Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: hYgMcB+OjaaSZghr7nj83Ovunbp2UVxXYwtwLxtodU4=
Subject key identifier: EC:E6:5A:30:B9:3C:F1:72:5F:39:3A:AF:83:1E:35:A1:38:7B:0D:BA
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 0198D4E05ECEB155AB3F489DA46D79BDC5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0D42
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: 11v4ujiE85pODnajO4MIvDa-EEI.roa (hash: 899jJDpYjGC19E0C+sSPG4BflRjWNeXH81Y2tQUCHZ0=)
2: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: nxIDPsKPykUNjPfURjCTWyP1u3c85him18NrarFkPMg=)
3: H5a6_PbqYpspvXprSKayoanO0T4.roa (hash: rh38nYvA7FwPR7BzdHUH02hvI8rv4wT+OqQOUSlde48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5e:ce:b1:55:ab:3f:48:9d:a4:6d:79:bd:c5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=ece65a30b93cf1725f393aaf831e35a1387b0dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:fe:50:22:d0:98:b9:64:fc:54:73:d4:55:
fb:fe:e4:a1:82:c2:e3:cf:3c:f6:87:c4:75:a7:c5:
99:5c:e0:82:7a:d2:a6:4c:d0:b7:a1:65:d3:a5:08:
a9:35:aa:c7:2d:bf:b9:62:d5:b5:25:ea:be:09:f4:
ba:96:77:61:c4:d8:02:f9:91:4f:dc:9b:4c:17:b6:
d8:43:ce:59:c9:38:e6:73:c1:6a:ae:1b:30:e2:5c:
ad:f1:54:ec:2d:99:fa:05:a1:2e:05:78:53:9c:d2:
30:10:fc:d1:8f:81:5c:e8:04:71:95:22:d7:19:a9:
20:96:6b:9f:9b:67:e6:87:80:d9:6b:25:59:2d:21:
7e:05:24:aa:7f:48:83:dc:e2:8b:f1:bc:0f:c7:da:
a6:e7:cd:ea:4c:d7:c0:4e:96:cf:9f:d5:00:6d:44:
f6:81:b8:04:2d:db:71:51:14:c5:19:56:b8:a5:5f:
b9:29:ae:1b:ad:44:9f:4e:47:bf:3f:86:8f:79:08:
e5:f4:32:85:06:45:3b:d4:e1:6f:21:a7:be:34:d5:
ce:7f:89:d8:3a:93:21:3f:3c:56:c5:a6:af:a0:12:
01:9a:fd:87:e5:5d:10:55:f2:3d:4e:3c:5b:ef:d0:
16:0f:63:d5:99:c5:c5:e3:89:05:60:75:b5:7a:47:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E6:5A:30:B9:3C:F1:72:5F:39:3A:AF:83:1E:35:A1:38:7B:0D:BA
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c3:7f:c6:fc:52:3c:07:fa:c5:13:65:65:6e:45:62:7c:06:
d1:b2:df:df:e4:25:ff:94:65:92:cb:ac:74:92:88:f3:8c:aa:
e8:e4:30:a6:4f:d8:e8:c2:ec:a9:44:e6:b4:b5:15:d0:86:6a:
56:66:af:d8:65:dc:0c:28:d7:b5:92:51:76:fa:11:ab:7f:0a:
76:30:4d:be:26:fa:a5:b5:f6:8b:a4:0b:9f:ed:4a:d9:08:b3:
12:c9:31:a7:4b:71:1e:03:52:a5:d8:b9:da:8f:9b:de:69:8d:
14:c9:ff:82:e9:5e:4c:a2:e2:18:6e:c7:84:69:d8:dc:ad:b8:
1b:a4:bc:74:49:12:63:77:44:d6:c4:73:3e:55:0d:4f:55:0c:
07:d3:7f:db:bf:4c:b7:9f:e0:0b:ff:b7:c4:7b:b8:90:67:c4:
2a:84:73:40:0c:1f:1c:e3:bc:5f:b1:04:0e:7f:f4:6e:8d:1d:
9f:d1:42:70:4b:4e:a7:c6:93:62:5a:fd:9c:1c:84:95:f0:ce:
d9:b3:26:bf:25:db:10:fb:d9:1f:df:9c:44:ad:92:75:85:03:
78:f2:ba:9a:e6:db:14:c8:f4:19:e9:1f:c0:e1:a1:48:4f:24:
f6:21:68:61:a1:80:70:37:a6:52:c4:73:a3:75:18:f1:76:61:
b8:cb:0b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:54 2025 by rpki-client