Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: C5KAs02fiRUH2NWT6l4+QH1aixFGqvS7un1DvttIe14=
Subject key identifier: 83:91:D3:D3:71:52:E3:BE:98:12:9A:2B:6B:C3:85:2B:F8:A6:B2:6A
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 0198D5BBC493C9DA5A77F3EAE9B6AFF37489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: O0a8fkb4LhaWb2UTltk3exBCjRWnevp2IgemymtcxzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c4:93:c9:da:5a:77:f3:ea:e9:b6:af:f3:74:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=8391d3d37152e3be98129a2b6bc3852bf8a6b26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:5c:94:2a:78:81:4d:13:10:d5:63:11:9e:
fa:3a:5d:f6:3a:0f:22:53:3e:11:27:ed:bb:0b:e1:
a0:00:ee:d7:fd:8c:cc:ee:84:cc:bb:90:bd:e5:b9:
39:cc:6a:a7:24:ed:90:ae:6f:9d:03:7b:35:0c:8e:
6d:9e:52:ee:54:47:53:53:14:c0:5e:0c:c1:f9:a7:
7f:14:2e:1c:ca:6d:fe:2e:73:40:83:66:0c:1a:0c:
dd:a1:42:90:5b:04:99:ca:81:c6:ed:6d:8d:de:35:
be:56:ec:13:b6:07:66:45:b5:8d:84:78:e3:a8:ce:
0d:3b:00:86:1d:bc:62:c2:44:c2:1e:9b:e9:46:70:
e9:5c:be:0c:f2:c0:7e:ae:34:b8:91:41:d8:59:60:
d5:de:bd:d3:2b:e6:e5:cc:60:6b:d8:c6:e7:4c:5a:
80:1c:26:23:49:76:7f:70:51:95:6b:23:76:f0:18:
fc:19:a4:d6:71:7e:78:38:20:10:54:2a:a9:18:ff:
ab:ca:59:d0:b7:3d:bb:ce:fe:80:0f:9a:a1:f5:43:
2e:b9:06:59:54:0b:1c:19:f8:6a:d8:4f:86:82:b3:
2a:26:aa:b9:9c:7e:06:6b:ef:d8:1c:11:81:b7:fd:
81:57:ac:8c:1b:2e:91:74:8a:58:c1:32:df:27:c3:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:91:D3:D3:71:52:E3:BE:98:12:9A:2B:6B:C3:85:2B:F8:A6:B2:6A
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d2:c6:d3:b2:8c:35:30:b6:1b:57:96:5b:f3:8f:45:92:2b:
2b:02:c4:bf:52:2e:6c:72:e7:db:be:e1:b7:78:b8:39:38:26:
6d:bf:29:41:45:3b:d4:22:aa:1d:49:0d:c1:5f:81:d1:0c:fb:
42:d7:88:a3:30:c9:1b:a6:92:89:f9:09:94:cf:79:de:62:40:
cb:b4:1a:ce:02:af:78:4b:e6:22:fe:55:bc:f0:84:f1:d9:d7:
fa:e1:1c:87:11:cf:29:6c:d7:05:4e:da:f2:ec:2e:c1:ca:d4:
15:c6:4a:e8:5c:ee:39:d0:ec:13:78:67:5d:91:d8:41:01:6a:
ee:40:c2:3d:33:5f:4a:d8:0f:eb:bb:2a:15:70:92:68:4f:e6:
e3:1d:06:c3:45:18:c6:e7:9c:b7:12:d2:a0:f8:dd:e8:73:20:
2e:27:24:5f:c9:53:c2:31:bf:30:19:17:5b:6d:12:98:47:3c:
c8:e0:e1:84:fb:a7:77:a8:93:3f:09:4d:6d:4b:e5:8b:f8:96:
e3:da:20:96:7e:46:b0:a7:ab:90:2c:4a:a4:92:1c:47:0f:fe:
4d:f1:f9:c4:23:eb:26:b2:ca:46:b3:ce:bf:b3:d3:1c:ee:ae:
b6:0d:51:30:46:7b:c3:83:43:ce:a2:b2:8e:ae:5d:f7:1b:84:
a6:a4:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:19 2025 by rpki-client