Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: 0Aka7bFo4VaXHUWa6X6/tAq6NMzKSpraPiJmbB58MlY=
Subject key identifier: 43:6C:86:29:60:5D:49:6E:22:16:66:71:8C:C3:CF:77:6C:62:16:64
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 0198D472C2B2E1696943D3FF065B026213AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 07C8
Signing time: Sat 23 Aug 2025 01:02:27 +0000
Manifest this update: Sat 23 Aug 2025 01:02:27 +0000
Manifest next update: Sun 24 Aug 2025 01:02:27 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: IcqRVVRYAF/V/A+rZWBTFu9DhNpZuxbF5+eMp3lBn+Y=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c2:b2:e1:69:69:43:d3:ff:06:5b:02:62:13:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Aug 23 01:02:27 2025 GMT
Not After : Aug 24 01:02:27 2025 GMT
Subject: CN=436c8629605d496e221666718cc3cf776c621664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:27:94:90:56:cd:c7:28:96:e8:9e:18:b3:
47:56:a4:f2:86:9c:27:11:d8:c2:7d:5d:69:37:17:
fc:a6:91:06:e7:29:9b:83:14:1b:bd:48:d3:9a:07:
42:14:67:3f:e6:b6:13:1c:03:84:c4:70:7e:ce:cc:
69:f2:9f:e8:4d:7b:94:89:5c:1d:e5:64:07:f7:a4:
c9:e1:25:a8:34:60:ef:63:24:9d:67:29:08:26:60:
fe:fc:d9:56:07:d6:c2:d8:53:fb:44:a6:b3:04:b2:
db:b4:b8:e4:17:b4:c1:e7:af:c4:76:93:30:52:b3:
b2:b1:d6:7c:7e:4f:6b:33:26:a5:89:da:95:83:de:
8f:a8:c2:67:d7:b7:41:3f:65:d3:19:57:5d:99:35:
df:63:62:88:89:81:f0:34:9a:77:3b:09:8a:50:52:
01:7a:2f:01:a8:e5:0e:c8:93:4e:ea:73:db:fd:5c:
3f:1a:d1:17:22:fd:ec:9b:db:c1:34:7c:32:a8:32:
9f:f6:76:2b:b6:98:4c:28:41:e6:7d:65:93:ac:53:
db:d9:e7:30:f4:c7:ab:2b:d5:f8:4b:76:0c:fb:6f:
32:eb:91:f0:59:e8:6d:98:9a:35:ea:47:96:d4:07:
3e:d0:77:d4:6c:16:e3:d0:ae:b8:7a:54:da:52:11:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:86:29:60:5D:49:6E:22:16:66:71:8C:C3:CF:77:6C:62:16:64
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:82:29:e1:8e:ba:82:36:c5:28:44:2c:ac:76:75:f6:80:e8:
c3:ae:78:be:72:d6:5f:e4:5e:9c:aa:ae:9a:b9:ce:a8:e8:8d:
1c:7b:d2:1b:92:2a:14:36:1b:2a:e1:46:de:49:7c:f4:87:f2:
f8:57:60:dd:3d:df:98:22:2f:de:b6:15:3b:9b:b9:1d:26:ad:
04:81:ef:2f:56:50:2e:6e:5b:6d:73:05:59:74:a6:4d:f1:3c:
8d:ff:d4:aa:a0:59:db:a4:15:6c:3f:81:78:67:a4:e7:18:03:
f5:d5:75:57:bd:48:0e:67:1b:ef:ef:22:09:3a:1b:9e:81:81:
37:f4:0d:48:79:5f:ce:c5:82:e6:58:47:6b:9e:f7:96:e2:2b:
9e:97:5c:49:14:e8:c1:7a:01:de:0b:d4:d2:f0:45:67:7d:a9:
4c:83:8a:31:49:14:74:30:9c:01:b4:91:dd:53:05:09:e2:35:
97:ae:88:6b:92:16:2b:60:71:74:d4:91:04:dc:92:6e:04:2a:
74:00:ee:39:b9:53:73:0b:fa:0e:ba:1e:6e:f8:af:09:e5:3e:
34:87:1a:0f:1b:14:74:e3:4b:90:09:c8:3e:c6:66:ce:a6:68:
85:ee:49:17:66:b0:17:36:d0:af:f6:8b:d3:e8:93:3c:eb:2d:
cc:4a:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:38 2025 by rpki-client