Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: xHRgbz5onfpX0Gla8VmJ1F7T3YAnTUkg9DXJipMrorc=
Subject key identifier: 36:7E:93:B8:F6:EC:7F:68:0F:16:20:41:C2:1F:F9:E8:32:48:F2:E7
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 0198D58342EE30B32302064596A91AA435F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: 83+2atNA2AE6Gcb7NxO/ubbHN4DLgk8Bl4goIZFKFJk=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:42:ee:30:b3:23:02:06:45:96:a9:1a:a4:35:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=367e93b8f6ec7f680f162041c21ff9e83248f2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:5e:8b:b9:6a:6a:c5:73:12:02:30:b0:4f:
ee:02:ca:0f:06:71:b1:07:36:97:93:67:37:9f:14:
74:f5:38:e5:df:4f:a1:2a:0b:c5:1e:d2:25:90:d5:
9c:ca:1c:a9:86:4f:ef:db:ee:b3:5d:82:ca:08:36:
3d:51:c2:7f:6a:07:3d:85:b1:4b:78:da:8c:32:9e:
9a:c3:66:91:1c:43:52:23:0d:7b:9a:0f:f1:1f:f2:
17:0d:b0:86:12:60:04:57:b6:11:fa:1e:4a:bf:e5:
72:f6:59:71:d0:60:db:0a:13:19:5f:40:c4:28:da:
bc:15:1f:f5:37:45:23:d7:5c:5c:06:a1:b0:9a:8e:
12:07:2f:ae:7a:d2:73:ff:6a:81:39:57:3f:e1:0c:
1b:c2:36:85:99:86:c6:da:ba:f6:53:a0:71:be:61:
96:57:0f:7f:cb:19:82:7c:fa:22:90:2e:26:ee:02:
f9:6d:33:ac:be:56:b9:3a:ef:a7:56:08:02:20:11:
0f:40:ca:34:c1:f6:40:02:48:e0:b6:cb:8a:53:b3:
ac:fe:a3:4e:26:14:5f:60:ab:92:2e:8f:86:8a:ea:
35:43:42:73:20:64:fc:38:c6:1c:a6:0a:cc:a4:5e:
f1:11:c1:bf:9e:91:a7:26:0a:25:b7:04:34:2f:25:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7E:93:B8:F6:EC:7F:68:0F:16:20:41:C2:1F:F9:E8:32:48:F2:E7
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:20:6e:2e:ea:06:61:43:3f:13:43:80:d7:c8:70:2f:3b:4f:
69:f2:69:b4:0a:b7:5e:1d:84:b2:23:85:64:73:bb:37:13:15:
81:d0:46:34:7f:05:f9:6a:20:38:1f:d1:6c:73:fb:66:4d:b2:
dc:d4:6f:bc:08:8b:25:be:51:2a:04:02:87:99:62:b1:4e:e1:
da:b6:53:8f:62:e1:7d:9c:7a:b6:30:19:bc:fc:72:27:51:14:
98:ed:dc:e7:b0:27:91:34:61:09:b4:42:f1:a3:68:dd:e5:87:
84:cd:fe:fd:ea:fa:91:d1:38:16:8b:d9:25:39:75:ca:05:89:
89:18:be:3f:66:65:e7:e0:3d:6e:ab:86:3d:44:f8:3d:be:79:
06:2c:4a:3d:92:ec:54:e6:49:5d:f1:a7:bc:c6:95:f0:1f:86:
24:78:db:dd:4c:00:af:51:5c:2f:9e:18:8e:a4:1e:5c:1c:d7:
04:26:63:0d:c0:08:0c:08:58:7e:af:d1:e8:ab:cc:94:cc:bd:
42:40:f1:4f:0b:1e:1b:75:67:08:92:2c:8e:90:4f:cb:00:f0:
5f:1d:df:7d:d5:f7:46:82:84:02:7c:d6:8f:94:4a:d8:ae:0e:
f3:0a:8f:0b:94:ae:ad:24:c6:af:dd:bd:85:91:78:d9:87:27:
f4:23:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:39 2025 by rpki-client