7f:45:bf:97:98:c9:c8:1f:80:35:
70:d0:4a:ed:29:b6:02:d0:04:d8:61:81:5c:f7:f8:
c8:3e:2c:15:f1:ad:fe:8b:28:d4:08:47:3c:12:be:
40:07:38:d9:71:3d:2e:9e:fd:8e:20:52:13:2d:db:
a5:c4:5a:ce:4f:8d:67:c6:50:9e:b9:5d:e3:70:53:
7b:95:50:d2:f3:aa:8c:12:3a:99:4b:07:7b:69:6e:
49:69:a7:a4:00:9e:b4:c1:f1:c4:3e:95:dd:da:e5:
1c:1d:92:6c:45:b6:9d:0b:65:f3:84:34:44:e6:6f:
12:c4:13:31:f0:30:80:26:18:a0:90:ca:49:18:78:
ce:8d:45:e6:12:7e:06:ab:e9:4b:95:18:40:10:57:
81:17:34:6a:3b:43:84:d8:f7:44:51:f2:20:ae:54:
f5:bd:7d:b2:8b:ff:d7:93:65:65:3b:a5:56:2c:be:
82:ba:a8:e7:96:f0:46:fc:87:04:3a:93:0b:02:13:
ea:e0:61:10:42:f4:87:23:25:85:f3:f3:ee:82:79:
80:2e:73:a1:3e:3b:4d:63:94:7d:fb:b7:33:83:6c:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:37:76:85:BD:24:EC:38:BA:33:AF:B1:9E:C0:AB:3F:3A:0D:83
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8b:7c:ea:50:b0:e4:aa:75:00:72:6c:29:1e:0a:4c:ff:c4:
a1:c2:5a:94:d4:49:d6:ef:0c:5a:be:50:49:d4:7a:68:ad:72:
27:6f:f5:ed:09:59:29:46:4c:c8:df:4f:58:04:8e:26:0d:99:
ef:a9:1c:38:f3:20:28:24:5c:82:b0:37:e0:bc:19:86:93:f1:
89:e4:23:71:69:57:df:8c:f5:bb:d2:71:2e:6a:ff:c8:f3:be:
ab:21:1e:02:1a:5e:4d:a4:e2:82:60:de:3c:d0:58:50:ae:d1:
3b:44:3a:70:c5:21:d9:c6:bd:e3:f2:2a:62:ed:d3:6b:08:75:
ba:4b:23:19:3d:15:b4:02:5f:9c:af:50:db:25:85:05:75:db:
cf:e4:b5:3d:17:89:1f:90:70:9f:e6:d0:a4:58:29:09:3f:00:
75:ac:b5:b8:2a:b0:61:18:2c:64:29:6f:7b:6c:d6:29:01:37:
22:90:b2:63:f5:17:f8:7b:58:56:42:74:4c:0e:20:e5:76:2c:
a6:60:f4:82:3a:7a:99:89:86:56:f2:a9:3b:94:75:26:94:64:
54:14:9b:3d:26:f9:38:29:06:ee:ea:59:96:3b:d2:b7:0c:ac:
4e:a0:fc:92:e8:57:63:d3:02:cb:a4:8d:72:60:f5:da:4c:4c:
9e:d4:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:04 2025 by rpki-client