Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: Rjq1vN80CCG3Eg+oQ/ZQqDIQKoSmsExPE/nM8xPUMq8=
Subject key identifier: 78:9E:0F:B5:C7:0C:3E:35:44:13:5D:38:B6:41:0D:49:34:EC:9C:51
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 0198D5BBA0B09AF6EFC867057B7CF86D49DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0849
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: WaNje4JoT8jH1T/xC6JRe8zDSIcmzXuq1nCpdRgmSsM=)
2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a0:b0:9a:f6:ef:c8:67:05:7b:7c:f8:6d:49:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=789e0fb5c70c3e3544135d38b6410d4934ec9c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:d6:f9:d9:41:71:06:68:59:4d:e5:46:03:
50:7a:46:f6:a7:25:2d:e7:ea:03:7b:19:11:7d:87:
3c:44:6e:f8:c0:0e:41:8f:c7:86:4e:0a:63:05:c3:
07:63:b9:4e:43:01:3c:81:c9:33:a2:64:9a:2f:8c:
b9:13:5a:7e:90:7b:35:66:6d:1c:9a:a0:7b:66:9b:
16:d7:cd:ca:d9:35:27:66:e4:d4:9b:00:91:2b:dc:
04:ba:7b:7a:b4:8b:b1:a9:39:f4:e2:d7:62:19:1a:
3d:7b:01:95:b9:15:1d:5a:50:19:14:bc:c6:a6:5b:
51:4a:cd:ff:97:b2:1e:72:6f:9b:43:13:44:d4:22:
ee:73:c7:fe:fc:08:87:16:76:ca:9a:bd:23:73:b0:
cc:03:f3:e3:b9:21:05:b0:9b:99:f2:82:a5:e0:df:
98:5a:46:ad:bc:75:3c:6a:7d:32:94:d0:fd:2a:d5:
7e:2d:be:70:64:4b:89:73:a3:f8:23:7d:00:1b:00:
f6:aa:05:44:08:19:f9:40:2a:87:cd:30:28:78:b1:
aa:05:b1:1c:72:ae:54:90:90:40:df:18:c7:f4:4d:
3d:a7:32:8e:43:bd:be:39:ce:11:fc:cc:fe:e8:09:
09:41:9d:f1:8c:04:82:c9:a8:72:04:04:90:64:2d:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9E:0F:B5:C7:0C:3E:35:44:13:5D:38:B6:41:0D:49:34:EC:9C:51
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f3:4a:43:5e:33:40:43:3e:2f:de:e4:2c:0b:0c:1a:53:62:
c6:06:8a:48:46:77:04:d0:32:33:04:32:d0:62:9d:5b:2f:36:
db:55:58:af:f3:26:e9:60:c0:b1:c7:b2:19:7a:08:bb:ee:eb:
97:2d:67:45:81:15:7c:46:74:0b:65:f0:7a:3d:12:53:d9:85:
2b:5b:26:92:a2:04:07:36:96:c9:87:e1:ec:c2:f4:ab:e2:c7:
63:57:c6:3e:79:c6:f0:34:6d:f3:90:42:74:00:f5:f8:cb:5f:
8a:10:60:e0:64:2c:af:7d:4d:32:b6:59:fc:19:f5:76:07:87:
d5:a1:a2:57:c9:96:50:55:b6:2d:bc:a9:cc:0d:f7:42:b1:b6:
f9:c4:ab:2c:6e:a1:7f:7f:a9:61:33:cd:06:e1:4b:74:3f:43:
a6:cb:2f:46:ad:1c:7f:fc:2e:22:3f:fe:00:d0:88:a3:f3:d5:
89:1c:47:f3:76:b9:1d:30:af:20:c1:19:7a:4d:02:0e:70:1c:
c1:8d:dd:bc:5a:c1:95:71:ab:3d:61:ce:1e:48:e2:33:41:74:
c7:fd:8b:6a:4f:ff:3b:48:57:e9:06:21:03:e0:7f:fc:fc:8f:
c6:22:f9:81:36:8b:cd:13:57:46:09:8a:da:43:7e:21:84:32:
ae:13:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:38 2025 by rpki-client