Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: Y4+8jagZlgfG8YU6WaDCn+MG6E3mzbMXFePcAV6Kc2E=
Subject key identifier: 62:B6:1D:82:D8:E0:36:8D:00:2D:91:66:70:46:F9:86:51:2F:91:95
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 0198D583DD4BF96FEB0FF22020D5407DDBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 07D5
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: 4UTxmb7XXhhyyyijSdC6eIHhu8Td+BlLC5PiMaMiN6s=)
2: SnSqzG1_a1b3JqrDvJpsPusULh8.roa (hash: CmTfdDiNqML57MVpE16u0zA0b4fBUsNL/e5yDLkAUo8=)
3: o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa (hash: B+fFcwV95+as9F86sHUOjXkwuPQBko5Sfhe+H4+0kBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:dd:4b:f9:6f:eb:0f:f2:20:20:d5:40:7d:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=62b61d82d8e0368d002d91667046f986512f9195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:43:b8:c1:c0:e8:d5:39:97:11:df:9a:47:
70:c8:b3:80:f4:45:a1:38:ff:ae:e6:f1:67:90:30:
9b:b4:83:19:6f:bb:1b:8b:e0:63:28:58:2e:93:76:
18:2b:78:0a:6b:c7:16:37:22:79:06:74:8c:d1:a9:
4c:a2:44:34:0f:8d:df:34:95:f0:a8:83:00:89:c7:
2d:04:66:e5:d9:3c:00:4a:27:10:f5:33:92:41:ae:
24:93:d2:8c:ce:f9:58:e0:dd:4b:6b:46:9f:c9:e9:
30:bf:0e:37:a9:b6:d1:97:29:b3:d8:a9:4a:a3:41:
26:17:be:bb:47:c9:f5:73:27:e0:1f:a5:d7:2a:6e:
8c:92:90:6a:66:44:9c:e9:35:b6:e2:68:05:ec:4e:
9e:3d:a0:41:e2:d7:5f:81:f7:76:4d:f6:92:21:fb:
eb:d8:1d:3f:5a:36:5a:1f:ba:ea:36:4c:e4:f2:1f:
c2:db:af:49:0f:0c:0e:5f:b2:2c:cb:dd:74:5b:d5:
30:8a:c4:20:b7:05:8f:04:0a:85:e4:f6:5b:6f:f8:
38:e9:bf:c1:25:ba:e7:20:e5:53:4c:af:00:ce:6c:
7f:2c:68:5c:02:12:56:13:a7:ce:45:94:a9:5a:39:
c5:aa:6f:7a:e4:26:34:fe:de:9c:c1:75:c8:14:7a:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:1D:82:D8:E0:36:8D:00:2D:91:66:70:46:F9:86:51:2F:91:95
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:43:3b:26:04:af:19:d4:42:10:53:1b:a1:4f:a4:4a:38:75:
46:d5:f5:10:49:87:4a:64:d1:7c:11:f1:6e:a2:fc:60:88:bb:
a7:91:9e:70:24:d1:0a:ac:2f:c9:99:7e:38:2b:28:e8:83:7b:
19:ce:82:f3:9d:24:31:7a:0c:5c:12:74:fa:34:bb:28:ee:78:
95:5f:04:02:0f:55:f5:b4:f9:4b:3e:9c:f0:4e:a8:12:17:48:
49:96:a1:50:a3:23:92:d4:27:41:0c:07:51:ec:a5:7b:67:db:
93:6d:6f:b0:ce:c9:34:13:a0:1f:c1:d3:aa:b1:67:bd:39:42:
81:87:43:13:1f:11:36:e7:81:8a:07:96:a8:07:73:fc:1b:53:
9a:b3:2c:9b:85:4f:f3:f2:50:e4:6c:a6:68:a2:87:7b:4f:cc:
ad:c6:25:64:bc:7f:db:5d:a7:b2:2e:55:27:2c:9e:7d:ee:aa:
97:e0:3c:ba:fe:bc:44:77:a4:59:68:e1:d8:9b:d0:23:b3:7a:
93:60:3b:75:78:23:52:c9:47:e8:5e:78:79:1a:73:36:c4:90:
14:33:a3:7f:23:ff:1b:0c:fc:5c:62:7e:16:fc:73:06:29:02:
37:5e:f7:80:6c:f8:6b:5a:e2:83:ba:9e:0f:d8:18:70:71:a5:
1e:9d:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:19 2025 by rpki-client