
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier: nLcAZa9vPCM3SqUpfytwW0D/kVIJfBS32jNimU+lEQw=
Subject key identifier: 3C:06:C6:A4:EC:C2:86:AB:F1:9D:30:41:9A:64:E7:D7:44:44:F2:6F
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 0198D66014303E2A815C795CF5E6C4962EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number: 1047
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=)
2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: tYunbOgV+oR7Alc0AR/4DeTBCRhyBnQTWFnli/qzmzs=)
3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=)
4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=)
5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=)
6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=)
7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:14:30:3e:2a:81:5c:79:5c:f5:e6:c4:96:2e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=3c06c6a4ecc286abf19d30419a64e7d74444f26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:37:36:e4:ea:3d:15:76:ba:61:11:53:ac:
8e:9d:1a:30:b8:e2:c6:7e:39:75:34:bf:24:98:69:
3a:c3:74:da:e0:97:c9:be:27:28:f5:09:6f:98:c0:
b3:ef:24:cb:ac:1a:0c:b4:cf:de:2d:61:79:8f:ea:
c0:a3:00:77:40:f5:45:da:6a:a3:b5:39:cf:d4:d1:
6b:92:64:04:48:fc:38:c2:64:f9:93:a8:c3:dd:22:
30:02:e6:97:d1:aa:a0:e4:8e:67:e3:c8:93:1a:5e:
7a:81:c6:00:71:dc:4b:71:d7:58:e1:94:0f:2e:f8:
aa:36:6c:dd:d1:0c:93:53:f7:5e:a4:84:46:d2:94:
a8:a8:65:52:c4:e4:0d:b2:55:3b:12:cf:ae:e7:d8:
fa:a6:e6:14:49:33:96:f9:43:f2:15:a1:9b:aa:a0:
ae:68:8a:c6:ba:c6:ee:54:c1:c3:db:ad:6e:7a:29:
10:f5:a0:fb:12:f6:fc:69:ef:79:c9:6d:41:c7:ad:
a5:7a:c5:56:89:73:21:f7:e8:c5:e5:e7:8d:1b:54:
e3:6d:39:49:58:95:ec:86:a6:f4:e4:de:e4:1b:f1:
41:8e:96:b5:22:90:9f:6d:3a:7f:a5:53:17:25:64:
c5:52:73:7d:b9:76:ac:de:b9:6c:37:6e:ff:52:d6:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:C6:A4:EC:C2:86:AB:F1:9D:30:41:9A:64:E7:D7:44:44:F2:6F
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9a:59:21:ff:47:01:68:0a:33:69:62:5c:05:ea:64:3f:03:
a8:96:8d:4c:9d:93:31:f4:48:c3:86:d9:93:75:1e:40:8e:38:
57:ac:d7:1a:68:97:5d:b7:b3:15:2f:7d:f9:8f:c4:4c:dd:bb:
cc:16:21:6e:cc:d5:46:84:d6:93:71:b5:12:9d:0e:48:6e:37:
ca:62:43:0f:97:e2:9c:7a:ba:fc:7a:b6:63:80:6a:6d:69:e2:
38:5c:4a:2d:ac:5e:b1:41:d3:cf:2e:12:6e:a9:88:c5:c5:37:
a5:69:71:2e:d0:5b:2b:99:98:a5:36:e0:9f:d2:97:bf:eb:ab:
1f:ba:3e:ac:d4:bf:c7:e9:48:69:7c:c7:21:22:59:8c:64:6f:
bd:df:75:c0:bb:ab:e2:e6:4f:be:c8:f5:2b:8e:f1:ad:4f:ee:
c1:ff:cd:49:06:ae:05:31:d4:b2:cd:28:78:b0:16:4f:ca:7a:
86:44:cc:e9:a5:cd:21:ac:6c:ef:5f:ef:69:db:65:51:00:46:
f9:92:90:08:23:2d:1c:c3:21:5f:95:02:6f:15:9d:b8:84:fa:
41:a5:6e:5a:f1:98:47:15:ce:6f:dd:a5:42:22:27:bd:9f:28:
de:59:37:9a:80:f8:bf:e9:c4:d4:1a:ab:84:fe:31:66:24:26:
8e:fc:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:50 2025 by rpki-client