Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: H1ZJD+JzursDxcm271eVn5VjxF3wZhfT/8g2vOofXG4=
Subject key identifier: BC:B5:20:E4:BC:89:87:B1:B4:F3:14:14:06:95:9F:9D:73:11:77:E0
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 0198D5835A2EED6C4E8BFC5053CFDD7E540C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0CA5
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: d6fgehpY2f4htNGW4rd1vgueHgkr8plwwyfmJBGXoqk=)
3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5a:2e:ed:6c:4e:8b:fc:50:53:cf:dd:7e:54:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=bcb520e4bc8987b1b4f3141406959f9d731177e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:21:d7:f0:08:06:21:2b:01:ed:ff:12:0d:
cb:e3:57:4c:3b:f0:f8:42:b6:91:c4:44:e1:f3:6e:
3e:7e:c9:11:fc:54:07:4b:7d:d7:6d:9c:f5:d2:25:
a2:d1:cd:a6:90:57:3e:bf:6c:51:88:e8:b1:ea:f5:
ea:9a:06:f4:b8:cc:a4:5f:eb:5b:a1:56:88:89:98:
23:ff:94:d9:d2:7e:5f:8c:8f:62:83:12:41:9e:8d:
c2:15:c6:ac:36:ef:ee:fb:ce:a3:01:4f:e8:88:26:
fc:40:36:bd:42:62:ce:73:a9:d6:82:29:f9:9b:33:
ae:9b:05:4f:38:06:3e:86:6f:75:b6:a1:95:1b:95:
c2:03:30:0c:33:b4:f8:53:de:e8:d4:c6:7c:ea:0b:
59:9f:c8:46:1a:1d:61:86:b0:7f:47:0e:45:bb:4a:
bd:6a:4f:78:23:21:c0:11:9c:ff:2b:3a:4d:9b:46:
13:6b:21:c2:59:ee:0b:28:a3:c5:95:df:7d:a5:8e:
2b:39:9e:f8:c5:69:be:b8:16:37:e6:a7:52:8a:73:
ac:1a:d5:82:e0:43:ac:68:4b:8f:f0:47:97:91:f7:
9a:fd:32:4a:b8:e1:9e:31:1a:9e:0b:c2:ea:cd:30:
42:6e:82:97:ab:dc:82:fd:1f:57:db:d0:75:09:19:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B5:20:E4:BC:89:87:B1:B4:F3:14:14:06:95:9F:9D:73:11:77:E0
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:6d:80:66:65:1d:8e:21:54:f4:7b:77:fd:1e:f7:ef:18:
5b:d6:12:a0:ee:a2:bc:7f:7e:2e:3e:2d:63:e4:17:6b:7a:69:
b9:a1:61:8c:08:05:4f:1a:43:ce:a5:92:88:84:b9:fe:f1:34:
ca:4d:e5:5b:95:3a:9e:c2:26:4e:e6:fa:71:e2:99:47:c8:8f:
9a:36:a0:50:74:71:ed:37:c4:19:b8:b3:3c:21:6e:30:c0:de:
dc:26:3f:a0:7b:24:14:72:df:a4:ac:03:9a:d2:28:15:e6:38:
a3:ef:3d:13:43:72:1b:ac:38:d4:8d:5b:be:78:d0:c1:8b:14:
fc:f3:23:fe:66:ca:d9:2b:3c:6c:36:41:91:48:36:f8:9d:89:
43:bf:8f:aa:9b:66:5d:4e:58:b8:c4:86:c0:27:74:e3:cc:f9:
c5:5d:6e:e1:83:eb:dc:40:cd:99:fb:a6:28:03:71:f1:c7:eb:
db:21:15:b8:b4:87:33:25:9d:06:67:97:fb:80:a4:f0:fb:6e:
c3:d5:b1:87:ba:73:b7:1e:48:9f:fe:65:74:aa:47:8b:33:69:
a4:2c:b2:84:06:9e:0c:26:d4:fd:1f:44:b4:ee:f2:a2:04:a4:
21:bd:49:50:ec:e0:03:6b:7f:f0:2f:f7:9b:bb:44:97:92:b4:
ce:54:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:42 2025 by rpki-client