Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: 31xUcytq4fE5wyMUy8MhdhLkZli6x5ktLdV73Ccb+4M=
Subject key identifier: 3E:36:C1:4D:93:2D:2E:D2:64:FC:EF:AF:5C:5A:25:2D:A6:A6:30:91
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 0198D8500B04BB73125DBFE6637B9BA21081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 19:03:01 +0000
Manifest this update: Sat 23 Aug 2025 19:03:01 +0000
Manifest next update: Sun 24 Aug 2025 19:03:01 +0000
Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=)
2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: NbTgG5OX25vnt/0bgGhtGBUNv5zE+DgeyD1/eerhzlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:0b:04:bb:73:12:5d:bf:e6:63:7b:9b:a2:10:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Aug 23 19:03:01 2025 GMT
Not After : Aug 24 19:03:01 2025 GMT
Subject: CN=3e36c14d932d2ed264fcefaf5c5a252da6a63091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:3c:01:78:5f:47:57:ae:e5:0a:40:da:ff:
cc:b5:54:d2:e7:91:58:37:59:52:ca:85:3f:a9:0a:
1c:22:dd:62:16:bd:82:7d:81:41:6f:fa:0c:ab:c9:
77:13:8a:b4:f1:71:ab:6d:e3:ee:c0:9b:8c:66:ce:
8d:02:ce:2f:95:2b:7a:7b:a9:81:7c:ac:bc:59:eb:
43:2c:63:fb:f7:4e:ae:dd:0f:0f:9f:7a:b1:46:66:
f3:07:20:44:a1:eb:f0:ce:c6:47:b4:cb:af:2f:63:
83:1c:d0:70:f2:e1:11:0a:75:d0:a3:70:ff:0e:a4:
91:94:cd:f9:7e:fa:1f:2b:a6:63:14:07:58:ac:37:
48:eb:f7:59:f9:cc:e9:ca:97:aa:b3:ef:cb:d2:ee:
14:a8:7f:36:77:81:a1:d8:33:87:ab:3a:08:6b:7f:
9e:b9:7e:8c:19:d4:10:d6:f6:7f:fc:0a:29:be:96:
10:f7:09:e8:c8:e1:ae:8a:84:20:58:48:4a:1d:49:
ea:a0:c8:36:fc:6a:0b:cb:37:48:5a:4f:6d:ed:75:
e8:09:ab:db:44:9e:bc:2f:50:8b:81:df:14:b2:a9:
e0:88:e6:f5:be:59:33:28:21:36:33:0f:62:28:6b:
0d:c2:c4:95:8e:c5:b7:7f:02:28:18:1c:4e:03:31:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:36:C1:4D:93:2D:2E:D2:64:FC:EF:AF:5C:5A:25:2D:A6:A6:30:91
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5f:64:16:ed:e5:42:38:37:f1:88:ce:bc:74:90:30:93:86:
f8:5b:41:dc:26:35:ea:eb:e8:40:05:09:81:fa:30:dc:9d:7b:
5d:25:de:0e:84:ab:9a:7b:7b:c3:c0:b6:e6:74:bd:e3:c7:f3:
3a:d7:44:95:81:27:5d:e0:68:38:67:ae:6a:18:eb:04:40:7d:
3b:61:ca:6e:2d:46:33:3c:48:d8:2e:64:df:22:a2:18:f9:f3:
d6:30:1b:36:98:e8:52:3b:10:26:25:81:e9:b0:15:28:37:79:
60:2d:81:5a:d0:8a:c0:38:38:1b:99:6a:45:0f:9f:30:32:f1:
df:f5:95:a7:d1:28:6d:d7:ca:72:a7:69:12:6e:f5:d8:8d:40:
75:7f:7b:88:f8:2f:9d:d5:4c:f8:6e:51:62:04:9b:1a:be:5f:
4f:f8:47:fd:74:97:92:f3:3a:8c:1c:21:04:f4:0c:9d:3e:3a:
85:a6:de:86:99:5b:bf:6e:ea:a9:f6:ee:44:c2:99:33:84:e6:
d9:6c:da:5a:bf:5a:11:01:4c:c0:e7:f7:b8:94:f8:03:2c:73:
98:bc:6c:61:0a:0e:38:b9:c0:0b:3e:eb:60:be:34:57:db:bb:
54:98:d4:b6:b4:c4:14:52:76:32:42:15:e8:d4:f4:e9:5f:83:
ad:92:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:19:15 2025 by rpki-client