Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: 3EUhZBzg5W4skYl+X0jMW6fAdJuzeKrR8n6bqq0+zrk=
Subject key identifier: E3:72:14:88:8C:E8:1A:6B:0D:B2:49:89:E2:27:FC:A0:C5:E6:7F:87
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 0198D583F724B20E5B8016DC3052EF9CDD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: WZKIk/hjavDK6EBw07rRqUP4AnKYx2bKogasaSZmpek=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f7:24:b2:0e:5b:80:16:dc:30:52:ef:9c:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=e37214888ce81a6b0db24989e227fca0c5e67f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:4e:05:c1:79:48:90:76:61:ae:1e:c0:87:
8c:d9:9a:bf:37:9d:cf:d6:c4:7b:50:9d:14:b4:ec:
f1:0a:65:cb:9b:c3:de:4b:3f:74:65:a2:02:e1:0b:
7c:3c:34:0e:e9:c3:6c:ae:eb:00:f0:dd:83:85:d3:
f9:f8:8a:aa:32:aa:18:d7:f0:36:23:1a:ac:bc:0f:
8b:05:0b:ce:3e:43:da:97:f4:84:2a:ca:9a:93:bd:
80:c3:38:a3:37:f1:ed:a8:30:ce:90:42:30:3b:dc:
31:65:8d:e2:94:b0:c6:50:bf:50:25:85:a2:3a:44:
18:3a:13:84:aa:bf:95:00:e2:ef:2f:67:4a:16:25:
3e:4b:8c:d8:35:0a:4f:e0:d6:5f:fc:8e:ba:ec:6d:
46:03:a7:7b:b1:4e:e9:cb:c0:47:10:9c:a0:e2:6f:
dc:4d:17:ea:3d:ed:bb:f0:2d:62:31:a5:b4:17:76:
11:22:0a:00:77:b3:a6:7e:c8:92:b9:6f:f4:78:92:
4b:75:2b:11:c4:2f:9b:54:dd:66:1e:22:57:e4:82:
0a:6f:70:3f:58:17:51:14:ff:1f:d8:3a:ea:4b:ec:
57:9e:b1:54:7c:48:2f:77:48:96:6a:2e:8c:a0:90:
bf:1a:26:ff:40:df:48:2b:2e:cd:f5:d4:68:4b:62:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:72:14:88:8C:E8:1A:6B:0D:B2:49:89:E2:27:FC:A0:C5:E6:7F:87
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:ae:0b:4b:3a:f4:6c:3f:5c:3a:f9:39:fa:87:3c:de:ea:
4d:b9:c4:2b:3b:1b:83:9e:83:55:85:54:21:3f:8d:7c:10:0f:
2e:64:ca:75:cb:3f:99:78:01:06:85:a3:4d:94:8d:bd:3c:af:
01:ec:67:0d:a7:56:3f:a3:a2:6b:c5:42:89:a2:48:af:27:dd:
46:6a:89:ef:24:0a:25:64:81:bb:6d:ee:6d:b4:1c:4f:bc:9b:
1f:f3:79:b6:85:77:05:de:be:e3:2f:9d:6b:9c:1e:30:06:d0:
b1:f3:04:5e:17:ba:f2:39:46:1b:bd:7e:0e:26:d3:2a:b3:9d:
90:4e:05:39:cf:53:35:d8:07:76:f5:3a:1a:3e:65:ac:33:a4:
f8:c9:4d:55:d7:28:69:46:66:ad:51:8c:08:82:f1:34:93:ec:
54:30:4a:c7:4a:0f:f8:9f:2d:0d:51:c0:e3:11:4f:12:bd:51:
68:49:16:f3:2d:25:26:54:05:8d:c5:01:0e:01:28:e1:17:ac:
88:25:8e:93:b6:f9:a1:09:b7:a8:29:c3:37:bb:8f:b2:3d:83:
52:48:e5:8f:c2:44:96:b5:1b:b1:2c:6a:14:c4:b3:58:fb:e9:
e4:dd:f8:a0:f1:df:04:06:a9:d5:c0:91:b9:08:90:7f:88:b1:
cb:3b:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:21 2025 by rpki-client