Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: Xis7/SCWn6xezZc2TWNmJDKo+avuJwYbwT5wTbOhinw=
Subject key identifier: 47:F8:15:8D:52:C7:7D:80:75:B5:7A:34:BE:AE:D6:6D:04:7C:CC:4D
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 0198D54E7D0FC6BA769BB0EF7A88B4A505BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0A88
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: wxNYU2Ntrz6WI6UUwqEJ5bwiOmUkMNGM3YSWp+dIzbQ=)
2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7d:0f:c6:ba:76:9b:b0:ef:7a:88:b4:a5:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=47f8158d52c77d8075b57a34beaed66d047ccc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:4a:fa:bb:c4:0a:94:11:75:12:84:37:5f:
f8:9e:83:45:5d:54:c9:c8:92:2e:1d:66:1a:1e:04:
e2:5b:71:06:5d:19:e0:26:90:db:38:69:94:a6:f6:
ad:d6:9c:d9:4f:ca:2d:f0:9e:e9:50:a8:c4:d7:d7:
82:89:58:01:21:2d:cf:af:6c:48:01:12:9d:da:b6:
45:5e:88:f3:12:cc:de:69:64:08:42:a8:71:29:a7:
a4:4a:b5:e4:cc:0f:99:64:c2:44:e9:96:0e:11:c0:
15:69:11:8f:2c:ae:be:2a:ac:e0:b5:e2:16:48:ad:
c6:6c:f1:07:74:63:b6:97:f6:b9:0b:01:77:89:c9:
60:f5:2b:b7:2f:d8:49:b7:3f:e0:cc:07:21:27:07:
c8:85:82:b2:3e:43:66:19:c9:22:90:96:ab:9c:8b:
16:98:8a:76:7e:5c:a7:b1:5e:39:75:c9:28:05:13:
a3:12:c0:9d:6a:b8:33:da:56:0e:11:41:26:82:fe:
5a:07:6b:15:22:8a:1d:9e:e5:59:a6:11:86:58:c6:
c4:8c:53:5a:83:6c:5b:53:06:23:64:81:26:41:6f:
01:74:bf:58:fb:b4:a9:84:56:af:6d:91:74:68:73:
d2:1d:80:87:c0:00:30:43:5e:f6:6d:2d:31:64:33:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F8:15:8D:52:C7:7D:80:75:B5:7A:34:BE:AE:D6:6D:04:7C:CC:4D
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:03:a1:52:6a:2a:93:9d:4f:b0:c8:5c:27:41:9a:66:47:d4:
54:71:63:c6:8a:e0:92:ce:07:3f:7e:e0:10:b5:5a:b3:71:67:
7a:52:18:a3:29:22:b5:8f:cf:a8:9f:36:4e:af:db:75:ab:55:
d7:c2:9d:de:9c:9b:4b:72:48:24:18:79:55:da:16:2a:42:05:
48:3d:37:fd:b3:62:45:10:51:55:6f:40:31:fe:a1:a7:d0:44:
65:81:5d:4c:2f:12:01:c1:ef:52:cb:58:82:19:6c:11:bd:0e:
4d:ae:84:2d:2f:24:be:82:5f:86:e5:68:4d:00:53:81:3c:b9:
15:33:85:bd:aa:dd:e5:ef:37:4d:85:c6:fb:26:35:b8:a3:43:
c0:96:c7:30:1f:45:8b:86:53:b8:bb:08:8b:56:8b:5b:c9:23:
91:67:8c:1c:c9:df:82:3e:c1:a6:a9:dc:41:3a:eb:dc:60:ee:
bc:c6:91:ac:7f:ba:81:97:a0:73:c5:00:7f:36:02:45:3d:8a:
46:8f:ef:16:5d:35:67:3b:60:31:a3:8a:ee:e1:67:7f:66:3f:
77:7a:ba:94:db:df:54:66:17:5f:3c:9a:90:48:0c:df:c5:26:
1f:53:48:bf:b5:44:04:9b:32:28:c8:c8:97:ae:20:f0:17:39:
e0:46:b6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:44 2025 by rpki-client