
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File: t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier: vpUZVDnvRfqJ5PBLRrJ1ibmNflnCZi9TTYK0MTipwxQ=
Subject key identifier: 71:0C:4C:8A:A9:1D:12:6A:79:3C:43:8C:57:6B:A9:26:67:39:B3:29
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: 0198D3CC8899FDB8EB9F8BFC8C31FB72906F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number: 0CF5
Signing time: Fri 22 Aug 2025 22:00:53 +0000
Manifest this update: Fri 22 Aug 2025 22:00:53 +0000
Manifest next update: Sat 23 Aug 2025 22:00:53 +0000
Files and hashes: 1: 9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa (hash: VGm9skjMPVUUg6edMcPusOOmF7cXf1kchI2oKrFFOoI=)
2: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: 5kYDcMf4SB6flvOQqAck9zp5Xo+vVAs1vcepS8EWHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:cc:88:99:fd:b8:eb:9f:8b:fc:8c:31:fb:72:90:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: Aug 22 22:00:53 2025 GMT
Not After : Aug 23 22:00:53 2025 GMT
Subject: CN=710c4c8aa91d126a793c438c576ba9266739b329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:6a:56:c4:82:04:bf:0d:0a:88:bc:50:69:
36:5a:25:f0:59:df:67:71:82:f9:8e:a9:6c:7c:63:
c8:59:af:47:89:c7:8c:5d:5b:7d:ee:03:69:44:7a:
1b:ce:35:82:21:9b:3d:f1:98:e1:d8:a8:1b:f0:d2:
05:91:13:7f:ee:62:4f:fe:1e:ed:eb:61:0b:77:22:
ba:64:36:cd:99:94:69:56:80:50:d2:c0:66:0a:90:
1a:43:c3:fe:71:a5:f1:67:15:76:ee:b0:ee:23:5d:
ac:57:07:f8:c8:ea:40:72:d4:2a:31:dd:cb:7f:6a:
43:c3:33:33:a5:72:a2:a4:31:19:70:83:61:6c:1b:
19:93:6f:03:98:fb:62:2d:99:e7:ba:6a:4b:42:44:
0a:f5:e5:01:8e:c4:b9:25:a6:cb:e4:02:04:e1:76:
c3:f4:b1:1f:fd:ef:bb:45:87:55:97:d8:37:77:c9:
0b:4b:9e:1b:6c:33:18:8b:18:c9:bc:38:cf:72:45:
1d:36:78:2a:da:26:37:cf:81:4b:e8:e5:d9:c9:5b:
8f:00:2b:96:d6:d5:ac:53:c0:3c:ff:d0:b7:13:5a:
ab:fe:c5:88:d2:77:7e:3c:f6:c8:b4:df:5d:c9:46:
90:8a:e4:ad:0e:55:6d:0f:3e:ed:a5:b1:b6:26:d1:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0C:4C:8A:A9:1D:12:6A:79:3C:43:8C:57:6B:A9:26:67:39:B3:29
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:75:5c:fa:de:13:25:7d:1b:e8:d6:66:71:0d:56:cd:99:44:
fd:6c:46:50:c9:e6:3c:6f:15:78:e9:59:28:21:03:66:1d:41:
7a:7c:73:04:71:2f:8b:5e:49:ea:af:70:05:0e:5f:1f:a4:b3:
e9:5b:fc:35:23:ee:59:29:03:c2:5e:ab:b5:51:08:98:d3:69:
44:ec:38:59:31:7e:d7:17:85:7e:38:2b:ee:c8:4e:9a:84:52:
f3:b8:8a:77:2b:42:ec:65:21:28:69:8b:29:08:35:53:0d:84:
2a:7d:dc:85:d0:44:41:94:4c:db:94:c5:01:ea:31:43:b8:0a:
59:7e:f8:e5:5a:e2:df:b2:94:18:af:67:97:d9:eb:ed:f1:f8:
ab:e8:03:83:e9:49:1c:97:e8:28:87:e9:bc:ba:15:ab:3d:3a:
38:bb:70:ba:01:95:94:e1:81:b3:e0:24:29:9c:7d:05:44:90:
98:df:ff:d0:db:bc:79:45:e3:b9:d0:bc:5d:6e:c7:22:a6:b7:
2b:0d:18:31:7e:62:d7:bc:9e:f7:bd:82:b5:2e:7d:54:12:4c:
73:48:3f:d2:6d:d4:64:1f:1f:b1:34:e2:16:74:8b:df:72:24:
af:a3:3a:02:60:74:fa:cb:4d:c5:af:50:ca:7e:e4:f8:e4:15:
d2:ee:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:26:23 2025 by rpki-client