Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: hOXcVM2oKVz+YuJ0vs1z49lQ9E6sdRcnZj30I6fxWiI=
Subject key identifier: 58:8D:97:23:5A:33:94:5E:92:F7:75:DD:50:CE:B2:A3:56:FF:C3:23
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 0198D4A79EB976CD95BC8D2592DA133F6E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1533
Signing time: Sat 23 Aug 2025 02:00:11 +0000
Manifest this update: Sat 23 Aug 2025 02:00:11 +0000
Manifest next update: Sun 24 Aug 2025 02:00:11 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: 1HZbRm6PylhynbwPiJDW6aU/enzgHoesyt9R76CKGuI=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9e:b9:76:cd:95:bc:8d:25:92:da:13:3f:6e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Aug 23 02:00:11 2025 GMT
Not After : Aug 24 02:00:11 2025 GMT
Subject: CN=588d97235a33945e92f775dd50ceb2a356ffc323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:3c:2f:81:72:17:25:f4:26:3c:ad:ad:a6:
1e:dd:68:91:95:d8:34:9b:5d:3b:db:3c:af:25:50:
89:04:93:56:95:08:ad:1d:5f:d4:4f:8b:fa:79:54:
15:e3:bf:23:37:12:13:d8:47:ca:6f:39:56:aa:81:
80:24:94:c0:90:35:2d:6b:42:29:6e:71:57:46:3d:
b8:5f:ba:5b:dc:ca:10:07:18:f5:35:3e:96:be:3f:
4d:b6:fc:d3:9a:12:95:1f:14:c9:cb:0a:f3:41:ae:
d3:5d:03:59:20:d0:30:9b:1d:92:07:2f:ec:18:f2:
c8:6c:40:91:27:87:fe:b0:82:ae:dd:20:51:bf:2f:
2e:41:69:0e:c9:4e:2f:c2:3b:44:cd:f4:a4:92:60:
7b:35:bb:e0:94:38:e1:4d:d9:c7:10:fe:23:85:d3:
3c:29:1f:bd:2d:12:cb:10:61:e0:ac:54:e8:3c:8f:
6d:78:f6:7a:9b:0d:82:63:ec:7e:53:88:c3:5c:f7:
0e:c5:28:ac:12:1d:f4:54:5e:81:46:fe:4d:c4:76:
b1:5f:ea:1f:d5:f0:94:df:56:a8:b1:f8:08:84:ba:
ee:d6:0a:9d:8c:81:b8:aa:1f:64:d1:70:ab:82:ca:
93:6f:08:86:03:1c:95:a7:11:79:8d:f3:2a:39:97:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:97:23:5A:33:94:5E:92:F7:75:DD:50:CE:B2:A3:56:FF:C3:23
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ac:4f:5f:c1:bf:be:2f:8e:01:83:d5:40:ca:fc:39:56:ab:
c9:b6:f0:41:4c:68:9f:89:2a:f5:90:c2:0d:cd:ff:f6:18:53:
49:37:f4:c0:b3:b2:b7:bb:bb:17:f5:dd:d2:15:7c:6b:07:ba:
78:54:32:62:21:7f:3a:fc:f0:41:17:0c:3f:a9:22:bd:00:e7:
ac:91:c0:d3:08:11:0f:ea:bf:2c:50:20:c0:c1:ae:c0:1a:cb:
3d:60:22:9f:9f:2e:37:8a:8e:c8:11:09:10:47:63:4d:af:8c:
da:88:2d:80:ab:58:60:e9:45:2e:d7:9c:42:c3:17:17:ca:c1:
12:6e:d9:2a:b6:84:3c:3e:c5:3c:59:7c:b8:cd:bc:90:cd:ab:
99:c5:86:3b:f9:16:18:d0:92:be:b0:47:6d:6b:62:e1:8e:15:
53:36:92:c0:5e:f0:66:6f:ae:e1:1e:d0:f4:9d:89:70:f1:0a:
a2:90:0e:fe:d0:c1:cf:11:4a:4d:e0:e7:d2:9e:d8:14:d9:7b:
d4:21:ea:ca:46:d3:68:9a:9c:ff:5e:70:65:67:fe:3e:7e:4f:
7b:1a:00:66:58:27:b1:d2:39:3f:86:c6:04:ae:1e:e4:5a:37:
96:f0:82:55:22:20:c8:9b:55:39:e7:98:46:70:3a:d4:98:14:
d8:88:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:35 2025 by rpki-client