Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: R2T7Hcmcl77G5r4aByGESltf9tUi1IToIfYO0PTiGwM=
Subject key identifier: 6D:8F:16:2E:A0:DD:D6:7A:F1:AB:0C:FA:0B:43:B0:51:D6:7F:68:2F
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 0198D54E3CC9343FAC49308D7739D7CBE447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 08D6
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: VarfNnfi5TyHldHT7j5QXkvM1WNQa/guy5Hh/JVmJX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3c:c9:34:3f:ac:49:30:8d:77:39:d7:cb:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=6d8f162ea0ddd67af1ab0cfa0b43b051d67f682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:e8:5d:5b:84:1a:8e:c6:c7:8e:b3:57:1d:
32:0d:c7:26:a1:40:fc:70:80:f7:26:82:21:18:89:
48:c5:95:b4:2e:bc:39:db:1b:38:f6:89:53:28:46:
ba:42:d1:12:20:76:4f:da:4d:e2:b1:65:94:b2:ed:
9a:dc:20:4c:f9:05:b6:d5:0e:2f:31:a1:53:d0:55:
b8:2a:58:13:32:eb:11:fb:fb:40:71:2d:4f:0c:6b:
fb:7a:01:d9:e2:af:f5:82:c9:5f:06:10:aa:a0:29:
07:44:3d:0c:72:e9:2c:df:8f:17:1b:35:83:90:61:
75:20:51:d5:0a:51:87:90:bd:f5:06:07:35:ff:35:
b7:24:ae:71:40:3f:80:63:a8:17:42:47:2e:99:f6:
c1:33:6e:a3:60:26:8e:59:69:0c:0c:4b:27:9f:24:
eb:a2:c9:9d:49:ac:a9:72:a9:75:04:b2:54:e7:d0:
0a:05:5f:b8:34:96:aa:06:c2:f5:cf:f8:f4:ef:1b:
3b:d1:29:00:9f:7f:9e:dc:18:00:64:b1:e9:f2:09:
b3:fa:c3:b6:71:ff:96:dc:5e:90:c8:d0:5c:fa:2b:
1d:78:42:ef:9c:30:65:4c:53:46:d5:6b:ce:4f:f1:
c5:de:64:85:34:5f:65:4a:30:f3:1f:ca:c3:11:1d:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8F:16:2E:A0:DD:D6:7A:F1:AB:0C:FA:0B:43:B0:51:D6:7F:68:2F
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dc:01:04:aa:81:83:7d:fd:1c:e3:66:16:65:88:10:8b:fc:
25:39:7e:ea:e5:b5:70:47:e0:80:f0:52:4e:3d:4f:e4:bc:e6:
3f:e5:17:41:83:33:2f:83:7e:21:18:bf:2e:63:56:73:f9:a9:
99:ee:a6:4b:2d:ec:57:31:4b:87:25:69:63:bb:87:50:c5:3d:
ef:89:9d:d9:b4:c2:0a:96:39:e3:fe:92:d2:85:2c:60:6c:51:
49:a1:6a:55:42:39:1c:bf:46:e1:5f:27:b5:1e:33:40:23:fd:
60:40:e1:7f:e9:b0:07:fa:d7:6f:fa:32:cc:97:38:d0:63:12:
82:e6:0a:85:ba:e5:55:6c:82:32:b6:ee:94:7b:f0:62:7e:2e:
cb:03:fd:93:25:cb:a1:bf:10:1e:43:5b:9e:be:58:c0:d7:62:
e4:80:55:ef:32:22:61:90:72:9d:f4:e3:20:81:5d:4c:c8:cb:
18:9a:10:f5:ae:7c:98:f4:14:3a:31:7a:7f:9a:69:83:73:83:
eb:6a:21:fa:d0:31:b0:31:a9:62:cf:d5:8c:47:e9:e1:9e:65:
19:75:f6:b4:4c:16:f9:0c:d5:61:a7:e9:03:fc:d3:a7:5f:a4:
a9:c8:99:15:e0:8f:2e:cd:6e:a0:a0:db:4e:8c:7a:d5:78:09:
38:c8:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:40 2025 by rpki-client