Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: S6XqEeW3j/mzmbyB8kEXS7dPlVec+qRnf2eN0JsP3n0=
Subject key identifier: C0:FC:83:51:AE:C8:AF:BA:5D:5C:9A:33:FE:56:E4:B6:5B:C0:BE:59
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 0198D7061408C9583E46186BC2EBB743380A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 0146
Signing time: Sat 23 Aug 2025 13:02:36 +0000
Manifest this update: Sat 23 Aug 2025 13:02:36 +0000
Manifest next update: Sun 24 Aug 2025 13:02:36 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: 8f+QG6FWyPPjbUiye/zp5fvcOcCmnhtKmglOFuEy0sc=)
2: g827ucs3EThsAfzbTT2FMhBdWaY.roa (hash: PzIDENEz83QkajYAOtSf7pvZj1/xEbuYaZgcwQILtJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:14:08:c9:58:3e:46:18:6b:c2:eb:b7:43:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Aug 23 13:02:36 2025 GMT
Not After : Aug 24 13:02:36 2025 GMT
Subject: CN=c0fc8351aec8afba5d5c9a33fe56e4b65bc0be59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:e5:2a:e1:fe:a4:4e:e6:1b:aa:b4:a9:87:
2d:da:65:9c:28:ef:67:69:a8:cd:dd:f1:d3:cb:62:
f2:fd:21:0d:79:6d:90:83:b8:98:20:22:d8:0b:6e:
12:38:2e:07:9f:56:53:c5:a5:ab:7e:f0:ce:d3:d0:
fe:d7:4d:b8:be:90:71:ce:39:6d:e9:8c:04:e1:22:
06:4f:43:65:50:40:d6:b6:fb:40:8e:f8:7e:67:b3:
ea:a3:d0:46:e1:b5:f7:bd:5e:59:60:83:da:b6:c4:
24:14:e6:cd:be:03:68:fb:4f:61:4c:5c:e9:5d:31:
a7:5b:dd:98:cd:60:31:68:ef:df:5b:2a:68:25:1a:
ad:7c:3e:aa:45:3d:bb:c4:b7:2f:c9:72:ca:48:09:
0c:7d:aa:44:72:2c:4d:e7:ee:08:4c:51:5d:a9:58:
89:77:55:7b:51:c6:98:58:58:72:ba:59:8e:d1:9b:
d0:4a:81:3a:b9:65:61:d3:ed:3d:39:8e:1b:e7:53:
93:ac:19:1b:6c:c4:56:82:89:25:68:b4:92:29:c6:
c2:e2:88:ba:3c:0e:eb:d9:1b:ff:b1:e8:3a:d2:73:
ca:1c:13:b5:46:0e:7b:82:c1:bf:34:33:86:b7:40:
5c:af:39:99:8f:78:72:dc:67:89:a7:20:fe:b5:d3:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:83:51:AE:C8:AF:BA:5D:5C:9A:33:FE:56:E4:B6:5B:C0:BE:59
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:30:79:53:c1:6a:b4:22:52:17:46:eb:29:65:8e:a6:9c:
df:38:e7:d1:67:f9:e1:b5:5e:52:cf:ef:70:3f:6a:93:30:ff:
3d:c4:11:d3:75:19:6a:6c:5c:15:07:d7:68:49:7b:f7:9d:43:
7e:45:42:50:38:19:2d:ef:43:5c:9d:ac:6f:fe:9d:11:74:39:
d2:96:e0:85:0f:42:41:c6:42:b3:8a:e8:3f:ec:ca:62:65:cb:
d9:d0:ce:63:af:cc:c0:65:17:45:7f:b5:c3:44:c9:83:1b:f7:
2c:4e:4e:b3:51:60:b8:d9:33:37:e3:ac:a1:e9:30:d0:be:bb:
2c:4f:d4:fc:98:e3:cd:ff:a5:61:dc:6d:c6:1f:3c:1c:a2:68:
16:eb:a0:99:9d:1b:9e:3a:c0:c6:47:d7:22:f1:1a:ce:64:c3:
7b:37:ca:d6:cd:26:d4:76:f4:82:d9:58:8a:4f:e9:29:ed:4a:
d3:18:64:8d:08:3c:be:f5:e2:9a:61:e1:fc:27:6c:bc:21:69:
b9:b6:ff:71:14:e0:97:38:5e:59:9a:68:e1:7f:78:96:30:2a:
35:77:44:dc:b2:89:4c:6e:b2:17:2e:91:c5:fa:ef:54:4b:12:
a1:14:e8:e5:88:4f:3a:20:73:53:d0:81:99:f8:4e:e8:16:f9:
30:cb:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:18:37 2025 by rpki-client