Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: MVf8gN03Tc/3O6AlqEeGdlKuM6azFmfSfU6seLeBopE=
Subject key identifier: E1:53:F0:4F:10:79:B3:B0:F4:78:6C:F5:0B:94:D5:C6:97:40:B2:52
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 0198D5BC24F686C8AA76B03B0F1547A919FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 05AC
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: MphO5IWhPMTMK5tZ2945KrpAdSHjoN7hFxoyl4WXbAw=)
2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:24:f6:86:c8:aa:76:b0:3b:0f:15:47:a9:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=e153f04f1079b3b0f4786cf50b94d5c69740b252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:3c:13:ae:ac:b4:81:cc:75:de:c4:72:4d:
95:4f:76:8a:d1:f1:24:94:fe:51:71:bb:58:7d:97:
3c:93:77:57:86:02:a5:bf:84:c6:85:c1:4a:66:86:
27:e6:b7:b0:62:2e:ac:07:79:48:01:22:05:30:4a:
b4:d3:37:4a:bc:84:b3:a7:0c:fb:f2:ef:2a:d6:18:
50:07:cb:f5:94:7f:07:66:5a:e0:b8:a5:f4:51:56:
e1:e0:42:59:31:4d:32:f5:54:42:a6:fe:07:2e:92:
e1:38:41:7e:67:00:f8:a7:b9:fb:f6:72:7b:66:bd:
bf:10:c6:b3:8a:ca:49:e5:2c:a2:60:57:02:5a:01:
b7:e1:bf:94:09:2b:ec:3e:d3:86:63:1c:97:a7:dd:
f2:25:51:d1:d7:0d:de:38:b3:a2:18:3e:87:11:28:
16:f8:81:5b:4f:ad:64:64:1f:0c:98:b4:6f:2a:f7:
c6:6a:71:80:57:cc:c7:6a:a9:f3:1d:5a:fc:5b:7f:
e7:1a:6a:a9:f7:9a:9f:fe:df:69:bd:18:2b:c4:e3:
02:ad:4d:27:35:4c:aa:d4:00:57:4d:d1:e6:76:7e:
6f:9d:5f:42:65:62:fb:9f:c4:db:51:7f:5e:18:81:
b3:cb:09:49:5f:6c:8c:ab:15:29:2d:29:19:00:5c:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:53:F0:4F:10:79:B3:B0:F4:78:6C:F5:0B:94:D5:C6:97:40:B2:52
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ac:3e:0d:cd:4d:8d:70:7b:2b:e3:37:df:b0:da:9f:df:34:
44:5b:fa:bc:96:54:0a:a7:2d:04:48:f5:10:72:e1:30:1d:ce:
8f:8d:9d:bd:83:3f:f9:4f:67:27:16:80:dc:4f:27:2a:23:8e:
3a:63:34:75:d9:07:f2:de:65:e9:3f:42:47:5d:70:65:28:3b:
4e:17:cf:03:95:96:34:5a:41:46:a5:2a:49:32:fe:60:a8:5b:
45:0d:97:75:b1:6d:b2:64:cc:ce:0d:fc:e8:18:0d:45:eb:7d:
0e:5f:12:56:7b:3c:cc:1d:4f:4a:c4:b5:a5:6a:b0:fd:42:8b:
05:34:be:d3:40:67:4d:2c:a0:7e:bd:23:05:64:aa:ca:ef:f4:
39:57:95:58:a8:83:1f:eb:2f:ac:ce:97:df:7f:27:a8:90:eb:
f9:18:1d:1f:1a:52:86:42:20:28:8e:18:e4:0f:52:e2:ae:cb:
2d:bf:c6:d4:7d:05:24:a0:0c:c3:8b:e2:5b:a7:fb:57:8f:8c:
0c:7d:10:1f:eb:ae:2b:e0:bb:b5:d2:a4:bd:48:4b:b7:20:fe:
7d:9e:f4:fb:c8:62:f0:b5:57:96:b3:95:58:8d:39:1f:81:a2:
96:cd:70:54:b2:1d:17:3b:95:74:f4:a6:fd:a0:1f:10:e3:04:
59:a5:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:43 2025 by rpki-client