Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: mcKdZ2QokUpk7GqG562Kcad60/RVsVRAHShC9+kYjPU=
Subject key identifier: 9D:9C:5C:30:00:67:2B:DF:43:F4:B6:49:6E:9F:32:C4:18:2C:3D:9B
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 0198D54EA48DEB541C73D09E8FA0422B0983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0ADF
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: FuLwwz5YQf6ZMo/pfeyt1YhirA6z1RUH9DjIooGDzWw=)
2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a4:8d:eb:54:1c:73:d0:9e:8f:a0:42:2b:09:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=9d9c5c3000672bdf43f4b6496e9f32c4182c3d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:a4:44:8a:82:e8:48:19:c3:ff:02:a3:26:
4e:8a:6a:fd:fd:ea:54:35:36:4e:f6:7c:77:d9:68:
41:8b:dd:0e:24:1c:41:a0:44:b5:18:a7:2f:b8:38:
14:9c:db:33:ee:6d:e0:02:0e:fc:67:4d:f2:16:3c:
48:cd:ce:8b:8e:d6:a6:2f:81:68:8e:1d:34:4b:38:
20:ed:14:35:93:43:c6:de:3b:3b:24:bc:d0:3f:0a:
87:13:4b:87:03:e1:ef:fa:b4:6b:3f:0e:ba:ad:40:
52:9d:8a:8b:af:3c:84:df:9e:fa:12:f8:63:55:16:
6f:2f:6f:d1:71:b4:0f:37:8b:38:ba:0c:8d:30:f9:
0c:ef:fd:22:64:70:1f:f1:3f:5a:a5:e6:7c:b7:a8:
f0:70:17:9e:f1:63:c7:f0:a0:4e:30:dd:bc:d8:f8:
70:64:b6:5a:3b:59:cc:02:9f:26:28:bf:66:e5:86:
97:59:3a:35:3e:3d:5b:93:81:2a:c3:b9:37:30:90:
40:00:f5:13:a1:45:93:50:af:63:d2:d4:00:98:0f:
a9:28:d5:13:81:29:3d:2f:22:a8:07:d6:ff:bc:82:
08:a9:9f:d1:b3:c0:ff:f6:70:64:af:5c:26:0c:15:
4b:33:27:0f:21:eb:4c:fb:af:a8:a6:cc:43:b8:63:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:5C:30:00:67:2B:DF:43:F4:B6:49:6E:9F:32:C4:18:2C:3D:9B
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6a:ee:c6:7b:7f:b0:53:f2:e5:75:9b:16:fd:ed:a8:05:60:
d6:a5:5e:80:1f:d7:6a:7d:5e:f2:f9:72:2a:49:19:fa:25:44:
a7:38:6a:2f:07:41:bc:c4:2a:ad:d6:3f:3d:b5:40:42:e8:ae:
6d:28:9c:36:30:dc:d5:ea:de:df:45:11:9c:a7:97:27:29:fa:
35:86:c3:86:fd:ae:3e:c2:2c:82:57:5c:6a:d5:16:3c:13:3b:
99:22:ae:ca:6a:ba:ed:3b:b1:6f:86:35:b6:a0:77:8d:cd:b9:
2a:44:52:5d:95:ae:ca:41:c5:6f:cc:e9:8e:eb:a6:19:1e:23:
f2:77:74:c0:26:43:2d:fc:47:5f:f2:d2:25:02:92:9e:f4:3b:
19:a3:c2:34:0b:19:2c:68:0b:38:8b:9a:f8:bf:2e:1e:dc:41:
d7:db:88:8a:73:54:ef:a8:f1:d3:a2:96:a0:5f:a6:bb:33:20:
1a:a8:31:26:94:99:1c:90:aa:f8:e4:90:ed:6b:9c:4a:a2:a3:
22:05:b1:b9:36:24:ed:52:ef:cb:ce:a6:43:56:01:89:ad:2c:
ce:46:ca:46:3f:d6:fe:37:a4:07:cd:5c:ad:93:e1:9e:c1:73:
d6:17:dd:77:73:f2:26:8f:09:4a:bf:e8:bd:44:85:f4:e2:f7:
bf:0c:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:40 2025 by rpki-client