Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: 8GJqlINMrludUXoTzbqxlVZCWtNJ8viEUHEcy6vwRIc=
Subject key identifier: B6:03:64:D1:14:5A:EB:76:D9:FE:47:DF:86:D2:F7:2B:96:00:0F:ED
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 0198D583A807125D3D29EEFC8351E72A7B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0FA2
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: YsNUe1CDwJuwKYYnAW4OOksY8pTtJwvLtU8dKLMye7I=)
2: NLn-NADuc0yAyX0f_4G1dKCqIP8.roa (hash: dkLXs7qu9ok1KeNheDJk9SO+sT7GSZT5TJ1FucBWHfg=)
3: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
4: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a8:07:12:5d:3d:29:ee:fc:83:51:e7:2a:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=b60364d1145aeb76d9fe47df86d2f72b96000fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:de:5e:b0:db:94:24:cc:e6:c1:2c:fb:3c:
51:bb:18:e2:ae:a9:36:20:0d:da:51:58:72:e0:e2:
d9:dc:21:c3:e7:b3:19:bf:4d:8b:c6:51:10:98:29:
48:a4:e8:c4:79:83:9c:b9:b5:b3:12:b7:85:a0:96:
20:29:e5:72:0e:df:ba:cb:e5:8e:11:06:1c:17:a3:
bd:3d:2b:3b:d7:e1:cc:71:c7:d8:a3:78:a4:18:86:
72:be:6b:a3:77:ed:79:04:53:17:06:75:cc:b1:24:
69:39:16:e0:fc:8f:3a:19:57:30:68:77:4c:9a:87:
36:dd:db:1d:96:9f:36:5e:61:29:40:b0:96:7e:5d:
58:b0:89:38:2f:94:44:74:05:81:9a:70:c2:f6:ea:
5a:bc:06:4b:59:c0:99:02:6a:d5:0a:88:c8:38:8d:
47:67:2b:d1:97:31:5d:34:f5:c3:7c:0f:7b:ed:fc:
00:78:b6:b1:62:19:17:0f:4d:45:0c:cd:32:02:b7:
45:43:5d:14:6e:96:9c:2f:d1:34:a5:c8:13:bd:80:
8b:27:61:32:0f:27:1e:94:86:fb:af:35:5f:22:54:
c8:a9:4a:f9:72:ae:36:fc:40:40:29:55:d7:90:95:
28:90:64:c3:25:19:c9:d6:78:e0:c0:24:87:32:dc:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:03:64:D1:14:5A:EB:76:D9:FE:47:DF:86:D2:F7:2B:96:00:0F:ED
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:87:1a:43:4b:ee:91:d6:ae:9a:12:51:cb:ab:48:b9:1f:aa:
1f:e3:e6:55:70:36:11:06:f3:dc:59:0a:e8:d8:b2:d0:46:d7:
9a:e2:c4:1b:fb:dd:46:c9:5c:48:06:d9:2a:0e:94:4c:a1:59:
93:d7:31:e8:cd:66:84:ad:68:76:37:e8:f0:33:19:b3:40:de:
21:92:fb:e9:55:75:36:2e:64:7a:a8:3f:5a:61:f0:78:52:e4:
a8:9f:65:16:db:31:44:da:50:6c:45:04:b5:90:96:2b:b8:97:
ca:de:6c:64:86:5e:9e:50:79:85:71:4c:d8:26:8f:7e:6e:fd:
5c:d3:74:a4:bf:48:61:ed:37:b9:7c:82:21:76:2c:39:ab:82:
a2:8b:8c:6b:ae:e7:4e:ef:bc:da:e1:1c:73:54:6d:7d:c8:ac:
42:01:2c:8a:30:0c:3f:1c:91:2d:bd:ba:e6:72:d8:c4:d1:fb:
f8:1c:b6:99:ba:61:74:e7:a5:4f:57:04:a9:16:25:06:68:e3:
81:50:a0:90:28:aa:3c:1b:b5:05:2d:8a:05:43:4c:40:7b:13:
94:43:2c:dc:45:10:90:90:a6:51:de:bc:45:40:9d:b4:b6:96:
35:90:82:4f:18:fe:74:13:b4:63:60:d2:f5:0d:11:63:50:9f:
8c:40:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:13 2025 by rpki-client