Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: 3hu4UxG+McYWSGdiMsb2yhZWKhtYWo+D1Gv0jFaw0j4=
Subject key identifier: 55:51:9E:60:94:3E:0C:86:87:33:6B:35:A3:F5:06:2E:97:A8:B7:6C
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 0198D404A4C952AB709E262A09244CFE35C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 03C7
Signing time: Fri 22 Aug 2025 23:02:10 +0000
Manifest this update: Fri 22 Aug 2025 23:02:10 +0000
Manifest next update: Sat 23 Aug 2025 23:02:10 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: 7JiYS4DFDkPeanxOtbQdxqsIEkXd92aGFrKOujBXI4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:a4:c9:52:ab:70:9e:26:2a:09:24:4c:fe:35:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Aug 22 23:02:10 2025 GMT
Not After : Aug 23 23:02:10 2025 GMT
Subject: CN=55519e60943e0c8687336b35a3f5062e97a8b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:8c:7c:6e:a2:8d:0d:7e:d2:42:7f:7b:92:
fc:cd:30:d7:03:ee:59:39:c5:36:6c:de:24:49:d6:
31:c6:79:db:51:5f:60:db:b7:ea:41:30:2a:ea:d3:
97:b7:c5:e9:54:20:2e:70:d5:70:3b:49:73:21:18:
35:8a:a7:61:73:eb:a7:02:aa:c9:a9:3b:8c:ed:4c:
48:49:d0:ec:80:bd:ef:3f:3a:e7:29:f6:36:4b:52:
52:87:5c:8a:78:27:94:09:16:4f:3e:43:1c:48:b4:
7f:14:07:81:c9:20:5b:ee:d2:19:cf:78:2a:43:b4:
fb:e9:8c:d6:75:6b:79:59:ed:7c:03:29:28:99:83:
ab:0e:27:2b:31:b0:34:fb:fe:9e:6b:29:68:70:10:
82:ee:ba:a2:23:00:19:80:e1:b4:4e:7f:94:e8:95:
2b:0c:4a:3d:26:dc:10:d1:89:b9:8e:95:e2:d3:d8:
e5:c0:e1:da:00:a5:a8:4e:50:56:e9:24:44:3d:c7:
61:27:93:bf:9c:26:37:7c:ac:3a:6d:3f:55:c2:0d:
ef:07:63:2f:fe:a4:4a:f0:41:69:de:5c:3f:0b:55:
cf:a0:be:05:ea:e1:92:2e:4b:a6:d0:ca:7b:a1:84:
43:4d:6b:30:0b:61:ef:9b:e4:42:22:64:db:05:e3:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:51:9E:60:94:3E:0C:86:87:33:6B:35:A3:F5:06:2E:97:A8:B7:6C
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:bf:62:c4:cc:8e:97:73:3a:f2:e7:c5:bd:48:98:2e:ee:
8a:25:ee:48:11:b6:64:66:20:6c:0d:b9:d1:6c:a2:52:fd:90:
f5:fb:b4:00:6b:93:ba:03:33:49:2d:75:3f:63:1c:40:33:8f:
1f:ea:dd:a6:46:ee:f5:68:77:36:fb:7a:5c:62:d8:48:ec:51:
72:a6:55:7c:47:6a:5f:dc:ca:c2:b0:20:8b:3d:e3:15:6c:d7:
ee:8e:84:c5:b2:f2:05:01:6a:af:81:1e:33:e2:34:a9:e4:d9:
1e:a0:54:0a:7d:60:88:6a:7b:25:15:0d:a3:69:fe:64:93:72:
7b:a3:79:b3:63:08:67:ef:bf:ac:be:d4:fd:3a:86:53:2b:4e:
ef:b7:b1:8f:52:3e:0c:9f:04:23:7e:eb:54:3e:93:f7:83:00:
f5:f9:88:dd:61:34:d1:92:cf:39:9d:6f:5e:5c:ba:9a:b6:28:
5e:ec:7d:be:a0:f8:7f:fe:62:77:22:19:ff:c4:db:a1:26:49:
43:11:2d:96:6a:2b:ff:58:58:13:dd:77:cb:95:71:fe:95:17:
71:dd:74:10:26:8c:5c:ab:3f:0b:c8:65:8a:a2:90:33:84:50:
29:73:7e:d9:b4:e9:39:0b:5f:8e:78:08:0d:95:cb:60:cb:91:
de:46:ba:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:17 2025 by rpki-client