Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: LH95810W+YjYPWQ1LOUsV2ETgZpvAs3Lxo9ChwvRtE0=
Subject key identifier: 74:1F:24:4A:F7:1E:79:3D:38:EC:0D:73:D6:88:8B:C6:64:E3:C5:1B
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 0198D4734EC2BF92BE4584FE43445C67E9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 01:03:03 +0000
Manifest this update: Sat 23 Aug 2025 01:03:03 +0000
Manifest next update: Sun 24 Aug 2025 01:03:03 +0000
Files and hashes: 1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: yUooDxn1nC4Mu71uG5SpwhXg8YWZIg7qmWDAkNgBQUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4e:c2:bf:92:be:45:84:fe:43:44:5c:67:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Aug 23 01:03:03 2025 GMT
Not After : Aug 24 01:03:03 2025 GMT
Subject: CN=741f244af71e793d38ec0d73d6888bc664e3c51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:f9:9d:dd:1d:f5:fb:41:e0:92:b0:fc:ae:
97:3c:66:86:48:8b:76:16:a0:28:67:5f:d3:e6:4e:
b7:02:76:46:7c:b8:24:53:79:aa:da:8f:c6:30:40:
6f:9c:c0:d9:af:30:7e:70:9c:ea:41:37:28:d1:74:
ee:9d:22:5c:c1:c6:9a:fe:87:aa:6d:b2:61:a8:7b:
7c:b1:e1:cf:3e:3e:f0:a4:f3:1e:f0:25:f8:3e:1c:
82:28:d7:98:18:43:e9:7e:a7:bf:8a:a5:c4:8e:ee:
49:b7:23:ea:27:1f:95:fa:24:a3:3a:3b:a8:7b:88:
59:4a:1f:96:2e:20:f2:29:c0:f7:b6:ce:56:82:31:
54:ba:73:e5:b3:69:d4:62:b8:b9:65:2d:fa:7b:5b:
6a:6b:78:4a:46:0e:6d:d4:65:39:57:34:79:11:1b:
8b:fa:28:b1:2e:f0:6b:2e:fb:7a:81:94:72:a6:cc:
2c:53:89:8f:3a:96:3a:37:6b:4a:55:6d:95:ec:4f:
6f:90:78:4b:aa:e1:ee:0f:f4:c3:f5:cb:0b:9e:3a:
27:63:20:cd:0c:9e:41:ab:60:4e:e2:72:6a:24:4c:
03:40:39:7d:f1:84:8a:43:5e:21:ba:90:5f:5a:67:
dc:eb:a1:af:a8:f4:a9:32:4c:28:05:48:24:7c:f5:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1F:24:4A:F7:1E:79:3D:38:EC:0D:73:D6:88:8B:C6:64:E3:C5:1B
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2a:64:fe:6e:57:e4:ac:18:51:25:0e:5c:f5:e0:3e:b9:fb:
89:ec:1a:d4:64:f9:85:2e:92:60:69:fd:25:73:70:c9:13:af:
25:b5:c3:42:20:2b:dc:c6:36:bb:e9:bf:03:dd:85:fd:14:1a:
ba:df:1a:b9:5d:03:1d:2f:18:7a:c3:9b:98:77:0c:07:f4:bc:
66:86:af:b4:e3:fa:b3:21:42:0a:a3:b9:cf:de:28:6f:94:3c:
a5:85:4e:d1:d8:f2:21:48:81:e0:3e:f8:d7:3c:7f:18:b2:39:
fd:dd:ad:ad:63:49:1d:d3:15:09:49:92:f2:aa:22:b5:68:e5:
5a:bf:17:c9:9b:e9:b6:05:cb:b1:b1:2d:ed:6e:d9:ca:ea:e5:
b4:5e:51:0e:fa:8e:4a:54:a7:fc:f9:f6:d9:4d:e6:4e:43:5e:
13:0a:a4:1f:1a:2f:e0:3b:76:67:6b:70:30:57:05:44:8d:22:
9f:ac:fd:73:a8:e3:5d:22:58:97:05:28:1f:bb:a9:c0:f6:d6:
c0:ef:a7:44:37:61:34:ab:e4:5a:bc:c0:bc:78:90:4d:85:60:
98:37:16:df:7e:5f:60:f7:14:99:43:e0:c8:de:cd:06:86:78:
69:43:e8:c5:45:4a:45:70:45:7f:b7:e8:cb:aa:ae:17:d9:82:
cb:92:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:15 2025 by rpki-client