Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: FEb/V3LfrtdYGCKhNpg2t+NByEdZKC4E9/ytkzBdIBY=
Subject key identifier: 71:24:56:12:8F:7A:DE:2D:42:6A:83:F2:A2:19:D1:12:79:3D:35:A5
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 0198D5F1C4D817E29AFD5D9AAB7B8CBCBAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0AC9
Signing time: Sat 23 Aug 2025 08:00:48 +0000
Manifest this update: Sat 23 Aug 2025 08:00:48 +0000
Manifest next update: Sun 24 Aug 2025 08:00:48 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: xxkOlHm8fNYDr1U3Cx91E8KhUa/78hlKPqFWH6Rb4Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c4:d8:17:e2:9a:fd:5d:9a:ab:7b:8c:bc:ba:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Aug 23 08:00:48 2025 GMT
Not After : Aug 24 08:00:48 2025 GMT
Subject: CN=712456128f7ade2d426a83f2a219d112793d35a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:5c:09:58:7f:3a:58:a9:4f:84:0e:c2:fc:
88:6f:cf:83:f2:48:8b:63:e2:3c:8f:42:62:2f:37:
d8:e2:d7:43:25:a0:a8:76:a9:e2:1b:c4:83:3b:b7:
e0:9f:15:64:26:33:16:27:16:7f:36:fe:a3:62:79:
88:d4:37:92:4b:77:73:38:e1:36:d0:22:66:52:ae:
66:98:b4:93:50:0e:bc:b8:c9:5d:b3:f6:f4:24:c7:
c0:af:a9:61:2e:f9:4a:19:5b:22:56:5d:21:63:77:
5a:7f:5f:b2:8f:7e:2c:2b:0e:8c:d8:c7:98:8a:94:
3a:b6:81:68:fa:bd:7e:02:cf:a3:84:f5:02:26:e4:
c1:42:92:c2:43:85:3b:87:25:85:f3:40:b2:b3:5f:
5d:f5:66:0a:6e:a4:00:96:45:1e:02:03:98:a6:2b:
30:b4:5c:45:7e:49:13:f3:80:5e:80:86:02:e6:02:
49:89:4c:80:22:7a:82:33:64:7b:55:82:79:a2:b8:
f7:4a:52:c8:24:ca:f3:22:bf:8b:24:42:44:f4:62:
df:c1:ac:0f:c9:50:fd:f4:2e:89:d3:ab:0f:e2:59:
ad:d4:0f:c6:71:36:59:ad:55:87:83:86:3e:b2:67:
30:d9:c5:64:32:2e:08:80:2a:8b:ec:4f:bb:18:94:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:56:12:8F:7A:DE:2D:42:6A:83:F2:A2:19:D1:12:79:3D:35:A5
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5d:8f:47:fd:ee:36:4c:55:3c:ff:4e:17:91:cc:83:d4:6e:
27:c6:47:31:ee:43:ca:5c:84:3d:23:e7:8c:3a:0f:09:5a:cc:
24:5e:f8:cc:23:b7:a1:ee:2e:94:93:b2:9e:0e:76:76:78:c5:
e8:ec:f9:ca:79:40:f8:78:a5:c3:6a:76:64:ff:d4:01:d4:1c:
26:cb:c2:19:77:70:94:e1:08:b6:74:60:e8:79:33:d7:37:ae:
a0:8e:54:9a:ab:7e:b0:cc:dc:67:a3:45:c8:a1:3a:5d:54:2e:
16:e1:c4:c3:5c:51:5d:f7:44:26:a3:d4:11:ba:fb:6c:1b:00:
6c:72:7c:b5:18:a5:45:d5:fe:06:0e:ba:9e:a0:eb:c7:92:ad:
db:d4:12:ad:2c:cf:dc:68:95:82:93:75:6e:40:fd:3e:ee:42:
d0:04:b1:10:24:e3:23:df:ad:b6:90:94:eb:43:14:56:49:79:
6d:58:27:b5:f1:8f:6e:be:85:d5:30:20:60:f6:39:19:fb:a3:
44:dd:bd:24:72:15:ef:0a:be:b0:e0:c7:b1:2e:76:5e:e2:23:
b5:47:04:70:b5:ce:c7:cb:01:5a:0f:0e:c0:30:8e:38:5e:2c:
4e:44:3f:7a:e1:db:b2:04:4b:46:55:c5:c0:46:9a:b0:b5:9c:
12:1c:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:09 2025 by rpki-client