Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File: h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier: m2bCfIURZLFyQ+9ti28I1iAZslED0zjNjegDJr7u48Q=
Subject key identifier: AD:24:4B:60:E8:D8:CF:AD:5D:8F:D2:A3:8E:2D:E1:BB:77:FF:0B:3B
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial: 0198D6CDBC3D429C01E63E81B0D9A7B06517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number: 086A
Signing time: Sat 23 Aug 2025 12:01:03 +0000
Manifest this update: Sat 23 Aug 2025 12:01:03 +0000
Manifest next update: Sun 24 Aug 2025 12:01:03 +0000
Files and hashes: 1: AO9S5FPNyFUFF8sl00iZG2uj63o.roa (hash: dj/tZS47oYr7HP4aHIaoRYk9wXqksDBdwIFty9clVxk=)
2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: 6XPO23S3JFZZjCIgwVUmsEOl8H2Xp9JFKl4jv6q7tiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:bc:3d:42:9c:01:e6:3e:81:b0:d9:a7:b0:65:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Validity
Not Before: Aug 23 12:01:03 2025 GMT
Not After : Aug 24 12:01:03 2025 GMT
Subject: CN=ad244b60e8d8cfad5d8fd2a38e2de1bb77ff0b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:be:30:45:3b:30:61:c4:b1:0f:73:8b:2c:f4:
9f:1e:f5:35:96:38:fe:b2:27:c2:c2:1f:54:c1:cf:
fd:38:4f:8b:87:01:f8:8b:b6:d9:1a:34:ea:53:60:
17:f2:78:da:de:a6:8e:d6:f4:b2:eb:b5:85:c7:ab:
77:aa:53:32:cf:57:5f:28:c6:54:49:29:9b:73:80:
1a:49:73:44:46:f4:0b:d1:67:30:cf:cf:50:4f:12:
b7:4e:d1:5a:6b:ef:bc:43:b8:ed:66:cf:bc:1b:76:
00:ff:1c:ad:3e:90:0a:6e:38:86:4b:97:04:e3:4c:
85:26:35:a0:b5:16:45:9a:b4:13:80:5f:eb:3a:a9:
75:e5:74:73:1a:e4:af:fb:b9:28:36:97:a2:87:cf:
24:fb:28:3d:4e:33:fd:46:2d:1f:1a:ec:73:1c:34:
39:88:6f:7c:b9:fb:43:e3:4a:74:32:85:34:44:78:
8f:9f:e0:55:d1:d9:5e:75:78:39:cd:d7:1a:ed:e2:
bc:89:22:d0:f3:16:c8:98:73:9f:cc:39:a5:5c:d4:
92:b3:b3:8c:a1:86:7b:52:fc:51:64:ad:3f:40:11:
e3:0b:87:c1:98:b2:d7:26:f7:7b:d2:e7:2a:84:80:
0b:33:f3:51:ff:3c:4d:d8:75:d4:40:8f:bc:aa:fe:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:4B:60:E8:D8:CF:AD:5D:8F:D2:A3:8E:2D:E1:BB:77:FF:0B:3B
X509v3 Authority Key Identifier:
keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:7c:5f:0a:4e:ee:b8:cb:15:2d:f0:e0:fc:fe:ad:54:30:
52:c3:a0:0b:73:f1:b2:3e:cb:c4:26:81:39:df:18:9f:e3:b9:
31:af:b2:cd:c2:26:3c:ba:42:c3:f8:ea:f9:63:95:a3:23:23:
7b:d7:2e:d6:5c:19:0e:d0:b3:49:29:68:f4:4d:11:60:5d:ff:
2a:88:93:38:ef:cc:44:b0:13:77:f4:5a:f9:1e:6e:66:1c:05:
92:2a:42:73:0d:4c:47:49:95:ee:4f:58:24:a4:57:93:1f:04:
20:d6:e2:e2:70:3e:41:2b:f0:81:41:43:0b:bf:0e:7a:67:82:
39:cf:64:04:da:9a:f9:61:82:70:70:03:ad:7d:71:65:36:3d:
3e:af:de:05:02:e5:e2:38:5f:33:3c:57:22:e9:91:d9:94:95:
f1:e6:d9:30:c2:7a:75:c5:9c:c1:16:2d:c5:b0:b0:d0:a1:86:
1b:cd:7e:3d:c2:75:aa:af:2e:2c:0c:07:89:d5:9a:50:a3:11:
22:6c:6e:42:a5:11:83:10:45:d1:a2:72:69:42:a4:17:ad:71:
31:a2:14:25:6b:4a:4c:e1:e5:6e:5d:7c:3c:d0:65:fe:fd:f8:
3f:bd:5e:8d:ed:66:0d:1c:72:86:21:0e:18:23:90:f4:74:42:
d3:33:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:10 2025 by rpki-client