Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: uMcAUKfyr/uJ3Z2mXqAjAcO8VB0Eu88W9Csa2xb52aQ=
Subject key identifier: 5E:66:B1:CD:62:62:A7:76:EF:B7:DA:80:C5:2F:1D:46:7D:20:9F:B7
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 0198D65F45D9845B13C482FD84587E8B10A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:00:24 +0000
Manifest this update: Sat 23 Aug 2025 10:00:24 +0000
Manifest next update: Sun 24 Aug 2025 10:00:24 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: QuRFMcxzofQymv0HHkwMiSSjbDOt7IcftlYUQbW7CkQ=)
2: N4NsUcZuS_9XiBDgAfw6eryV7HU.roa (hash: tpgeA/zfOVEAg9H115FFWM358l26uFQNlABFRgvWlU4=)
3: yV4dNy3NsBZVUNWCmHTLsnrsaLM.roa (hash: HeRl5vH7gTSirrF3z1irtqiGbkDXqM3OvljtYndKLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:45:d9:84:5b:13:c4:82:fd:84:58:7e:8b:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Aug 23 10:00:24 2025 GMT
Not After : Aug 24 10:00:24 2025 GMT
Subject: CN=5e66b1cd6262a776efb7da80c52f1d467d209fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:f6:91:e9:f6:7c:c6:fa:0b:b7:ce:f1:d8:
e8:cc:ac:37:3a:0a:ab:60:2c:f0:3f:33:16:ac:45:
5e:0a:6a:9b:1f:44:b0:a5:4b:55:f4:6c:cc:1e:fe:
cf:a6:18:64:1c:91:b6:68:94:70:26:dd:81:24:79:
85:d5:74:04:98:ea:b7:69:ad:82:6a:06:d8:4b:71:
c4:52:2a:64:90:7c:d6:8a:25:16:66:57:ad:3f:5c:
84:21:b4:d0:25:3a:d3:83:09:2d:97:f9:11:d7:4b:
3a:aa:35:6b:30:fb:15:ca:84:22:3a:83:cc:a9:86:
f7:4e:eb:ef:13:be:61:6f:00:63:73:72:60:82:c8:
41:5a:05:2d:8e:18:81:30:73:3c:5d:9e:f1:da:d4:
56:96:29:0c:09:71:7a:b0:81:17:9b:a3:79:66:df:
75:ca:51:1e:64:0b:90:58:40:b9:1f:61:70:6d:a9:
15:67:df:a4:32:03:22:2f:09:aa:77:f5:74:8a:14:
0a:6a:81:66:0b:69:17:aa:45:5b:45:d0:96:45:ea:
82:45:aa:e1:55:8f:c3:3a:09:13:8a:c2:0d:04:ef:
c9:5b:00:88:0a:83:0b:1f:ab:6a:1f:ba:fe:ae:09:
be:8c:e3:e8:52:53:b3:e4:1f:7f:16:a6:60:b3:69:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:66:B1:CD:62:62:A7:76:EF:B7:DA:80:C5:2F:1D:46:7D:20:9F:B7
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:dd:a3:9a:ed:35:6d:eb:85:0b:1c:0d:26:c4:64:42:2d:c4:
5d:9c:c6:da:52:65:d5:23:77:d2:37:ee:6e:93:56:dc:04:97:
d5:b1:88:31:cb:c5:22:17:54:a0:be:1a:5e:93:12:20:89:d9:
48:53:6e:bb:12:54:a4:d5:94:c1:fd:93:1a:2e:8e:62:67:18:
99:87:00:d6:ac:b4:ec:03:78:1b:52:5b:60:6f:56:41:83:c0:
0e:92:af:1d:bd:32:c7:99:0b:70:54:07:07:9d:cd:8f:45:bf:
0d:d0:ac:04:0d:ba:d4:86:9a:bc:23:b8:8d:25:ec:d0:79:a5:
77:8b:48:dd:34:fe:5a:4e:5a:af:41:f5:92:85:6c:6e:02:57:
b8:eb:11:8e:f0:0e:ac:b1:1f:37:a3:d5:dd:0f:74:69:f1:be:
0b:3a:dd:4d:50:30:90:3c:20:19:aa:43:b1:f5:30:a8:72:84:
d1:03:87:5e:94:94:25:f8:81:5c:15:5e:2f:fd:60:a9:68:14:
8a:67:a9:9f:9b:aa:b7:cc:52:69:e0:6b:9f:00:11:ac:41:ca:
95:ba:e7:63:ca:03:ec:94:70:07:fd:ee:c3:b6:6d:9d:3a:f5:
d8:90:e0:6d:67:05:6d:a6:e5:c8:20:64:5f:6e:5e:1c:6b:25:
72:ff:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:49 2025 by rpki-client