Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: VXOm/8KBDCrGC50yojQJCVzI1TW0HZjBVdd+SvNmkc8=
Subject key identifier: 91:BF:46:78:22:CB:EC:E2:DA:3E:A5:38:21:48:75:7E:91:14:F9:AB
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 0198D472F0A5A49CE23E8359320C740FC259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:39 +0000
Manifest this update: Sat 23 Aug 2025 01:02:39 +0000
Manifest next update: Sun 24 Aug 2025 01:02:39 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: +aAJtvyZ3cVevQGoL97usgNTHeL+dM2hLYPnDLIUKPc=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f0:a5:a4:9c:e2:3e:83:59:32:0c:74:0f:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Aug 23 01:02:39 2025 GMT
Not After : Aug 24 01:02:39 2025 GMT
Subject: CN=91bf467822cbece2da3ea5382148757e9114f9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:34:8e:5d:0d:99:2a:5e:92:d4:b6:2b:c4:
9c:79:dc:3d:6e:77:bb:0c:36:a1:7e:d4:c5:6d:fb:
e4:3c:8b:cb:c3:83:d2:b5:ad:1c:79:10:a7:b5:63:
a0:fb:48:83:8e:ba:21:1a:a3:f6:d0:b3:af:6f:e1:
f3:2b:0f:a7:10:ea:75:32:f4:f6:a7:6c:b6:dd:a3:
fe:48:94:1d:8b:cd:f8:1e:26:52:bf:0a:52:6d:49:
41:24:c9:72:19:9c:f3:03:bd:5c:2b:6d:7e:fb:d5:
46:ba:54:c9:e6:4a:6c:27:67:3e:12:80:00:d8:ba:
99:42:7e:38:b3:4a:e4:e6:d5:b5:97:a6:75:96:52:
0e:b5:20:ef:7e:e7:eb:5c:60:ee:67:29:25:f0:c0:
1a:7d:d6:11:d5:ea:c4:70:c8:76:d6:73:29:32:9b:
0c:00:36:9e:cd:33:64:f6:b1:9e:d7:6a:41:43:31:
0e:26:24:1c:96:ec:f8:c0:b7:cd:a0:fb:86:85:9c:
73:f3:61:2d:ec:ef:e5:a4:d3:03:eb:b1:42:f9:01:
d4:79:72:e9:9e:23:11:6d:e5:2b:be:72:85:91:aa:
9c:3e:61:f5:61:ae:37:a3:a7:ab:01:1d:74:dc:a5:
6b:8f:f4:e7:0d:95:8a:03:cd:83:11:6c:0d:e5:87:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BF:46:78:22:CB:EC:E2:DA:3E:A5:38:21:48:75:7E:91:14:F9:AB
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:87:50:30:c0:d9:e7:f2:e0:e0:e1:2c:da:76:f9:92:1a:21:
d5:63:ca:5f:25:2b:5a:e0:d9:ec:88:1e:83:a7:a7:85:bd:bb:
24:dd:08:66:dd:55:80:5b:10:b5:b2:1c:2a:11:77:33:63:83:
f7:c9:97:8c:bc:34:3a:d9:f8:0d:37:65:f0:cd:99:0a:bc:7c:
9e:d7:1a:ba:fc:dd:11:21:55:40:4b:02:a4:e8:30:03:ab:b1:
e1:69:02:de:83:78:b5:d7:04:1a:7a:62:a5:28:1a:83:e5:ea:
5e:14:c3:a9:fb:c4:34:bb:16:f4:24:ff:34:f8:49:a8:8b:35:
34:6a:ed:e2:21:10:e7:da:b2:44:cd:d7:96:94:c6:7e:99:fe:
63:40:2b:2f:52:1b:9f:c8:7c:66:39:c4:b8:3a:e1:d2:ee:dc:
75:aa:1e:a4:22:d0:03:69:d9:5b:c1:f4:0c:b4:82:4b:9e:47:
aa:7d:fb:68:44:7c:51:b0:38:e4:dc:2d:b6:5a:55:32:97:b2:
89:81:e3:ce:84:2a:1c:ee:9a:aa:a3:e0:d3:b6:57:85:52:d2:
4d:53:96:a9:a0:2e:6b:cb:14:f6:ea:92:13:42:8c:81:9a:81:
00:f6:1f:07:d6:2c:80:aa:f3:50:92:9b:b5:04:0e:11:6d:27:
39:cf:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:11 2025 by rpki-client