Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier: 9NuDfUWqB4QJXLezzPsS+fmqijCUlHNktBcKpjhHn5c=
Subject key identifier: A4:4D:F0:90:5D:87:CC:03:F8:73:D2:B8:5E:B8:FB:E8:A8:A6:22:C6
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial: 0198D473C8670031DFEBD178AD05574CAF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number: 15A2
Signing time: Sat 23 Aug 2025 01:03:34 +0000
Manifest this update: Sat 23 Aug 2025 01:03:34 +0000
Manifest next update: Sun 24 Aug 2025 01:03:34 +0000
Files and hashes: 1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: xNskcMSpVFFaIAVTqK0QTDj8KGNLAhOO86nLAA21BbY=)
2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c8:67:00:31:df:eb:d1:78:ad:05:57:4c:af:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Validity
Not Before: Aug 23 01:03:34 2025 GMT
Not After : Aug 24 01:03:34 2025 GMT
Subject: CN=a44df0905d87cc03f873d2b85eb8fbe8a8a622c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:af:6f:ef:7e:2c:1e:d5:5a:34:ee:a8:a7:
bb:af:ce:c7:be:f9:c3:8b:e5:7b:6b:c4:ad:32:ab:
43:73:e6:2f:66:f2:f2:89:6b:a4:47:c0:70:5c:d5:
a1:72:1c:1e:1d:28:63:3d:98:82:5c:1d:d6:74:9c:
67:c4:b1:74:7a:4f:5c:df:80:54:f5:b3:b7:ed:57:
c3:73:31:44:2a:bc:80:76:ca:1c:d1:77:1d:9a:bb:
6d:b4:28:81:6d:d4:a1:e2:4a:1f:43:9c:c7:a8:71:
42:96:de:c2:0a:69:0c:a4:41:87:68:6b:07:ce:9f:
ad:20:28:ec:6e:83:27:32:b0:43:9e:23:23:8c:2f:
9c:0c:81:7e:df:c5:18:1a:eb:4a:a9:02:6c:e6:e0:
f3:4a:c1:19:a0:f9:50:31:17:45:52:89:8c:19:d8:
66:f6:03:8d:af:05:4a:9b:61:ad:b8:6c:05:d6:f5:
bc:86:1e:c8:08:9d:57:71:dd:a7:af:84:96:3a:df:
b2:ca:93:1c:17:45:71:07:78:4d:1c:1f:d5:70:9e:
98:4d:a1:33:41:f5:bc:2a:14:72:91:8f:52:ca:47:
f6:b3:c2:d9:e3:4a:95:ed:a6:4d:87:0a:24:b7:57:
a2:ff:22:da:66:f0:84:36:c9:6b:2a:c3:05:29:b1:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4D:F0:90:5D:87:CC:03:F8:73:D2:B8:5E:B8:FB:E8:A8:A6:22:C6
X509v3 Authority Key Identifier:
keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:59:87:e2:57:4e:54:f3:08:c6:58:7a:54:4b:e0:b0:a2:
b7:2a:de:b5:58:c6:8c:91:a5:e9:bd:0d:47:b9:5d:bb:b9:06:
25:df:af:c4:d2:0e:f2:29:b5:d8:f7:40:b7:10:02:12:34:78:
7c:47:44:4a:6b:1c:1b:4f:36:86:27:be:81:0f:08:6b:78:d9:
d8:2f:2f:29:aa:6e:05:6c:f9:8a:10:60:10:61:34:ed:66:b3:
e6:e5:37:1e:ac:60:75:40:66:c9:b4:e7:89:9b:ed:04:e3:de:
dc:c4:d2:8d:fd:2e:8d:d0:c2:69:52:3a:d5:a1:fd:36:59:a9:
bf:74:9d:8a:42:e6:53:25:92:5a:85:bf:7e:46:84:12:5a:99:
ef:3f:13:66:2c:d4:27:73:ee:6b:29:c2:f5:fc:be:10:07:98:
61:ac:27:3c:ba:9c:4b:00:66:4b:37:5f:f7:3d:bb:d3:1b:73:
66:8f:2b:9f:72:b8:2a:1f:03:71:4d:b2:00:ae:a4:1c:80:a9:
f9:48:2b:40:96:ba:c4:ae:26:79:b7:ab:75:ac:56:91:53:0c:
95:07:b9:52:3d:a1:20:62:7f:6b:2b:ae:a6:c1:f2:ce:04:45:
16:2f:85:aa:42:1f:bf:cf:d8:f4:9f:8d:7f:55:88:89:c6:95:
da:4d:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:51 2025 by rpki-client