Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: 0Z+Ys4Ka9uk8XETMwAdaGuLGw0z3htoaLV2KLhkTjTw=
Subject key identifier: E8:A3:D3:C8:87:D4:DF:F2:67:03:56:62:67:8F:7F:06:3A:01:EA:81
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 0198D65FB59CF565B420934AB068EA6A6DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 12A9
Signing time: Sat 23 Aug 2025 10:00:53 +0000
Manifest this update: Sat 23 Aug 2025 10:00:53 +0000
Manifest next update: Sun 24 Aug 2025 10:00:53 +0000
Files and hashes: 1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: 2PJbCDnhJ1xktENGQMExNbHLswYvM6OhCdusH4U/MQI=)
2: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=)
3: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b5:9c:f5:65:b4:20:93:4a:b0:68:ea:6a:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Aug 23 10:00:53 2025 GMT
Not After : Aug 24 10:00:53 2025 GMT
Subject: CN=e8a3d3c887d4dff267035662678f7f063a01ea81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:bb:38:e8:08:cb:a5:66:0f:0f:ca:d1:14:
cc:cb:dc:f8:80:b8:ad:ac:3e:e3:a8:11:60:14:85:
e2:de:e4:7e:bc:44:62:7b:27:9f:2c:15:d4:5c:cb:
48:bb:ba:ee:dd:86:d2:b6:ec:a4:19:37:f2:9c:78:
bd:da:74:16:64:20:7d:43:32:12:05:ba:5a:b9:d1:
b8:52:e7:04:bb:a9:9e:45:4b:d9:0c:71:00:a4:14:
6a:ba:a3:4b:c2:59:31:fe:17:e3:f0:48:35:40:67:
3a:95:fa:df:fc:de:b2:24:ee:77:a9:56:8f:15:60:
b9:3a:89:d7:f1:c1:e8:dc:9c:e5:ac:ab:98:e8:d4:
cc:f8:31:93:b2:7c:1b:33:6a:cc:c4:e2:c1:6a:4a:
7d:6c:76:9a:2f:0c:58:72:8a:48:11:2d:7a:93:6c:
dd:34:4a:fb:16:06:3c:cf:e4:29:27:d4:12:d1:47:
9d:ab:5c:a4:06:0b:91:94:8c:a1:d2:03:90:26:48:
4d:0e:bb:0a:1d:f4:74:39:25:5a:3c:c6:2e:66:43:
95:97:25:fe:b4:30:d9:5e:34:83:3e:6c:ca:67:fd:
4d:ca:43:8e:7f:1b:c4:3c:36:09:3f:d5:04:8d:1b:
44:bd:f0:64:ae:37:07:90:48:80:8c:a9:63:62:f0:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:D3:C8:87:D4:DF:F2:67:03:56:62:67:8F:7F:06:3A:01:EA:81
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f2:47:36:69:31:60:6b:fa:dd:b4:38:4f:7d:5e:bb:5d:cb:
e8:0e:ba:d4:2d:d7:b4:de:2d:f6:ab:97:32:f4:e7:28:35:d3:
45:8c:19:8d:01:8a:ab:b7:d8:f1:b7:95:98:83:23:d2:c2:b0:
cf:14:63:af:c4:ea:32:5c:6d:f5:ab:c9:fa:25:b3:09:eb:67:
c8:23:b2:8e:2e:b7:08:5e:ca:9b:39:9d:aa:3d:6f:ad:69:69:
e1:8f:c3:34:7d:85:5a:5f:ed:32:54:0b:8c:72:04:68:13:4a:
39:8a:4d:1e:ce:46:38:69:44:41:7f:53:3d:43:85:43:fe:2f:
03:7f:fc:20:fa:75:4e:0e:83:b2:96:29:d6:aa:9f:e4:60:04:
b8:03:1c:3e:a4:a0:98:0a:b0:9d:0e:8d:9b:7f:59:e6:22:41:
b0:13:09:67:c7:ea:af:38:d5:cb:1e:d6:d2:d9:e7:7d:59:93:
3c:6d:2f:05:12:e2:9c:de:e4:92:94:9e:c8:78:7f:f3:93:ec:
8a:ee:af:85:0e:63:76:b5:63:e9:47:40:97:69:2d:5b:84:11:
ac:1c:53:ff:3a:ec:f2:2d:f0:08:79:2c:bc:37:4c:d6:18:60:
62:b4:ec:0b:47:15:36:94:d8:cd:22:75:ce:ad:01:a1:a8:10:
4a:c0:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:36:27 2025 by rpki-client