Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: CfeGt+s/kPAb1ERUe4Q1YHUdev+0a0ykehDNXbabI6U=
Subject key identifier: 20:68:FE:30:83:35:04:D9:42:62:57:D6:BF:59:ED:E7:8C:CC:66:59
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 0198D4A7D67E1F362FEC4B28F763548B251D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 155B
Signing time: Sat 23 Aug 2025 02:00:25 +0000
Manifest this update: Sat 23 Aug 2025 02:00:25 +0000
Manifest next update: Sun 24 Aug 2025 02:00:25 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: S89uoEIgGK5d1q1X+ffupq9xVlrSHAMO6CeoPOMSv/o=)
2: m0jbiHxRktR_kE-i3D3woRX2ZsI.roa (hash: fSOohTJ+oYWg/YD/VykP7b8U7lIYd4B0MDv4mOCNuT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d6:7e:1f:36:2f:ec:4b:28:f7:63:54:8b:25:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Aug 23 02:00:25 2025 GMT
Not After : Aug 24 02:00:25 2025 GMT
Subject: CN=2068fe30833504d9426257d6bf59ede78ccc6659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:60:7b:95:b1:e8:9b:64:d3:e3:83:d2:d6:
58:4c:36:0c:b2:2e:57:16:66:04:32:88:5c:19:60:
69:0e:81:46:61:63:4b:13:2e:1a:6e:5f:cb:57:04:
b2:65:9e:7d:78:97:b0:73:1e:b5:77:5f:02:37:f4:
3d:d8:5f:8d:d6:b8:a0:20:5c:77:5e:59:7b:1f:df:
59:e9:8d:3c:7f:72:13:ef:9b:1a:a8:03:46:48:69:
6f:9e:35:f0:fd:90:9e:bf:e9:3c:ea:5a:81:eb:d8:
ed:0d:88:ed:9f:93:af:7e:3e:2c:fc:6a:31:89:b7:
c4:c6:69:4d:58:20:1e:f3:83:07:a2:8f:d5:e6:c8:
82:da:7c:fe:40:ab:8f:94:55:39:13:e3:22:47:f1:
a8:ed:c3:2a:bf:08:37:f2:75:ff:07:5e:5a:51:ce:
b0:89:67:1c:ac:57:59:18:44:08:2d:15:76:60:73:
25:4e:b2:a9:21:5a:f6:03:9a:c9:20:a2:a9:e2:d0:
cf:f3:66:7d:d2:cb:6c:26:9a:e1:79:33:c5:2a:71:
09:8d:cb:b7:18:2e:ff:49:fa:66:5e:79:d5:5c:4d:
a7:fc:1b:12:df:26:d6:c6:d8:5a:ed:23:19:80:3d:
70:37:62:57:8e:0a:d9:f8:8a:76:be:53:85:01:64:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:68:FE:30:83:35:04:D9:42:62:57:D6:BF:59:ED:E7:8C:CC:66:59
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5c:03:1f:c1:ea:d8:10:bd:a0:e8:b4:d9:3d:fb:a7:15:3a:
6f:e5:12:2b:28:24:79:ee:d5:f4:5b:a7:d9:e5:f1:2c:31:61:
0e:20:96:aa:94:e8:1a:d3:83:ee:4c:74:66:ed:49:41:85:bf:
3b:98:ae:80:49:15:43:aa:62:c6:46:3a:34:1d:be:74:12:49:
4a:45:34:a5:43:c0:59:57:a1:b6:26:ba:22:c9:04:60:f6:d7:
3b:72:63:6e:43:a3:63:12:be:ea:37:06:90:f0:cd:17:2b:c8:
82:a8:f3:4b:0d:83:ef:f5:fd:33:cf:a5:df:11:d4:06:d4:3b:
00:98:08:df:6d:1d:1e:3f:20:ec:da:6b:60:a0:83:e6:df:48:
90:8d:af:03:71:e9:b3:09:7c:6d:74:4d:0f:55:59:57:3d:74:
52:12:f4:a0:12:4a:99:61:8e:c4:3c:e5:54:fa:cd:d4:b4:5c:
b8:6b:ce:0d:5e:28:a4:c8:33:95:93:b9:4b:b2:96:6d:38:cd:
fc:46:90:6e:9a:f3:47:dc:c4:74:5c:4e:cf:82:35:10:35:2a:
43:a5:1a:90:f6:bb:17:f2:46:10:34:28:b1:1d:07:7d:2e:31:
c3:92:9b:be:67:06:c5:85:4f:37:db:14:5f:04:4c:99:fc:36:
85:0d:7e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:10 2025 by rpki-client