Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: 2g4rv0v6pxlNGn6kVrZ16u0Q9Pf/AWUG3qu8hk9knpw=
Subject key identifier: CF:83:0D:7B:A7:50:9B:12:6A:14:FD:7D:2F:5B:26:65:ED:0D:8F:62
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 0198D7A89E4C9E52EA6AD387805774E3B9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 16:00:08 +0000
Manifest this update: Sat 23 Aug 2025 16:00:08 +0000
Manifest next update: Sun 24 Aug 2025 16:00:08 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: eyhyVBL1GROrzwULxztL/BgQ9bzjIM1yEN/7ruPurNw=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:9e:4c:9e:52:ea:6a:d3:87:80:57:74:e3:b9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Aug 23 16:00:08 2025 GMT
Not After : Aug 24 16:00:08 2025 GMT
Subject: CN=cf830d7ba7509b126a14fd7d2f5b2665ed0d8f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:2c:7a:40:f0:e2:7f:46:66:37:cd:67:86:
7e:48:b8:c3:80:4a:c5:2d:61:bb:2a:aa:55:79:3c:
93:6f:a8:53:bb:e7:2a:95:cf:50:5b:b0:b3:63:85:
31:0e:15:92:e9:a2:b8:7e:06:66:b5:28:95:14:16:
15:5e:0d:8d:18:4f:d4:3b:df:d0:52:df:14:21:14:
72:11:5c:7a:d0:c7:5e:04:7f:d3:64:7e:75:68:e1:
69:1b:59:0c:c4:99:58:bf:43:0b:8b:fc:6b:ee:34:
49:a9:89:8c:ab:cf:ce:7e:23:b2:bc:21:d0:68:c7:
2c:75:eb:c9:75:0f:f6:e7:2d:3a:3b:f0:27:a9:70:
cf:10:dc:a5:f6:1f:fa:66:07:5a:72:31:5f:c7:36:
9c:fe:d7:db:14:7f:f7:fb:0f:83:aa:df:1b:2f:18:
66:70:57:ec:f2:2d:a0:11:1b:53:4f:bf:44:6b:41:
9b:30:ae:71:86:7a:19:67:03:cd:e2:13:6c:d0:13:
50:35:d1:5c:e1:dc:df:39:9a:c1:40:cb:d5:5c:9a:
57:02:12:c1:bc:70:aa:d7:05:ce:e1:35:5b:5d:ae:
9c:08:06:1f:c5:e2:5e:a2:8f:e3:ad:d0:81:35:97:
dc:01:f9:8b:8c:6b:14:85:0b:fa:b0:c2:34:9a:e7:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:0D:7B:A7:50:9B:12:6A:14:FD:7D:2F:5B:26:65:ED:0D:8F:62
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c1:0b:50:42:d0:2a:9a:ca:6c:57:22:62:1b:bf:f9:77:83:
cf:f4:f5:b0:56:0c:7d:15:5c:22:83:eb:db:e4:60:e2:7f:99:
48:19:bb:fb:f7:4d:08:e9:57:29:c8:09:86:85:fd:79:57:3c:
a2:6a:92:de:6b:ab:7e:63:b3:fe:a6:2e:13:55:f5:71:33:62:
0f:2e:49:02:e3:1c:7e:fa:8c:3f:8f:e6:93:eb:33:4b:cc:1a:
3a:45:38:56:e2:22:c7:a4:78:7c:74:6c:e8:cd:e7:7d:34:04:
f9:91:f8:58:98:b9:4f:d7:6b:21:ee:a8:47:9b:a9:e3:99:bd:
e3:18:10:a3:0c:0e:dc:05:25:b1:78:da:45:09:3f:68:7d:48:
9d:d7:b3:42:05:ef:87:10:7d:33:c9:6d:6b:65:7a:29:71:1a:
64:46:78:9c:c8:0e:90:16:19:14:c8:23:f4:57:1f:b9:f8:41:
79:eb:fc:15:96:05:7e:c3:51:91:22:b0:19:5a:eb:74:6a:18:
85:14:c1:36:ac:c5:b3:25:64:23:8d:c9:a6:cb:35:dd:6a:0e:
1a:66:e3:37:03:38:c6:01:1e:79:c5:4a:c6:f9:6b:dc:9f:60:
c1:39:18:b2:e7:9a:7a:d6:ba:f5:4c:d1:c2:87:0e:c3:0d:ac:
51:8d:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:50 2025 by rpki-client