Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: Hc3ETr6MK7a/8njananynQSxUPypyH2AjbPCWfIe00Q=
Subject key identifier: 6C:4D:4A:26:EB:A1:8E:5D:2E:D2:09:D2:FD:0A:DA:73:93:96:FF:74
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 0198D4A84A889F4732F4D50121DC03C70834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:55 +0000
Manifest this update: Sat 23 Aug 2025 02:00:55 +0000
Manifest next update: Sun 24 Aug 2025 02:00:55 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: 84i90d7suwv4FhK4spsplW0M9nf0cFr21PCPl4236cA=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4a:88:9f:47:32:f4:d5:01:21:dc:03:c7:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Aug 23 02:00:55 2025 GMT
Not After : Aug 24 02:00:55 2025 GMT
Subject: CN=6c4d4a26eba18e5d2ed209d2fd0ada739396ff74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:e7:e1:a1:e6:06:92:5d:84:34:de:a7:25:
43:6c:b1:ca:05:ec:74:4c:01:5b:ab:6a:46:11:6a:
94:80:d5:d3:87:38:f5:5a:f4:34:22:bf:41:af:87:
f5:cb:2e:8f:f8:e8:71:a2:2d:00:41:a3:e2:b1:04:
4d:f8:bc:4e:ea:8a:e4:50:c1:fb:54:1f:1e:28:5b:
b0:7d:1e:2a:da:8d:80:ba:89:61:9a:5e:32:e1:30:
40:4c:51:57:e6:40:40:fc:ae:2d:00:31:5b:82:b9:
28:c8:3a:c3:f9:11:8a:29:12:38:14:5a:32:81:1c:
ba:48:18:ea:c9:bc:2a:78:97:b4:5c:3a:70:99:22:
d3:45:a6:58:75:9c:ef:fc:06:c2:60:87:2c:9c:37:
6e:8f:ee:b4:34:76:4b:c2:a6:89:a1:a1:d2:47:c5:
5b:db:c4:0c:5e:7e:f9:31:82:a6:6d:ec:c8:86:5f:
17:c5:e4:9d:20:67:6b:be:f0:53:89:87:f9:3c:89:
c1:a5:df:ae:58:61:6b:98:92:6f:3b:a0:34:e4:07:
7d:da:2d:6e:bb:e2:df:92:ed:5c:56:a0:4d:0f:c6:
97:b5:27:ad:50:cf:e1:5d:01:7e:72:8b:73:db:e1:
01:36:d7:cc:a9:eb:2d:5e:9f:62:d6:4c:0c:8a:47:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:4A:26:EB:A1:8E:5D:2E:D2:09:D2:FD:0A:DA:73:93:96:FF:74
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:05:cf:a0:5a:09:29:c9:cb:69:e8:b2:76:eb:2c:b3:e3:33:
4e:f8:32:b2:97:1f:64:5d:6a:cf:40:6c:5d:db:76:78:40:5a:
d0:a9:f4:10:18:f0:f0:d1:3b:ec:b5:75:c4:ee:63:ae:13:11:
2c:dd:79:48:ed:b8:5d:c7:b6:7b:78:3d:ba:4c:1e:91:1c:15:
94:84:6c:e5:9e:be:57:7b:02:99:4a:64:02:d6:d2:98:f1:16:
48:06:66:df:cc:f6:d8:08:96:3b:bc:3d:75:ad:61:dc:9f:7e:
b7:98:a7:01:28:cc:48:9c:65:d6:eb:3e:42:ba:c1:72:88:8f:
29:15:32:0e:f6:cf:f5:e6:c3:53:2a:c8:f0:01:95:72:c4:91:
b0:c4:ae:9d:79:26:82:80:16:9f:0b:15:fa:2f:75:67:67:06:
fc:b5:51:43:25:6b:5e:6f:4b:43:00:af:f3:dc:e5:44:65:b5:
95:d8:79:aa:9b:e8:fb:63:bd:d1:9a:c7:e0:0a:77:2a:2b:82:
c4:61:d2:0b:59:94:d2:38:25:7a:94:06:d3:93:c1:14:61:74:
2b:d7:01:54:be:11:6f:3f:28:11:6a:a6:b2:12:47:b8:31:fb:
1d:0d:14:47:26:5c:a6:ec:88:33:f3:ad:d8:f4:6c:12:fe:18:
e9:90:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:26 2025 by rpki-client