Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: XQvWcagtxhrIKo+zTeobTI/4kvLfFFUzJfgz246mTqI=
Subject key identifier: 34:4E:4A:DE:17:17:C2:41:A7:8C:3C:BF:AE:7F:2B:98:58:25:BD:86
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 0198D47252F02F6B9D8C5318600D5E27B901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 032A
Signing time: Sat 23 Aug 2025 01:01:58 +0000
Manifest this update: Sat 23 Aug 2025 01:01:58 +0000
Manifest next update: Sun 24 Aug 2025 01:01:58 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: I5Rr5FvgpYLao6uLkqeu0H31sZc8hm6Q/XA8VWBXM2M=)
2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=)
3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=)
4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:52:f0:2f:6b:9d:8c:53:18:60:0d:5e:27:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Aug 23 01:01:58 2025 GMT
Not After : Aug 24 01:01:58 2025 GMT
Subject: CN=344e4ade1717c241a78c3cbfae7f2b985825bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:52:52:8b:fc:7f:25:95:64:20:5a:13:07:
3d:83:0a:e5:48:b4:db:4c:73:a7:fe:24:42:2a:a8:
b0:62:ef:74:94:ec:f7:8a:b9:f1:de:00:15:54:02:
bc:58:5f:82:9e:72:6f:f5:e8:af:2d:53:b5:24:8d:
1f:4f:86:f2:c6:d2:4e:7b:35:9d:3d:70:b6:ad:88:
c7:fa:a5:87:3a:ec:68:98:12:fb:4c:cd:d1:0e:25:
c8:66:ed:5a:5d:5e:3b:1a:93:65:68:07:29:1b:5a:
c9:5f:f8:c8:8e:6b:57:4b:4d:0a:fd:49:7b:78:12:
7e:a1:a7:42:66:e0:4a:13:45:ac:ff:ff:cb:88:4a:
8d:b8:b0:0c:6c:65:7c:aa:c4:57:26:cb:00:a7:ec:
b9:8e:3a:7f:01:cd:c8:fa:87:96:ba:3c:92:ec:78:
ec:75:79:11:ea:9d:a8:b5:30:42:2e:9e:54:67:9b:
6f:d7:fc:00:71:ae:06:09:ca:02:fc:98:1f:9d:79:
73:6a:45:c8:f5:85:06:89:4a:eb:c4:3e:aa:e9:df:
85:c5:22:5d:9f:00:93:02:33:12:34:aa:5b:d8:ff:
db:08:0d:82:85:dc:95:29:4b:a8:d8:5e:e4:85:8b:
64:3e:e7:2b:1f:49:1c:07:5d:43:2b:a2:40:73:e8:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4E:4A:DE:17:17:C2:41:A7:8C:3C:BF:AE:7F:2B:98:58:25:BD:86
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b4:6e:fc:37:87:f0:30:22:d5:b2:24:15:d6:b7:ba:94:75:
07:03:75:29:43:97:7c:7e:90:7f:ae:81:d0:2a:94:9e:21:61:
f7:8b:e3:8c:23:01:ed:a7:ac:0e:b4:ea:d3:53:57:50:d2:26:
f5:4c:5d:12:bb:f6:7d:20:82:cf:8b:93:81:61:20:b6:81:ee:
b8:44:12:be:58:ad:80:13:90:ae:e7:e9:19:83:22:e1:3d:bb:
57:66:2d:5f:2d:4c:a7:4a:be:ca:22:9c:b3:10:65:13:f0:37:
e5:4d:e2:3d:3f:fe:bc:a5:e4:6f:e5:87:4a:d2:fe:2e:89:27:
b1:9b:d6:41:b7:8e:a6:3f:9d:0a:7e:bd:79:ce:15:fc:fe:ae:
88:a2:ea:51:a0:ab:e3:90:f4:d0:1e:13:20:c6:5d:61:63:a4:
7e:7b:da:49:3d:21:94:47:98:3d:b6:c0:96:3e:8e:3a:c5:c7:
d0:91:78:ba:f1:a8:fa:24:fa:6d:d0:4f:20:40:bb:46:3f:5a:
6f:31:d7:06:ee:bf:bf:6f:0d:df:39:4b:01:9b:61:3a:d5:e1:
4b:21:4f:ec:a0:91:61:28:8b:9e:33:b6:e6:03:96:85:ab:06:
bf:d5:43:07:53:24:83:73:ad:0f:9d:b3:d2:c0:a1:62:73:d2:
50:8d:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:15 2025 by rpki-client