Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: 1uKTdLJWubx+QchB4g18N87ms39vGdAYUx9ysYQPpZE=
Subject key identifier: AA:78:6C:5B:8E:59:ED:28:06:81:C8:45:45:6D:EA:A4:88:8D:F4:94
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 0198D58393B1027ADEBBE525364D088260E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: 5vdf75cdcCMWqFquhPXYiKxFYo3rp0JrlQRbXEqy/5w=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:93:b1:02:7a:de:bb:e5:25:36:4d:08:82:60:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=aa786c5b8e59ed280681c845456deaa4888df494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:56:d0:14:68:d7:90:e5:8f:10:d7:86:0f:
08:5a:19:14:cc:11:bd:dd:4c:d3:d5:97:55:4d:fc:
fc:5f:87:76:2c:c7:2c:2a:8f:7c:68:8a:2c:8b:28:
30:d5:79:bd:bb:73:ce:ac:fd:9b:d9:17:28:02:60:
10:e6:2c:d9:80:55:21:57:26:97:c8:46:f2:03:2d:
4e:c3:18:d3:46:36:fa:10:49:bd:0e:54:6f:fa:7d:
2b:b2:b7:b8:66:fb:9a:37:d9:c4:86:11:1a:ff:94:
70:cc:20:65:2d:e4:85:b9:21:50:9a:67:09:c7:f7:
87:b2:d8:61:b1:69:41:1f:24:60:9e:7e:a0:1c:be:
a2:16:5c:4b:8b:40:14:a0:d6:a8:e8:96:a5:f4:43:
4a:1f:5d:b8:5f:8a:c7:40:7c:c7:ca:e5:20:2d:ae:
b4:b1:1c:95:9a:9f:8e:fb:75:90:82:06:be:83:ec:
c3:25:33:e1:d2:10:8f:be:10:31:ed:0e:97:36:e9:
b2:67:df:1e:01:ff:f1:7f:6a:9d:34:37:03:6a:4e:
a3:1e:71:69:53:00:d9:f6:c8:e2:ee:61:1b:c0:3e:
c5:4f:f8:72:97:5f:60:d8:ba:66:06:97:d1:0a:8c:
48:5b:f2:5f:b3:fa:e8:13:76:1f:83:d7:2d:1a:63:
50:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:6C:5B:8E:59:ED:28:06:81:C8:45:45:6D:EA:A4:88:8D:F4:94
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ae:1f:af:e3:af:96:ca:13:9d:9e:a1:47:cc:29:f7:14:f3:
9c:00:ac:b4:cf:d1:41:fd:93:da:15:83:9a:09:36:f5:6a:00:
52:c7:58:ee:83:16:b3:01:ff:44:94:1c:65:df:52:e9:31:cb:
50:83:88:38:84:14:e5:79:48:cb:30:2b:a2:ab:d1:af:80:01:
20:ff:3d:32:96:75:96:29:70:15:a3:72:c0:2b:75:17:99:97:
a2:55:8a:ad:08:f8:da:da:60:31:41:3e:71:a7:af:f9:ae:1f:
6c:25:57:a7:75:82:7c:67:a2:76:7b:ed:a5:6c:cc:85:59:1a:
0a:67:a3:fa:c1:0b:4e:2f:7f:fd:a8:7a:83:64:5e:84:a9:e2:
2b:58:cb:54:21:9e:a7:60:2a:75:a2:3b:0d:81:43:46:56:36:
f7:0f:d7:c9:3c:2d:38:c5:16:a9:df:88:ba:7d:06:f3:c5:4b:
6f:33:d8:92:13:71:2f:c6:7d:76:7d:9d:3f:7a:ea:a5:a3:9d:
3a:11:e2:ff:6a:45:df:a4:c1:fa:cd:10:e0:31:80:90:98:26:
e3:e1:5a:d5:84:4e:f8:01:a8:ac:aa:e9:4c:42:20:3e:46:89:
c0:48:8e:a1:97:89:04:39:7a:58:d7:b1:e9:3a:3b:64:e4:3f:
57:db:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:49:53 2025 by rpki-client