Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: 5WESaAw09xlraSrbS1M3H5vO1etAM/fF1Xh9l0JOxTE=
Subject key identifier: 84:57:D2:26:C3:CD:70:E3:83:FB:46:2D:3E:99:60:24:E4:2A:7E:52
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 0198D8502542B4F4BDC135498813F4F0D6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 1537
Signing time: Sat 23 Aug 2025 19:03:07 +0000
Manifest this update: Sat 23 Aug 2025 19:03:07 +0000
Manifest next update: Sun 24 Aug 2025 19:03:07 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: gYI/QNISlP/PV41UPy3pc2CA+/ToO4SeRRtc9oSIaUc=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:25:42:b4:f4:bd:c1:35:49:88:13:f4:f0:d6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Aug 23 19:03:07 2025 GMT
Not After : Aug 24 19:03:07 2025 GMT
Subject: CN=8457d226c3cd70e383fb462d3e996024e42a7e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:ac:b7:e9:8c:84:1a:72:8c:77:87:3d:7d:
84:2b:cb:b0:cb:82:8d:76:72:ae:aa:99:f7:32:9d:
ba:a0:0f:6a:5c:8f:1b:2f:c8:b1:eb:a7:bc:b4:7f:
4e:d9:45:91:30:fd:52:c6:f2:49:a1:df:ee:f3:29:
ad:6b:86:6c:d2:63:b9:15:4a:ce:fd:0b:90:15:0a:
c6:70:1d:3c:e9:14:0c:34:de:6b:f6:34:9d:79:f8:
c1:97:2c:5e:63:e2:06:a7:6f:fd:d4:8c:ac:7a:aa:
34:7f:23:78:00:c6:bc:55:01:d7:98:68:3f:c7:fe:
da:15:ce:8f:1d:73:9e:bc:0b:5a:3f:28:8c:af:be:
b1:f9:4f:1c:b3:2d:95:1f:70:e7:36:56:55:4c:ef:
6b:98:26:13:b8:56:af:6a:b3:fc:3a:f9:5a:88:60:
6a:51:93:43:2c:67:a1:f8:73:66:a2:85:be:13:b4:
69:26:e6:70:6e:2b:94:bd:c6:88:15:b2:25:51:b2:
3d:75:0c:7e:b9:57:60:49:b3:45:d4:52:82:f5:45:
e5:1b:77:42:f1:19:3f:7b:85:01:87:49:77:64:ea:
94:99:fd:19:74:15:9d:16:a9:0a:e5:d4:e8:fc:4a:
fc:6a:58:69:08:4d:c2:7c:77:60:ba:7c:cd:01:8d:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:D2:26:C3:CD:70:E3:83:FB:46:2D:3E:99:60:24:E4:2A:7E:52
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:33:2d:94:8d:39:fc:9f:37:23:66:d1:f3:99:53:9c:91:da:
88:29:68:a1:18:13:b4:4f:e3:20:10:9d:9d:88:5d:91:f8:d1:
dc:fe:4f:99:35:94:1a:26:13:e1:29:d6:40:56:18:1c:b0:29:
6b:1d:da:e3:a5:a3:70:23:bb:d9:53:27:e3:56:93:4f:f0:83:
66:d2:51:a1:a3:d5:2a:15:9a:20:20:3b:b1:f8:02:20:f8:c3:
9a:9c:56:40:a5:21:e8:36:93:70:7f:e4:a2:20:29:a5:2c:10:
d0:0d:85:50:86:20:74:71:eb:fa:7d:6b:6e:4e:55:0b:90:ce:
ef:81:37:c1:e2:25:05:cd:f3:28:ae:57:3a:63:cc:15:f2:75:
e9:c8:e8:60:f8:be:b5:e2:6a:1b:ec:82:46:7d:28:1e:1e:b2:
1e:62:4b:d8:b7:7b:d1:bf:53:df:df:fd:97:39:48:54:b9:3c:
cd:15:02:dc:c6:6f:b2:7d:73:8e:f7:04:aa:07:98:d4:ce:e0:
7e:37:f5:f0:2c:c5:3b:58:75:0a:68:4b:4d:73:d5:da:d1:a3:
80:3b:ad:4b:26:79:66:95:65:bc:d4:5b:0e:72:68:4a:55:b4:
e0:42:06:d4:d4:bc:cf:eb:dd:29:78:9c:7f:0f:cc:18:3f:83:
29:db:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:12:43 2025 by rpki-client