Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json)
Hash identifier: R2VwTKoNZEauqxvcV5IdU1qXp9S615WYFPcc9nY9JTs=
Subject key identifier: 8C:AF:E7:B5:CE:9F:04:5F:CF:B1:29:98:A1:CB:54:34:4A:D6:67:0A
Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Certificate serial: 0198D4E0EA59186B205C5E4A885D944DF0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
Manifest number: 1224
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: 8L2O5GlhNp_lrqBMRrzhkCl_FU4.roa (hash: MpUCXGi4iU4O/s2W0Ri/evmaR2tEREi873mtgHCWuJE=)
2: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: q/KRvQNDLwGzxcUEhxZ38KoDNhXenYs1mdqFo5qwVIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ea:59:18:6b:20:5c:5e:4a:88:5d:94:4d:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=8cafe7b5ce9f045fcfb12998a1cb54344ad6670a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:6d:e0:86:f1:5b:5a:21:5c:c3:4c:e3:96:
aa:69:e9:c4:c2:28:47:54:07:03:bf:5d:0c:37:d1:
60:fe:c1:ee:34:d3:61:cc:55:59:ad:6a:73:86:3d:
b7:b6:70:68:52:ac:6f:77:dc:c9:72:30:fc:86:22:
4b:a3:f1:ec:50:b0:db:f8:83:74:b5:36:ff:61:54:
2c:f0:58:f8:20:9b:b2:a1:50:75:74:01:15:6e:62:
f1:77:74:17:86:c6:2f:fa:fa:45:89:08:09:78:f8:
a3:10:bf:bd:60:f7:37:1b:31:b7:af:1f:75:b2:92:
18:8a:c6:33:ca:97:c9:06:be:fa:bc:ab:e1:3e:70:
fd:b8:a6:7e:98:54:60:32:f5:fd:d6:f6:e2:96:83:
73:bd:91:73:80:bc:95:a1:53:12:4f:0e:95:90:26:
a9:58:09:88:1c:b9:d0:48:7e:d8:4a:67:9a:ab:8e:
9a:f1:a4:78:f0:95:32:73:a9:a3:00:59:93:c0:f5:
76:c2:6c:da:ea:f1:17:7d:86:e4:09:94:4c:11:f6:
45:23:55:6e:34:39:5a:f6:7b:aa:b4:f3:55:dd:6c:
61:4d:57:d8:35:36:5c:07:0b:46:36:f5:16:81:c1:
b1:12:e9:32:c9:69:20:dc:c8:41:0a:36:d1:c7:48:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:E7:B5:CE:9F:04:5F:CF:B1:29:98:A1:CB:54:34:4A:D6:67:0A
X509v3 Authority Key Identifier:
keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1b:7d:27:45:d1:23:df:69:bd:04:ad:ab:95:96:2b:79:fc:
a2:76:99:9d:6e:5a:c7:2e:10:f2:59:ae:2c:29:fb:aa:74:7d:
2c:10:56:ca:4f:07:ff:e5:42:e7:3d:c7:6b:81:60:48:2e:ac:
62:16:b8:f5:a6:f7:06:a0:33:54:e2:1c:97:eb:60:56:73:97:
1f:ec:32:4b:49:7a:1d:f9:01:cf:7e:4c:16:07:a1:b6:5b:fa:
1b:79:7e:65:f7:91:45:5a:5f:a4:dd:94:a1:d7:fe:08:7d:97:
c3:57:47:9a:f6:3c:c4:fd:3e:01:af:0a:d5:9a:0a:82:9b:23:
48:8b:4e:80:d5:f2:e6:8e:8d:35:99:5c:21:65:ef:35:be:91:
a0:53:6f:28:4a:ef:01:1b:69:72:32:d6:7a:a3:f2:48:40:a3:
84:d6:39:5b:70:e2:50:81:53:ff:3c:b0:ae:3a:ba:73:29:56:
47:16:b7:2c:a8:45:90:27:34:b2:c7:ce:47:60:db:f1:8e:83:
c3:16:dd:8b:d6:3f:3d:bb:18:3b:d3:53:85:7d:4b:47:6e:c0:
6f:37:33:87:90:e6:b0:b8:70:5f:51:d5:cf:ac:de:c0:77:b8:
e1:f8:52:7d:03:b3:f9:ce:27:67:df:e2:a0:78:0f:7f:8c:90:
51:03:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:17 2025 by rpki-client