Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File: t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier: Cs3eUEuxJBod1pw5tteTSYXvuIDDVlMLO1FQdR6RTcA=
Subject key identifier: 5F:13:6A:F4:AE:BC:CE:5F:69:B0:65:37:56:CB:87:15:9E:95:2E:F7
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 0198D583D9825147F0179FE5FB407AF299C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number: 1658
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: 4k2m6oWhbCxHwu7ZoOs8FYwRSeo.roa (hash: 0X2CSeSS5EmJeG6XWlWGwSVUMGQ8gwE0QRYVBIvMpS0=)
2: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: AZHR/aOljHxz1VMSnQe/m6NNCvzh+lrYL1oKIG5HHvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d9:82:51:47:f0:17:9f:e5:fb:40:7a:f2:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=5f136af4aebcce5f69b0653756cb87159e952ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:7e:78:2d:56:a8:0c:ec:e6:4d:5b:f4:e5:
b4:69:8d:d7:bc:cf:f3:24:98:3a:c7:1b:61:55:51:
9e:2d:b7:a5:79:3f:02:89:07:37:22:75:69:8e:ea:
69:8a:34:4f:14:9b:f0:a6:3d:fe:8e:3e:f0:4c:da:
ae:0e:7a:6e:cd:b9:ec:f0:8b:f9:07:f1:86:fa:3a:
96:de:b0:8c:95:8f:b7:25:d8:e7:fd:58:fb:2a:ae:
64:e6:b2:8c:4f:fd:14:66:8f:21:6e:15:a9:9d:a0:
dd:aa:12:75:ab:66:d2:d2:9a:25:ef:13:cb:06:df:
b8:3f:0a:dd:78:af:56:50:a2:09:33:b6:5d:e1:48:
6b:f8:06:a2:ba:82:22:2b:2e:a7:2c:89:1b:d1:d1:
40:8c:12:9b:90:09:de:ef:95:c3:88:af:8a:d3:82:
86:11:e0:98:30:fb:33:87:1f:8d:0f:b4:7f:46:0f:
09:78:58:63:32:6a:90:b9:ef:d5:29:bb:ff:56:98:
cc:7d:5b:5e:ca:7b:bf:fb:99:a3:59:19:3a:23:de:
2e:43:24:9d:67:a9:74:36:6d:72:4a:1f:ac:26:ed:
ec:48:87:7a:b2:a7:c9:45:2d:43:0a:3d:b8:c7:eb:
a4:91:e7:60:06:65:e4:a4:18:9c:de:89:31:ef:2b:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:6A:F4:AE:BC:CE:5F:69:B0:65:37:56:CB:87:15:9E:95:2E:F7
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9e:f7:47:aa:c2:2f:a8:69:56:d9:6f:29:a5:d9:3b:48:68:
8a:be:6d:1d:3e:aa:a2:b3:b0:77:e4:64:af:d4:91:f0:11:7f:
7d:2b:15:e7:9b:ce:b8:a4:1d:45:8d:12:df:91:a4:0b:44:cd:
ba:82:3a:60:22:1e:d8:49:13:4b:3d:c9:51:ed:28:11:5f:8a:
6d:9a:f2:cd:65:8b:0d:a9:b0:7e:a9:23:2c:71:2c:73:13:ed:
97:ff:38:f0:01:ce:13:1c:8c:1b:21:3a:df:5b:a9:ef:24:3b:
29:fe:23:8c:1e:5e:fc:19:de:b0:fc:b1:76:c1:78:80:a9:04:
d2:db:3f:45:0d:a0:f1:67:d7:ed:12:d1:7c:e8:fc:3a:d3:86:
84:57:ab:80:50:66:de:5c:43:e9:41:ed:67:7b:5a:a1:37:c4:
09:e9:b7:04:91:af:dc:fe:2e:6a:b4:d1:4e:17:1d:6f:dd:39:
df:91:63:b2:e1:52:0f:9b:6f:20:df:28:ac:ea:f2:24:d1:a6:
8c:fd:3e:da:20:4e:13:d1:c4:bd:f4:8b:cd:fc:2b:ce:de:38:
b7:44:35:18:62:78:e9:e3:a6:60:da:68:a8:9d:2c:d0:85:e9:
3c:63:f8:8d:d8:8b:08:cf:0e:7c:95:89:a4:dd:b2:cb:4e:1d:
92:e4:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:04 2025 by rpki-client