Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: CS0YeigzrrhfsviTtrBvx96M4bjs8uHF6jlAengMivw=
Subject key identifier: 8B:30:72:9A:7F:9F:7F:A4:E4:5E:F8:D2:EE:B0:A3:02:BF:98:69:E9
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 0198D5BB98AC5A31D64A9AD39E9888DA5EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 1033
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: lKxCo7QWwO+AkUxRK8m2xCmEkVzdCSnbGQhTIqiKObw=)
2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=)
3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:98:ac:5a:31:d6:4a:9a:d3:9e:98:88:da:5e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=8b30729a7f9f7fa4e45ef8d2eeb0a302bf9869e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:50:cf:ca:39:0a:f3:57:08:92:36:ee:7b:
3e:cf:f2:a0:0e:4b:b4:58:03:2a:2f:c3:76:06:98:
42:cd:4a:75:e6:cd:e4:5d:ed:28:5d:95:09:4f:73:
71:9d:cb:f6:e6:ed:52:fa:e5:30:fa:0a:50:15:95:
5c:ad:55:90:5f:61:59:d4:83:f4:be:70:fd:a1:b5:
cd:0c:5d:7e:9e:18:69:15:5b:8f:f6:11:d1:f7:c3:
81:39:03:b5:13:57:04:87:11:7c:64:ee:f0:1c:87:
78:73:99:c0:67:16:5f:b7:9c:8b:c4:8b:f8:46:f4:
76:04:69:f9:c5:0c:61:43:3a:99:db:5b:7a:ea:53:
97:05:93:25:0c:83:ec:8b:76:44:f1:13:a9:33:12:
9e:90:89:22:87:4d:1d:ae:ed:a5:8f:ea:ea:30:c0:
32:16:cf:40:65:fd:a0:82:ca:1a:56:15:53:30:a1:
05:84:8b:45:7f:bc:3d:ee:f6:a3:04:83:8a:c3:0f:
34:fb:2b:68:a4:6f:c4:a3:b5:4a:1f:5e:37:0d:c4:
04:d4:7e:a1:5e:b1:51:8f:c6:ef:52:fa:0a:fd:e0:
f9:cf:80:d8:f9:90:5c:f6:58:8b:a0:cc:f1:2e:4e:
ea:99:af:3e:5e:ee:33:66:8f:54:65:22:c3:27:1a:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:30:72:9A:7F:9F:7F:A4:E4:5E:F8:D2:EE:B0:A3:02:BF:98:69:E9
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:5c:5e:8c:45:cd:cb:53:e7:8b:df:81:ad:07:4c:2a:26:
4b:a2:c6:c2:9b:68:a2:d9:a3:ca:ff:ce:a5:f5:3b:16:bb:27:
2c:6a:c1:8f:26:07:75:92:26:56:98:a1:7d:04:4d:b5:67:24:
e4:0f:98:08:25:8c:ba:64:5c:d3:b9:5c:13:88:62:f7:71:c0:
5a:03:10:4d:59:00:8a:ba:15:45:5b:25:35:3f:47:e1:7d:eb:
19:d0:e0:80:1b:d1:bb:72:37:ee:af:8b:7d:ab:0e:21:2a:87:
cf:52:83:f8:51:06:57:16:35:db:de:3b:83:81:e8:3d:26:a3:
80:2f:35:f7:62:72:a3:0b:af:30:5b:12:8d:95:4f:31:dc:61:
89:e6:2d:96:cf:87:0a:93:8d:cc:76:46:a6:5f:41:6a:ca:92:
e9:24:5c:48:fa:9b:dc:ee:dd:c5:90:6f:4d:4e:92:ad:c0:70:
7b:72:cc:df:1a:86:ed:e8:3a:6c:e7:37:f3:4e:4c:f4:04:a5:
3e:41:d5:c6:97:c3:3b:db:8f:e1:e4:20:e9:e1:6d:3f:2d:8a:
d2:d6:4b:76:19:a1:75:b7:46:73:6c:5e:ba:0b:c8:84:50:e7:
fc:61:89:f7:b0:b9:e4:d0:f1:be:a6:c5:e5:67:f5:7f:a8:f4:
3c:48:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:36 2025 by rpki-client