Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: w8GWkk0RlojtDROmLP43PW+VQ+/SXE2zY0uy0/5U934=
Subject key identifier: 4F:00:2F:32:1B:16:03:53:09:0B:DB:7B:FA:56:8B:87:64:FE:1F:1C
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 0198D47438C7927B61CD45B6ADA9E3C71220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 0332
Signing time: Sat 23 Aug 2025 01:04:03 +0000
Manifest this update: Sat 23 Aug 2025 01:04:03 +0000
Manifest next update: Sun 24 Aug 2025 01:04:03 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: n7zjWfUzAkCTmzZpteG7hZIcFHcZ8Sj/6Gm60JuybEc=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:38:c7:92:7b:61:cd:45:b6:ad:a9:e3:c7:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Aug 23 01:04:03 2025 GMT
Not After : Aug 24 01:04:03 2025 GMT
Subject: CN=4f002f321b160353090bdb7bfa568b8764fe1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:a1:1e:ac:84:04:61:be:a5:57:69:5c:6d:
28:be:cb:27:91:92:e7:0a:07:cf:e4:52:0f:e9:e1:
01:65:c3:96:9d:90:c4:df:8e:29:c5:ef:b0:ec:4e:
24:e9:07:17:e6:88:fb:06:fb:d7:d9:9f:03:37:d4:
66:64:25:90:46:27:c5:28:f9:81:c4:a0:72:8b:db:
14:a6:c1:31:8f:02:7a:63:1d:e0:2e:af:17:a6:6e:
83:d0:ec:5f:c3:8d:fb:b2:26:60:3e:11:c2:3d:1d:
1e:67:7e:f8:d9:74:22:34:0a:ac:04:fd:73:07:97:
d1:7b:32:5e:c4:d6:6a:8f:29:9a:62:72:cb:c0:e7:
2b:f3:11:f6:1d:87:48:db:fc:5c:e0:6c:01:be:7b:
f7:4e:0c:96:3b:aa:f0:29:00:2c:01:78:ec:8a:90:
a9:43:f7:fe:14:40:87:15:6e:c2:db:6a:84:4a:c5:
04:8e:84:d8:5a:48:58:b2:78:8f:34:b0:22:84:a1:
d7:53:5f:f9:a0:39:f2:46:99:24:2a:99:31:3e:ff:
8d:10:a5:a5:4a:71:a5:40:68:5c:2d:c6:9e:0f:e8:
24:64:bd:ca:d5:cd:ae:93:4e:1d:2e:21:20:ce:a4:
01:80:69:b6:64:c8:82:f9:7f:82:60:08:2e:33:73:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:2F:32:1B:16:03:53:09:0B:DB:7B:FA:56:8B:87:64:FE:1F:1C
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f8:49:01:e8:22:31:3e:12:d2:83:63:92:b6:f9:66:d1:04:
d1:dd:2e:83:58:07:fc:3d:fd:90:6a:f9:6c:6c:5f:b3:32:69:
c1:69:b7:21:43:b1:cd:95:8c:d5:44:a4:70:11:d4:fe:52:1e:
d7:8f:46:75:51:85:8d:9f:6c:8a:bd:3c:86:4a:87:ac:6a:a5:
41:81:f4:50:59:7f:eb:d3:f4:a2:40:ec:37:cc:27:2c:99:82:
04:be:58:8f:9b:38:aa:5e:8d:e0:cc:9f:c7:71:c5:88:54:5a:
1e:7b:4f:72:43:ed:e0:d0:6e:93:8c:9f:6e:f0:c3:42:5f:dd:
51:de:c9:8e:97:95:33:66:a3:cc:27:a6:1b:73:b7:41:18:2d:
c2:62:91:9b:fe:10:f1:97:de:cc:b5:50:6c:55:02:7a:ec:05:
70:49:99:74:8a:6f:9d:dd:e8:01:18:5f:53:d3:a3:98:c7:b4:
55:39:c3:68:40:72:4e:67:77:da:e3:59:7b:39:ff:46:69:3a:
df:3e:67:47:07:af:f3:83:fa:c0:4b:a3:3c:33:cd:01:cb:dd:
0e:77:2d:50:bd:9e:e9:17:fd:98:ea:49:a3:ed:9d:2d:21:39:
cc:d4:86:ed:67:84:9d:cf:bd:88:5e:22:5a:8e:f8:98:4c:fe:
16:dd:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:36 2025 by rpki-client