Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: FwY88Mp0PTRVfXLP4GRHwfqH/9RYuFmssCAfilFdkmg=
Subject key identifier: C8:C3:6B:80:45:8C:82:14:41:9B:65:D4:B3:26:18:A3:BB:99:23:0B
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 0198D5833D500896135F8FFFBBA7482A4BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: 0-dFdMQBS6PQc_H8zCEvitr9Geo.roa (hash: wf7BGdUuzEvUWE1tRs5aPe5d6Kbqkjno2v5St+tRxhA=)
2: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: kopAo27mQ0eHK1Et4BFo2ytLxK+JGsQdGV4HWXZdMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3d:50:08:96:13:5f:8f:ff:bb:a7:48:2a:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=c8c36b80458c8214419b65d4b32618a3bb99230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:fd:40:cf:3e:1c:a5:c8:bf:26:b8:ce:bf:
7d:d5:31:8e:5d:b3:98:6b:9d:fd:81:b7:39:bc:09:
a7:b4:6c:e3:d0:8c:f7:1c:fb:61:70:d6:23:d1:0d:
41:b5:d2:be:3d:dc:05:36:c5:1f:85:21:e6:d1:f5:
34:64:4c:51:31:e8:0b:bf:0c:42:cb:1a:50:49:be:
21:fd:eb:01:0d:be:2e:d8:21:5a:d6:af:90:34:91:
fa:a4:66:f1:84:ce:28:9c:47:74:bb:82:40:dc:1d:
33:87:15:84:4c:72:d6:a0:9c:c9:9e:47:a0:19:a8:
16:76:8a:f7:98:5b:3f:86:32:61:49:34:45:ad:a3:
12:05:f7:a6:cd:8c:9b:4b:cf:16:0d:b6:47:48:99:
62:1b:82:ea:70:fb:5c:32:06:b3:98:41:f8:0f:3d:
1a:66:7d:d0:76:8e:83:7f:08:d8:bc:b1:28:0e:53:
9f:66:c1:49:75:4d:6e:3e:4f:42:3d:fe:a8:01:2c:
34:f5:f6:c4:7d:12:bb:ad:8b:0b:77:f3:96:46:c1:
59:ee:48:0a:74:7f:53:0a:d3:77:02:f5:d1:ba:53:
00:db:e7:08:35:a8:78:85:47:c9:c3:0a:a1:6b:0f:
7f:e8:9b:a7:b9:49:8f:84:90:3f:9e:b0:78:d5:1a:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:6B:80:45:8C:82:14:41:9B:65:D4:B3:26:18:A3:BB:99:23:0B
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:00:d2:60:95:76:69:24:b7:e6:81:6a:4f:e5:d7:c0:7f:69:
1f:da:ac:82:bf:db:95:d3:75:a4:60:10:ef:1f:b9:0a:ca:b8:
52:ad:2d:67:e0:34:32:4b:d8:30:91:70:b9:b6:63:c6:be:a5:
7f:c0:64:33:a8:bd:1b:b8:5f:b3:63:e8:e0:15:ab:f3:57:ab:
1b:30:9f:4d:db:5a:12:82:09:4f:2e:9f:93:78:8a:97:98:35:
c2:c9:33:c9:e5:a5:a6:69:e1:8b:96:e0:eb:c6:79:9c:3f:f4:
5a:2d:51:dc:40:9b:f4:28:e3:be:1d:44:90:f4:66:6a:c7:aa:
9c:33:f6:d6:f9:f1:19:3d:89:d1:7f:49:d4:79:ae:44:cb:ce:
c0:34:6b:18:0b:9e:5d:c2:df:d5:1b:96:f3:0f:a8:ac:69:1a:
ef:bd:f2:a4:5e:20:28:a6:61:5f:a8:ce:5e:1f:81:87:88:54:
d8:ef:c2:59:ed:32:45:0c:d6:81:a8:cf:5c:40:97:7c:6e:54:
6b:86:97:18:f0:37:b4:62:0c:9a:1d:e9:c8:07:20:ae:d2:dc:
23:30:fb:7c:d1:5e:44:8e:7f:63:81:dd:54:01:e4:54:90:5e:
94:2f:3a:af:0a:4b:3e:77:3b:ed:91:f6:b2:47:2c:fe:fd:d5:
5e:e1:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:11 2025 by rpki-client