Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: 4Wa4GvETLofw3XdkUD4WlHxy/GzLx6JvFbsjomfGKAE=
Subject key identifier: 68:0D:D4:C1:34:46:37:C0:66:06:8A:56:F3:1A:71:DE:BE:59:49:51
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 0198D54E3F25DAFE90F909D94A3AE323B72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 023F
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: Z4krAtgNanxyFf2gegkkCuNUZAw95YNdVDFMBVFnIdg=)
2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=)
3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3f:25:da:fe:90:f9:09:d9:4a:3a:e3:23:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=680dd4c1344637c066068a56f31a71debe594951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:df:7a:ad:fc:39:02:44:eb:8a:c1:85:3e:
62:7a:e3:30:c0:7d:4c:57:c6:64:43:19:d5:9a:75:
92:ff:d7:f4:b6:12:80:de:57:e0:2a:58:74:fd:76:
5b:49:5f:f5:d6:c5:41:17:73:19:31:0c:fd:fe:85:
ba:7b:2e:5e:e1:44:ef:54:10:a6:bd:3c:02:fb:03:
7d:de:09:30:3f:01:0d:11:d5:49:8c:e5:8b:bb:bd:
31:b9:60:1c:fb:a5:17:13:47:09:a8:27:ad:7b:61:
b2:d9:69:40:d7:12:bb:ac:a9:d2:8f:7e:91:67:28:
b1:bc:7a:5c:25:c3:08:da:fc:8f:b0:ed:cb:70:ff:
b4:a9:9b:c1:34:96:b1:84:93:6e:63:fd:79:29:9c:
13:cf:4d:25:41:28:bd:3b:b9:94:13:4c:96:ee:5b:
52:12:96:d6:e8:c9:f6:a9:99:3f:1f:73:68:d0:eb:
73:37:c1:74:7c:c3:f8:7e:9a:d1:74:3d:71:4e:96:
4a:2e:81:39:33:52:ab:b8:ac:9a:75:32:2d:30:e8:
48:24:51:96:bc:20:3d:98:e9:7a:5d:89:fe:27:32:
70:5e:20:f1:ac:c8:61:e9:1d:8c:6f:c9:5f:78:5d:
a3:3e:fc:6d:c7:a1:06:86:ab:c0:b0:7a:cc:4c:80:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0D:D4:C1:34:46:37:C0:66:06:8A:56:F3:1A:71:DE:BE:59:49:51
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:73:16:fe:47:59:6b:e6:81:b2:04:40:de:a6:66:ad:c7:
1a:2c:2f:91:ea:87:15:9c:e2:de:42:c1:98:2b:25:3b:c9:43:
c1:88:97:f0:f3:f8:74:b4:df:ed:4d:25:4a:19:70:08:f0:b3:
98:f8:b6:24:69:a9:16:cf:b2:22:fb:e3:a3:3b:02:3f:ca:46:
46:c7:b2:ac:fd:4d:82:06:58:c3:3d:5a:b6:e3:30:4e:dc:09:
83:97:2a:d3:c4:db:85:58:4e:2e:36:da:1b:ca:94:97:48:80:
2e:3d:f0:d3:ed:63:3c:76:e0:55:3b:2c:8b:74:69:b1:63:7e:
b2:ee:e9:4c:2b:9f:88:7f:fa:02:d0:6c:fe:a3:4c:38:f7:88:
ad:d9:29:6e:b5:91:cb:51:91:b8:14:b5:99:36:44:9b:48:02:
62:aa:78:13:f5:1a:4d:03:34:11:94:b6:3e:dc:a4:e1:a3:da:
9c:13:e1:86:ab:e9:12:70:9e:c5:3e:3d:47:c6:ca:c0:7e:e1:
24:f2:b7:08:24:48:07:67:28:5b:4a:9f:08:69:95:41:08:14:
27:17:5b:1c:a9:c0:30:1b:40:50:e7:52:8a:ba:76:34:ed:e4:
81:66:5a:d1:92:a7:39:95:c8:dd:3e:b1:56:41:63:ab:c0:48:
79:3f:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:15 2025 by rpki-client