Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier: YsFc5K+FI8IVcWIFR4ecC6DoP6y6M1fxt1ZKbT2+d5M=
Subject key identifier: 07:87:F8:CC:4C:3A:C5:1D:AA:9B:B9:D3:41:2D:B7:74:69:8A:C9:1A
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 0198D4729F8F4EB9EFC51A428E0C8003DCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=)
2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: 668laLklTopprC3LEZDtYKLXJZG7BtBmxDFlIoHsyPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9f:8f:4e:b9:ef:c5:1a:42:8e:0c:80:03:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=0787f8cc4c3ac51daa9bb9d3412db774698ac91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:0c:93:dc:31:36:eb:8c:20:f9:b5:92:ca:
77:2e:86:83:80:e2:92:25:dd:ef:b5:82:b4:a4:2c:
2d:fb:b9:3e:b9:23:e2:7c:3a:ad:22:05:8b:09:60:
92:d1:0c:10:73:7f:27:97:e5:db:28:87:61:21:67:
c5:fd:0a:b7:fc:23:5a:bb:f4:15:28:7d:8c:16:ed:
d4:99:23:4e:b7:a2:fb:34:ac:5d:30:48:d5:34:ba:
32:a2:c8:66:ea:0d:a7:a8:95:77:a2:2e:87:9f:3d:
75:b3:15:00:2c:07:9b:cd:c0:39:a8:a9:ff:23:d0:
45:7c:8d:f1:05:3a:c3:20:e7:22:12:b5:21:ab:4c:
bd:62:1a:91:9a:33:b5:ad:67:b2:f3:56:ab:a5:3a:
3c:25:48:8b:1b:9c:27:81:3a:50:b7:b6:92:d8:c7:
46:72:4d:57:b4:3b:cb:44:20:34:e4:62:81:24:23:
15:5e:f1:66:84:4f:8a:e2:81:c3:37:f8:08:69:36:
5b:e0:ea:d2:26:db:85:08:a9:7e:dd:50:5c:89:e0:
93:f3:d3:3d:de:85:a9:c5:73:8e:98:d7:1d:18:30:
22:d9:8c:c9:19:ba:16:d9:40:a2:d8:39:21:74:31:
64:aa:e7:3a:1b:8f:06:aa:65:ad:80:8d:ef:30:5f:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:F8:CC:4C:3A:C5:1D:AA:9B:B9:D3:41:2D:B7:74:69:8A:C9:1A
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1d:e3:a4:85:4a:e9:f2:65:53:65:ff:86:21:37:e7:35:b2:
0e:fd:68:81:38:0a:a6:4e:81:0b:c0:87:8e:19:58:92:f1:b3:
1f:9b:d6:3d:e7:4d:33:a9:d6:a3:06:97:ec:54:98:81:fc:76:
3c:82:16:be:c7:fa:47:bf:76:b3:39:06:6e:de:80:3b:50:81:
8e:21:2e:d9:ef:25:d4:24:b3:4c:e5:18:91:7a:d7:71:2e:e3:
fc:01:fd:3c:8d:77:c2:b5:b1:a2:73:f7:29:e3:8c:ab:1e:8e:
8f:d3:ee:8c:9b:73:29:cf:58:4d:d3:99:04:82:1d:0e:97:e3:
95:b4:92:35:7e:ce:a0:c5:ee:05:1f:7e:2e:ef:43:86:f5:2a:
9d:52:b5:b6:83:5d:44:b2:18:fc:ce:b2:03:f6:63:d8:24:94:
cb:c6:05:a1:0d:82:47:f9:17:8d:ea:f7:3d:b1:4a:9b:3f:81:
91:b5:59:1b:22:c8:c7:2d:13:70:1c:15:e4:51:e4:38:c3:28:
81:82:46:79:6b:19:15:1e:d9:45:39:df:09:48:58:78:33:37:
88:04:03:b2:32:0f:9f:19:98:35:c2:97:22:ff:7b:6b:ec:01:
0d:1d:34:fb:35:0f:df:63:05:10:e0:e2:2b:ac:ba:be:c6:d5:
83:d0:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:22 2025 by rpki-client