Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: sTxiHB/sv0QXY//U6OZjlRRaSWx97kgQT9IpvsXudws=
Subject key identifier: 8E:33:57:90:A3:0E:38:F0:34:7C:EF:08:2D:B7:9A:D9:E6:60:B6:69
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 0198D6CD426115DF2AD4573AC4176D297DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:32 +0000
Manifest this update: Sat 23 Aug 2025 12:00:32 +0000
Manifest next update: Sun 24 Aug 2025 12:00:32 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: oQjSRN2lmk/ppdIU4ht5rOLCMhCZQFg5VS8JME9AUf8=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:42:61:15:df:2a:d4:57:3a:c4:17:6d:29:7d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Aug 23 12:00:32 2025 GMT
Not After : Aug 24 12:00:32 2025 GMT
Subject: CN=8e335790a30e38f0347cef082db79ad9e660b669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:4c:f6:6e:08:b1:fe:48:68:cb:d4:da:b2:
32:10:a0:b9:dd:24:2e:8e:49:40:d7:23:ce:e2:24:
9d:56:c8:8d:42:1c:38:f3:72:a4:5a:4c:b6:0e:91:
3d:8d:0d:0d:9c:6f:a7:8f:a6:b8:60:cc:58:65:83:
32:6e:6c:10:8d:5d:2a:20:be:ea:4e:e9:b1:b0:a2:
40:01:84:46:9f:dc:2e:42:d6:88:48:5d:69:e1:dc:
d8:47:83:a7:68:cf:13:51:fd:d7:df:f7:0f:e0:1b:
48:7e:65:bf:b9:41:7f:69:94:da:e5:85:a4:20:ff:
b8:cf:ce:27:28:c1:fb:25:0f:96:74:7a:54:09:81:
c5:26:1a:f7:00:07:48:d1:5d:a3:10:76:20:5d:3a:
db:5a:ad:b0:2d:c9:80:de:31:f5:6f:d9:41:f6:39:
09:f8:4f:61:78:42:10:90:1f:1a:6d:04:8e:a7:2d:
92:fb:db:af:41:1b:c0:20:b7:bf:83:d4:2d:04:38:
4d:69:b6:b9:41:88:26:00:c8:a5:8b:a5:71:be:1e:
af:57:c9:d0:a1:e4:e9:8a:3f:07:ae:ee:d7:12:81:
eb:5d:ce:a0:f0:c3:b9:f2:3b:f8:d6:04:27:de:1b:
46:4f:0b:7d:31:e5:87:15:3d:d1:61:74:60:90:99:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:57:90:A3:0E:38:F0:34:7C:EF:08:2D:B7:9A:D9:E6:60:B6:69
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8a:5e:11:e0:9b:2a:18:d9:d0:25:12:66:ce:ff:41:b9:a2:
d0:f5:f6:b5:0d:ee:04:a0:65:77:b2:fc:4b:70:75:05:c7:32:
6d:5c:62:73:cd:45:03:b7:d4:db:d0:32:00:ee:20:5d:3e:39:
3e:98:1a:a2:88:54:40:0d:3f:36:e3:87:d8:43:7a:58:f6:65:
c2:44:9d:d9:07:70:f1:c5:e5:c8:a7:73:26:ef:df:70:3e:85:
85:b2:a9:11:e8:1b:ef:5c:95:55:82:8f:f8:a3:37:2d:d4:fd:
30:e2:90:e4:ac:9c:a9:63:71:b7:67:1d:f7:c9:77:4b:d7:75:
b2:94:d3:b4:4a:1e:41:4a:28:e6:d7:36:19:11:3e:bd:53:ee:
4d:02:be:24:b4:65:a5:69:c4:e7:80:70:3a:36:b5:cd:98:12:
9d:9a:09:bf:3b:0d:a1:50:d0:11:cf:94:ec:ab:8c:99:b8:49:
39:89:af:de:0d:7f:dc:ed:20:19:d9:02:e5:47:08:d6:63:45:
7b:26:ad:da:29:96:8d:de:6d:9d:92:c6:ba:fd:4d:57:7d:20:
bf:34:3e:f1:bd:92:29:65:44:d9:da:c6:61:67:77:35:df:ab:
6c:d1:f7:4c:5a:4c:b8:e4:8f:a2:18:9a:74:5c:09:ae:c4:5a:
ce:55:77:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:22 2025 by rpki-client