Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
File: RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json)
Hash identifier: 4UC2KxRuQJvQTPaHBcp59thM6R2rhWD7SIZ6tjUeF98=
Subject key identifier: EF:D7:DD:DD:24:38:2C:53:EE:42:11:84:D5:CF:18:30:26:2E:CD:F7
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial: 0198D65FEF06EFA3E73B22B04AFE90A5BDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:07 +0000
Manifest this update: Sat 23 Aug 2025 10:01:07 +0000
Manifest next update: Sun 24 Aug 2025 10:01:07 +0000
Files and hashes: 1: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: odc8o6paInvzjNWBiDxrid37yH2MtWWN00G5keAEM6M=)
2: eIPu-oRSt6i1dIgnDCklFRUAlSQ.roa (hash: Sgde8KLLocp16u9bpO8WIWMRQrBpRylsfdhGYkOvJ1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ef:06:ef:a3:e7:3b:22:b0:4a:fe:90:a5:bd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Validity
Not Before: Aug 23 10:01:07 2025 GMT
Not After : Aug 24 10:01:07 2025 GMT
Subject: CN=efd7dddd24382c53ee421184d5cf1830262ecdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:2e:11:cf:6a:cd:66:7f:91:36:13:28:ca:
a2:af:ed:22:bc:ff:29:ff:db:6a:39:f6:36:c8:4b:
46:89:12:ee:70:48:3a:2c:61:39:1a:7c:dd:d2:43:
b1:f7:40:5d:47:70:40:4b:8d:9d:d8:b1:57:3b:f4:
66:e6:12:1b:e6:a5:ef:ca:b4:5b:2d:a9:ad:b0:82:
b5:86:a7:6e:37:ce:27:1c:14:0a:61:a3:b1:d5:82:
0e:db:83:3c:91:b0:7b:34:78:40:6e:38:8f:0c:fb:
1c:de:71:06:01:b1:25:b9:26:c3:71:b3:02:5d:0c:
46:5f:2d:5e:09:b4:4d:97:a3:88:9d:8e:ab:92:76:
46:a4:8d:ee:dc:89:f0:f0:b2:22:be:44:d7:b8:68:
c3:c4:4c:be:20:de:99:62:27:d9:97:38:b5:e3:27:
22:7c:5b:55:4e:d3:4c:17:47:d8:06:66:6a:e1:07:
e6:65:d1:ae:7b:85:de:46:d8:72:c1:d7:f1:e2:dd:
1e:fa:7c:50:5f:2c:30:4c:a0:03:93:df:a3:5c:a2:
9a:d5:85:c8:b3:0a:b8:3e:9a:9f:fb:f8:7d:31:d3:
dd:6e:2d:d1:4f:42:4c:97:65:c6:04:5a:8b:ae:8f:
bd:a6:94:0b:03:05:e6:a7:bc:5a:c1:ad:c8:91:b2:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D7:DD:DD:24:38:2C:53:EE:42:11:84:D5:CF:18:30:26:2E:CD:F7
X509v3 Authority Key Identifier:
keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:87:8e:96:e1:7d:7d:02:35:b2:41:8c:28:b9:cd:2b:52:0b:
65:7e:8d:78:09:98:83:b5:fa:42:46:45:fb:8c:2c:f5:4e:05:
f5:5c:37:16:fe:ed:66:24:50:4f:54:79:57:68:37:2a:0c:1a:
ac:e5:46:84:7c:da:d9:35:0a:12:2d:14:ba:4f:43:60:d9:49:
e5:fa:96:12:e9:37:89:5e:f0:37:cb:6c:e8:c4:7d:4a:93:0a:
c9:42:27:95:62:66:3a:45:a0:b8:2f:6b:cd:88:a5:55:50:db:
61:48:d6:9c:0e:1d:0c:31:22:f4:7d:c3:9e:5d:31:6f:60:89:
25:7c:f1:f2:3f:8b:89:43:a7:09:2d:92:8c:65:94:78:f1:20:
25:26:ce:0a:b1:d0:23:19:0a:22:d8:c7:42:2a:e4:62:53:60:
b8:b4:6a:f1:01:98:39:1d:a4:a1:a0:55:82:cf:0a:3e:f2:b5:
5d:31:29:e8:66:ae:d3:48:c1:6a:61:d8:fe:d1:44:da:28:b9:
85:56:c3:de:55:b4:c7:68:6a:f1:da:fd:55:63:70:92:5c:ec:
24:85:a0:ff:8e:2f:86:1e:91:6c:19:27:8f:a0:fe:71:87:64:
91:9e:64:4d:07:27:91:03:7b:1f:4d:51:68:b8:f5:fd:48:3e:
c0:19:bb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:59 2025 by rpki-client