Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
File: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft (raw, json)
Hash identifier: Lmrhizh843HvbPJ4mSP9ScKKQ5tDQsSoO/8Vq/z+v4M=
Subject key identifier: 7D:A1:34:7E:20:7A:A1:E2:5C:20:0F:D1:64:24:6B:06:1C:C6:3D:0F
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 0198D583A79A1FEE099228C4F0DCBF1985AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
Manifest number: 14BD
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl (hash: aSotNA06aY9KB2NVwYNaBrchfi4UbeN6rf23rOkjwFo=)
2: IhBK0ciO53Ec1EbuRK46uaRKreQ.roa (hash: 4ZKr5RNFkrNbbNrdBlZagiUZ6klyQ2uoBXn/MMtAeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a7:9a:1f:ee:09:92:28:c4:f0:dc:bf:19:85:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=7da1347e207aa1e25c200fd164246b061cc63d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:16:e8:65:f3:2d:d5:66:a7:e5:91:8b:a2:
91:ec:5c:2d:a4:bc:ec:62:7e:56:9f:cf:78:02:7a:
c9:98:b1:2d:7a:22:a0:2a:e3:7b:3a:d7:06:b2:99:
8d:9f:82:09:9a:b7:18:31:7d:58:0e:1c:83:c8:9d:
12:84:fe:5b:6b:00:8d:97:8c:54:f8:f4:b6:c9:f5:
18:e8:35:fa:c1:3e:c7:c8:c1:bb:30:94:7d:4c:59:
0a:0c:2c:ae:9d:b7:44:4b:08:65:b4:ed:c8:bb:e3:
91:1c:fd:72:87:08:8b:68:f3:97:10:e2:0d:55:4c:
d1:dc:8c:22:2a:48:f7:21:bb:6d:3c:73:9b:a8:d5:
c1:e7:df:9d:e3:20:41:d7:1d:20:cb:57:c2:75:2d:
46:b4:3d:6f:a2:43:50:6f:3d:52:8f:2e:63:d3:91:
8e:cf:68:fe:2a:a9:e6:f6:e1:d0:08:de:67:92:d3:
1e:fd:db:4d:6e:45:21:2e:cb:79:86:e7:fb:78:8f:
09:1f:a7:cd:a8:2b:37:f6:05:f5:8e:09:fd:eb:c8:
7d:a4:50:9c:49:85:15:3f:3e:f2:15:c1:fe:94:7a:
8e:59:22:0d:6f:81:86:11:99:e0:31:0e:bd:50:2d:
58:da:fc:93:17:d7:9f:a2:c5:54:76:7f:c0:7d:df:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:34:7E:20:7A:A1:E2:5C:20:0F:D1:64:24:6B:06:1C:C6:3D:0F
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:74:4a:98:4f:96:38:d5:34:c1:fd:da:92:d6:92:64:b2:96:
c3:d9:b9:80:83:68:8b:8c:d1:b1:ed:8f:30:24:75:f6:1b:23:
6b:63:23:2b:9e:83:c8:ea:42:35:0c:49:bb:fc:36:66:7b:1f:
98:2f:69:ae:ca:ec:63:e3:d1:b9:17:96:e5:85:ba:47:14:02:
86:81:31:d8:53:e1:c1:e9:01:9d:d3:b3:a7:82:37:db:31:2a:
1e:fa:64:8d:8e:87:85:61:b7:b1:c7:2f:59:82:16:8f:7b:94:
61:4a:00:e5:3d:6f:39:79:56:c7:0a:d0:37:8e:62:6f:64:5d:
d6:85:1c:34:e2:72:7f:f9:26:56:68:fb:1f:7a:9d:be:2e:51:
f8:38:54:b2:0f:63:d7:fb:b1:c4:de:27:47:d4:e5:c0:9d:11:
68:6c:fa:ce:38:df:34:67:e1:cb:1a:66:11:86:d2:a9:75:c9:
99:9b:90:d6:8c:7e:90:90:b2:57:77:97:4b:b0:5a:8f:9c:7b:
58:e7:3a:0f:79:b7:6e:cd:08:fa:6e:05:06:0d:40:39:d5:fd:
c1:a0:e4:44:e7:25:1b:4c:20:b7:e6:38:61:ac:49:a1:99:dc:
32:18:48:11:fd:08:57:12:c2:1c:82:61:40:48:9d:1e:4f:dc:
5f:c3:3a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:31 2025 by rpki-client