
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File: 8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier: qFxrYPY0he2jDOuqJg5EiJ4o4c/Pp4B0pAOEMZCA4XQ=
Subject key identifier: B4:32:84:EF:2E:98:02:41:48:9F:2F:68:3D:20:0C:0E:F6:5D:80:39
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer: /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial: 0198D6605C19E03EE40D3AE7F67719050FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number: 0E9E
Signing time: Sat 23 Aug 2025 10:01:35 +0000
Manifest this update: Sat 23 Aug 2025 10:01:35 +0000
Manifest next update: Sun 24 Aug 2025 10:01:35 +0000
Files and hashes: 1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: LLoCNKb75LPq48nxROgl5FtmVQYz4usCdYeomwi0v1E=)
2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5c:19:e0:3e:e4:0d:3a:e7:f6:77:19:05:0f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Validity
Not Before: Aug 23 10:01:35 2025 GMT
Not After : Aug 24 10:01:35 2025 GMT
Subject: CN=b43284ef2e980241489f2f683d200c0ef65d8039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:60:31:9f:5b:57:ea:63:b7:af:c9:6a:6b:
4d:d1:4b:79:83:99:64:cd:cb:9e:4e:b3:cd:75:5a:
ba:38:f7:ce:4e:9b:6d:9e:08:04:f8:c6:ea:77:fc:
2e:66:0d:ba:00:f8:5e:da:5e:91:af:af:c4:97:7a:
2c:6d:fd:e3:f8:79:9d:87:4d:fb:7d:9a:36:2c:17:
78:d4:82:a2:e3:71:19:15:cb:ea:21:1c:e4:3f:16:
aa:c4:e6:60:0b:67:b9:60:16:b4:95:46:d8:0f:60:
15:8b:6d:67:88:0e:b3:85:0e:b1:7f:87:73:32:9e:
f4:5a:aa:08:22:5b:ae:64:a6:d4:ef:d7:e4:42:73:
b5:41:9d:d5:03:b6:b1:dc:1b:96:da:3f:51:6c:95:
55:d5:10:a5:31:86:a5:ad:46:94:b5:e6:95:d2:be:
83:1f:3a:0e:32:e9:4e:de:ad:d7:99:0c:23:16:12:
e0:79:6b:f5:84:08:20:a1:58:21:77:59:70:3f:ac:
52:54:bc:d5:4e:8a:73:cc:82:f8:d4:37:33:32:c9:
a9:43:76:4d:7c:40:bd:a9:4b:35:38:ee:aa:33:78:
05:b1:09:f7:84:2f:51:12:47:24:fe:72:72:86:bc:
21:e6:c8:32:aa:4b:0a:b9:47:9b:44:ed:87:fc:1c:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:84:EF:2E:98:02:41:48:9F:2F:68:3D:20:0C:0E:F6:5D:80:39
X509v3 Authority Key Identifier:
keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e0:17:17:86:52:21:c3:a2:2a:ed:de:42:dd:f3:b7:a9:4e:
ee:44:24:67:f3:be:0f:95:cb:8a:c8:89:c0:82:a1:8b:be:5d:
5d:43:92:e0:e4:e3:7a:0b:65:b8:5a:7a:bb:00:f1:7f:c5:9f:
4f:98:73:82:2c:f9:22:1e:14:80:9a:56:5e:0c:1b:a4:50:b9:
6d:8c:78:46:0a:fb:1b:35:50:1a:aa:ab:96:c8:1c:49:c5:a7:
92:cd:d3:72:96:cf:6b:d0:1c:6e:7b:a6:45:28:b3:09:3d:32:
12:ff:a0:7e:ff:9e:61:7d:aa:d3:e4:8f:00:23:ba:39:e4:c7:
a5:9d:78:70:8e:84:78:15:2d:12:b2:e8:8a:33:9b:f9:3c:e6:
17:91:b2:eb:89:6d:b6:3d:06:e1:8d:52:ed:86:12:9b:9d:19:
e0:5a:eb:d7:a5:db:31:9a:28:09:cf:ae:52:d4:07:5f:6c:a3:
aa:2c:fe:c4:09:50:c7:5b:e8:c2:43:d9:fc:ec:04:dc:e0:fb:
86:f4:98:28:82:79:84:f1:cb:5e:df:f2:88:4f:fc:d1:ea:01:
48:60:0a:dc:55:61:f1:ae:76:fb:0f:25:8d:a4:60:11:d4:ca:
57:a7:a1:21:53:f3:be:17:8e:69:3d:3b:c1:72:6b:d0:0f:d9:
af:b3:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:22 2025 by rpki-client