Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: KG+GJ09yQp5CBL0m2gHCe1PAAm9P5ItfP8DGzwU5kNA=
Subject key identifier: 5E:CF:B5:A2:1E:9A:E7:4B:3D:A4:8C:4F:D4:51:7D:93:7B:9D:B6:5A
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 0198D54E18A1C2CC6FEAC87518930AFFABA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 064A
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: xIMAwDy3bFXcpV43qdNJyo1PtoXgEc6fpZcBmNBzIjg=)
2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:18:a1:c2:cc:6f:ea:c8:75:18:93:0a:ff:ab:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=5ecfb5a21e9ae74b3da48c4fd4517d937b9db65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:45:4c:bf:a7:23:e9:6d:7c:c2:c3:c0:b8:
48:65:d1:50:75:48:1b:68:98:54:29:55:d9:07:ab:
25:41:6c:c1:3f:eb:ba:68:45:52:b5:15:54:b1:84:
cb:58:bd:f1:e7:68:35:41:13:f6:2b:74:40:34:f7:
77:be:df:65:5f:e5:db:71:f1:c9:39:2d:3d:a1:0d:
6d:0a:05:d5:9b:06:be:ba:cf:6f:fe:21:77:75:e9:
6a:b6:3b:86:9b:62:bb:ef:25:d4:79:dc:3d:d9:07:
c2:d3:6a:5a:74:d8:42:40:72:cf:b1:a2:e6:1c:e6:
2b:bd:af:3a:3a:84:e3:35:53:3b:8e:18:84:df:7e:
d9:f1:4d:8f:ae:89:70:fd:3b:db:6f:6c:9f:84:45:
20:da:c1:9d:e6:83:0e:53:6e:5e:6b:d8:6a:20:14:
71:1e:2f:45:a4:b3:b3:cd:ba:52:67:c6:2f:4f:ed:
63:e6:30:7d:40:2d:01:fd:e6:84:ee:86:a8:ab:35:
99:d2:a6:cb:9c:a9:88:34:3c:bc:02:67:a0:ea:03:
15:87:05:09:20:95:86:38:30:6b:a6:b6:7c:f9:d6:
20:56:cc:62:ce:e0:d7:fb:25:a4:c7:5c:a1:26:04:
2d:83:c6:9c:8e:1e:05:11:7d:6a:3c:48:b8:a5:97:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CF:B5:A2:1E:9A:E7:4B:3D:A4:8C:4F:D4:51:7D:93:7B:9D:B6:5A
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2c:8d:3b:cc:14:b0:08:54:1c:eb:e6:2f:90:08:93:a9:df:
c1:29:85:3a:9e:e4:68:1a:21:b8:8c:ca:e9:dd:dc:1a:0b:5a:
81:da:90:78:fa:dd:31:31:2e:50:37:9c:a8:b5:e3:40:7f:11:
e0:1f:6f:8d:8d:3f:4e:75:43:12:cb:bb:2d:85:fb:4e:46:43:
17:ff:83:81:c6:30:b2:ab:2b:98:12:96:17:43:0a:bd:fa:4f:
e1:ac:08:90:d3:8b:d6:a4:e6:92:e1:65:f7:32:67:ad:0a:d0:
b1:bf:fe:f0:a3:02:d5:5a:c4:c3:35:22:19:6d:5c:95:df:8a:
38:2f:f8:e4:e4:6e:35:eb:fa:b8:6e:28:25:58:20:d8:2e:c2:
07:26:0c:09:ac:a9:9f:b3:91:66:11:0a:75:23:3b:ad:9c:53:
65:18:0f:8a:d7:b6:1e:7d:3c:6d:94:7d:a5:bf:20:66:11:d1:
12:34:77:2f:c3:37:9a:65:d2:db:5d:0f:a7:92:ee:ab:f8:ec:
63:57:98:26:1a:3f:69:83:19:f6:85:78:f0:2c:f8:81:bb:68:
a9:7e:2a:1f:b4:59:a5:65:34:2d:35:c6:35:78:6b:c1:c5:c1:
87:bc:31:5c:ef:0d:48:a9:cf:ee:0f:98:70:e6:1b:42:9d:21:
28:3e:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:38 2025 by rpki-client