Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: SvoWJBGcW9FnQ74HuTByazx3pYnHtZefzMgDX8QSslI=
Subject key identifier: 3B:EF:A2:35:AB:D9:31:D9:D2:99:93:0C:11:E9:94:4F:BB:14:91:55
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 0198D5BBBB5F6278546CF38F4B1971695F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: q2HNHWnOZhh8to0WUP6qLR7fXU37LOGlLQhqF0wpm7M=)
2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bb:5f:62:78:54:6c:f3:8f:4b:19:71:69:5f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=3befa235abd931d9d299930c11e9944fbb149155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:30:a8:ba:04:a6:bf:94:bb:0f:ce:aa:24:
1b:33:8e:b7:e1:b7:22:c3:2c:9a:14:7e:95:50:46:
44:c6:5d:67:e0:bf:93:14:ed:13:99:cc:ad:f8:8d:
5d:74:af:83:db:79:d2:3f:b6:43:14:ef:5a:8d:f9:
b7:ff:e8:5b:c4:af:b0:e4:d5:00:ac:ab:a6:a1:dd:
2c:cd:a6:b1:26:65:22:aa:6f:23:42:81:46:8b:63:
23:1b:6d:81:86:37:61:6d:8d:92:83:3b:b2:50:83:
06:2f:89:c1:5e:e5:80:60:67:4d:ec:87:78:cf:30:
99:1e:84:f7:ca:a5:78:86:47:7e:12:e5:a9:30:61:
f6:f8:7f:34:b8:41:6b:54:25:f4:4c:58:53:d4:20:
f4:c2:2d:3e:af:ff:b6:bd:06:ea:9a:55:dd:9e:65:
0e:77:60:29:4a:7b:f7:49:f3:1a:42:cf:f3:c1:ec:
12:53:b7:8b:ac:34:c7:b1:83:bc:8b:f6:fd:f5:84:
cf:45:2a:d4:c4:2e:90:91:02:9e:77:cd:95:77:f4:
eb:cd:94:05:d6:7e:79:fb:23:d1:5f:67:30:62:ff:
69:ce:4b:d2:7d:61:6f:b0:e6:ac:59:b9:a1:e6:73:
fc:34:0b:45:57:62:8e:e3:15:86:5a:4d:ec:cd:70:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EF:A2:35:AB:D9:31:D9:D2:99:93:0C:11:E9:94:4F:BB:14:91:55
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:07:19:b9:f7:96:f4:f5:38:b0:73:82:c3:78:72:19:89:b6:
f8:88:d5:39:f1:e9:ed:ec:0d:b0:80:7a:43:3e:b3:fb:79:75:
06:e9:b0:73:cf:af:f6:11:d1:55:1d:7f:f4:d0:47:f9:68:b9:
a9:59:b8:f1:21:99:4c:c7:c7:eb:ce:41:6d:13:99:ec:94:bf:
92:2e:b7:7b:07:ab:c5:6e:e3:7d:a1:49:d3:54:0a:f3:f3:24:
63:4b:a5:e3:a2:11:44:cd:59:24:b4:c5:9b:7a:58:39:40:c0:
87:a8:91:7b:e3:ac:cd:7c:93:a0:01:12:cb:72:6f:99:9b:b1:
09:61:38:af:f9:4f:ac:29:39:cf:42:61:67:c0:28:95:cc:ce:
ae:5e:08:50:e5:ff:b7:c1:7f:6a:ad:60:14:41:c1:83:ec:3a:
a2:0e:26:a1:b5:9f:54:e1:d0:ce:5b:be:1d:44:96:6e:84:dd:
8f:68:78:a9:6b:3f:fe:c1:06:a5:df:8e:b0:52:cd:92:eb:b7:
cb:d9:36:c9:f9:dd:39:8b:6c:4a:51:fb:fd:a8:9c:9e:b3:86:
b7:9a:09:5e:fd:77:d4:bd:36:91:3a:b3:0c:83:d1:87:43:41:
11:75:b8:7f:6e:f8:f4:a1:76:94:03:79:2f:53:8c:fd:44:e9:
6c:7a:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:48 2025 by rpki-client