Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier: kZhyWytB6NLIfNqfo8V/x9wcKNlv8lIPpbUHBoDinWk=
Subject key identifier: ED:1F:C9:82:DD:A2:C3:6C:5C:D5:D6:82:54:31:1F:76:1D:B0:A1:01
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 0198D4046A9AA5515BFD45830CB38C4711A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:01:55 +0000
Manifest this update: Fri 22 Aug 2025 23:01:55 +0000
Manifest next update: Sat 23 Aug 2025 23:01:55 +0000
Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: hInNOpLJVq/ciNeEuabMWQq9FJU+YWmeEE2BEkysWCo=)
2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:6a:9a:a5:51:5b:fd:45:83:0c:b3:8c:47:11:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Aug 22 23:01:55 2025 GMT
Not After : Aug 23 23:01:55 2025 GMT
Subject: CN=ed1fc982dda2c36c5cd5d68254311f761db0a101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:ae:5d:8e:4d:5f:fb:8b:a4:b5:d5:3e:1f:
3c:77:26:ea:1f:d4:72:3b:1a:65:e0:46:cc:b7:ae:
e7:9d:1b:42:c4:f8:65:4e:ff:ff:2e:3b:14:c8:96:
bc:fc:d6:c3:68:f7:61:42:ec:42:b3:15:ce:be:a1:
bb:1a:b8:38:f2:17:ff:a6:bf:9d:11:77:9b:b7:6b:
7f:94:11:14:76:a1:ae:88:db:40:8e:2a:52:88:e6:
9d:da:b7:b1:97:b7:5c:e5:50:ad:72:5a:bf:a0:98:
2f:4e:dc:27:b4:63:41:f1:ca:3a:5c:f4:41:d3:b7:
78:cb:4b:6b:58:0d:28:58:3b:6a:a4:9d:b1:2d:33:
27:cc:bd:70:16:e2:ab:1e:20:87:01:58:3f:8d:cc:
f2:f0:09:ab:f0:31:ce:db:ae:13:2c:90:b9:91:f2:
fd:69:c1:22:03:bb:bd:15:8b:7a:99:e6:e4:88:e0:
a5:03:5f:d4:6d:64:a7:65:77:fc:20:8c:f7:b9:24:
cd:62:d9:73:08:b3:d9:37:05:7e:50:ce:a9:dc:a1:
9f:ac:af:fe:b1:fb:3f:5d:e3:52:56:f1:23:f5:80:
67:45:c6:64:1c:cb:9d:7a:8e:0e:32:89:89:db:5c:
97:6d:47:00:0c:64:cd:ef:54:2a:88:39:f0:c8:5e:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1F:C9:82:DD:A2:C3:6C:5C:D5:D6:82:54:31:1F:76:1D:B0:A1:01
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:01:6b:3e:3b:91:b3:fb:dd:38:7f:da:c2:5d:70:4b:5f:
0a:71:d1:f6:fa:66:20:c7:86:b7:fa:9e:e8:f0:82:33:17:fe:
fd:92:71:ad:5a:02:6b:91:fa:74:6f:1d:13:90:1e:a0:13:65:
50:4b:1d:04:94:9f:47:67:d9:97:c7:4c:08:45:5f:13:6d:04:
f2:35:78:6f:31:0a:2e:af:93:42:b1:cb:8c:bf:39:59:0c:95:
33:a0:54:13:4a:2f:96:5f:fd:2a:ef:1f:a6:09:66:01:f2:1d:
03:2b:66:12:2a:8b:98:98:ac:7d:c2:2a:4a:1a:a4:df:29:14:
a0:56:d4:2f:c3:de:f2:49:db:36:2d:9c:49:12:a5:cb:d1:66:
34:8c:a1:99:38:fc:75:56:8b:10:63:02:6c:61:b2:51:ef:c3:
eb:d6:2e:d2:e2:52:37:df:f3:7c:af:57:3a:77:61:00:26:6d:
00:6b:30:6b:ad:a0:9f:ea:61:14:f1:43:95:c3:fc:86:d2:61:
e6:b5:25:72:f8:5e:ba:4a:19:10:93:ff:7d:aa:2b:90:3b:7c:
fc:ce:70:44:f3:6a:3d:fd:cd:a9:28:7b:e0:34:da:87:5a:d1:
04:e2:37:81:c2:90:43:66:3d:6b:f4:81:53:f5:0c:a8:b4:2f:
73:f2:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:45 2025 by rpki-client