Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: ZDSd3p8oJj1T4L7ViAlzXEvEkh9++IfFpU15q51Fj7Q=
Subject key identifier: 9E:2D:ED:1C:D9:13:11:94:D6:39:81:B4:E7:B4:30:CA:58:5B:B6:64
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 0198D65F264B15488FB97FD0726BF8B3C6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: c9vgM7mPmiTcHTlwM9cgxOTEyqPSy/QnfTwXI+vTT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:26:4b:15:48:8f:b9:7f:d0:72:6b:f8:b3:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=9e2ded1cd9131194d63981b4e7b430ca585bb664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:e0:8d:01:48:d9:97:17:59:da:f1:04:be:
85:04:88:ce:0b:7f:94:69:c9:4c:12:ab:11:05:c8:
91:1d:a0:5e:68:a2:f5:fe:c0:ff:91:0b:7e:95:b7:
5e:a7:28:94:78:79:e2:cb:53:2b:e8:dd:87:08:fd:
c0:ba:5b:b8:d3:ac:a3:85:b0:65:e8:d1:46:3e:eb:
50:b5:19:df:92:42:88:62:1b:33:3a:08:0c:01:17:
89:a0:54:81:be:f9:25:fb:5d:9e:08:eb:d4:05:c6:
10:ce:5a:6c:a7:4e:fa:7f:78:b3:2f:7d:d0:36:c1:
e4:a9:28:c1:75:e6:04:9e:34:92:ec:d3:73:b3:f0:
83:87:2f:73:43:c4:c1:34:7c:22:3a:9b:a0:2d:51:
fd:af:b5:ff:a8:21:2c:57:5a:48:18:25:a5:b4:af:
10:0b:ee:6f:70:1f:b1:70:ec:a7:28:ce:54:27:8e:
f2:b1:2d:5b:fd:58:9e:e2:8d:23:5f:33:7b:98:69:
bf:27:1d:97:11:82:02:d1:80:a0:0d:fb:e5:fb:4f:
02:49:d2:95:11:3b:76:c8:ab:1f:26:bd:ce:ff:7f:
08:33:62:c3:b3:aa:79:39:d1:fb:40:47:74:22:62:
b6:27:b0:6f:b1:82:60:b0:62:67:55:1a:20:60:8f:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:ED:1C:D9:13:11:94:D6:39:81:B4:E7:B4:30:CA:58:5B:B6:64
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fa:f1:2f:31:b1:5d:27:13:05:17:4b:85:d2:5d:22:17:8d:
78:cd:19:6e:1a:a4:0b:99:00:74:69:d0:89:f1:ce:67:44:49:
04:c0:fa:77:61:51:61:10:d7:59:22:4a:2b:26:9c:ef:e8:c2:
18:62:d9:1f:bf:49:0d:43:e7:5a:90:6c:9c:a5:84:24:e3:75:
63:84:7b:a2:b7:7c:80:19:55:9f:51:c8:d3:a0:3f:4f:fa:5a:
f2:14:50:05:86:28:85:ed:34:08:09:9f:b6:e7:eb:a3:75:1d:
00:9c:81:6f:18:40:13:db:8d:04:70:e4:63:f0:71:07:c7:d6:
89:4d:e5:d0:58:b5:66:ee:86:e0:ad:81:bc:3e:ae:e3:32:b9:
1c:90:95:0c:f0:9d:36:0d:6c:65:f1:fb:fe:6f:23:48:79:32:
8b:94:be:47:c1:62:47:aa:ee:ab:ea:cc:9d:56:bd:5d:41:4b:
6d:e1:30:e5:28:e5:f9:40:00:f1:07:38:cc:63:8a:1e:79:27:
f8:1e:4f:3e:10:74:4f:d9:fc:7c:9c:89:fb:d5:d3:a9:5d:c4:
12:ac:9a:8c:f7:aa:30:b2:04:c1:f1:5f:c2:d6:b6:7c:7b:6b:
df:21:23:bc:c5:dc:13:eb:af:ba:73:42:de:0d:bf:97:ed:9b:
3d:24:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:12 2025 by rpki-client