Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: drM9lKS7XvgpaZP2DZEY8ttKnATunYgOhj7sd7iKJHA=
Subject key identifier: B0:07:2F:31:2D:E4:3D:3E:B0:8D:E6:1C:E0:45:77:5C:46:9B:73:CD
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 0198D5BBE2B51F7F03F1161C0D01795A1BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 143E
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: 6RxjFwkzZBsy+w+vWyhOQoN2wEnvNEJ8T+1hbt+d4ew=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e2:b5:1f:7f:03:f1:16:1c:0d:01:79:5a:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=b0072f312de43d3eb08de61ce045775c469b73cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:55:62:b4:00:08:63:0b:86:1f:62:d6:b4:
fd:9d:26:52:a5:f5:87:00:84:f2:c7:6a:6f:6f:f2:
a2:cd:56:f0:ed:d8:43:d9:32:72:52:80:5a:36:f3:
32:82:f5:67:b4:02:35:37:9c:05:e7:88:76:64:65:
1b:e5:5e:4b:50:7d:98:5c:77:b9:1b:c2:3a:54:98:
92:6b:c5:2e:b3:2a:53:ed:34:06:88:e5:71:6d:48:
b3:13:0c:9b:09:1a:27:af:cb:3a:c0:73:b1:fa:05:
f4:7a:30:27:5a:72:7e:50:b1:4a:2f:75:9a:a6:d0:
b3:1a:4b:e2:5f:e8:23:5e:ba:53:2a:a6:f2:26:43:
88:35:a7:30:e7:51:01:7f:bd:55:eb:72:d3:14:85:
38:22:6f:cd:0f:a0:6b:4f:9d:e0:81:c7:90:e2:bc:
28:9f:99:16:e8:c1:16:b0:cf:51:3a:84:a0:04:97:
d1:b6:ad:48:00:41:e6:41:eb:df:e6:ed:09:a5:4f:
d0:3e:05:8e:8e:1b:a5:21:cd:fc:53:e9:26:ce:13:
11:ae:6e:42:49:8b:76:9f:4c:82:44:7d:5b:4c:55:
11:42:b4:bb:d9:2c:c4:be:0f:f2:1b:5c:2e:44:9b:
21:46:89:29:d5:77:f2:7f:ca:58:77:88:fd:0f:01:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:07:2F:31:2D:E4:3D:3E:B0:8D:E6:1C:E0:45:77:5C:46:9B:73:CD
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8f:8d:14:8a:56:68:ad:cd:86:67:5f:b8:b3:c4:3d:2e:04:
5d:69:32:05:95:b8:90:c2:36:35:26:4b:0b:cb:3a:05:91:da:
87:20:5e:e9:71:56:6e:0d:de:2f:b9:15:69:f0:86:89:43:ef:
63:c0:28:a7:bc:ed:eb:7e:56:05:8a:ef:d9:2a:3f:04:18:d4:
85:0a:d3:c5:5d:74:4b:ec:5f:35:a4:d0:e6:37:51:89:e7:85:
2a:0f:25:f4:e0:ed:19:e1:45:9d:6f:d8:02:82:2a:80:66:0e:
fd:76:00:00:5b:b4:38:57:ec:b1:0e:66:77:e4:32:44:ab:d7:
7a:99:15:b4:07:23:d2:ec:8c:69:0b:9d:13:81:e9:7e:55:c6:
2e:8b:1f:ee:e8:35:cd:27:0d:14:81:9b:a1:dd:bc:ab:df:8f:
a7:ea:b8:7e:4b:a0:93:07:10:84:f9:58:3c:50:0c:bb:70:85:
af:ce:5d:f3:c4:d4:2e:8b:64:06:59:9a:f8:cb:69:ff:f5:63:
07:75:ae:72:86:de:f3:60:f5:25:fc:ad:b4:94:fe:a8:c8:79:
66:de:e1:04:1e:6f:ca:ec:f7:66:bc:b4:41:52:bb:50:fa:53:
d8:f7:7b:bd:f8:83:b9:1e:fa:3d:b0:45:2e:3b:b4:c6:0b:36:
b7:df:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:54 2025 by rpki-client