Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: gQd+yvt7ML2GiRaCTCu04O6ZI7QjsTpl4lw83wcNhsY=
Subject key identifier: AE:5A:C7:87:02:C7:72:43:AA:D7:24:AD:5F:2F:91:AB:A0:EB:9C:F8
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 0198D472CF756579DFF613C8CBD3EFB5122E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:30 +0000
Manifest this update: Sat 23 Aug 2025 01:02:30 +0000
Manifest next update: Sun 24 Aug 2025 01:02:30 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: yaLcBVtRS94mtnoHcmCF35PNxBb5INVe/DWjPwRVCFY=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:cf:75:65:79:df:f6:13:c8:cb:d3:ef:b5:12:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Aug 23 01:02:30 2025 GMT
Not After : Aug 24 01:02:30 2025 GMT
Subject: CN=ae5ac78702c77243aad724ad5f2f91aba0eb9cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:4c:f1:f3:ad:82:8d:91:6b:0c:85:0d:63:
ec:f0:08:90:89:03:08:d1:ae:a0:c9:82:d2:61:00:
66:46:d5:1d:1f:99:ac:22:96:41:cf:b9:a3:29:3f:
9f:d7:9f:76:b8:1b:a3:6b:6f:eb:a0:58:5f:23:a2:
eb:f0:18:26:41:39:0e:5e:23:7f:da:0a:d2:0c:fd:
1b:29:ca:85:8e:0f:9a:3a:95:11:a8:2c:39:97:5e:
85:01:4a:68:ff:81:11:dc:00:f8:d4:ec:b1:68:68:
bf:65:76:c5:b7:6b:45:9b:d6:c2:6c:c5:18:d8:32:
5a:bd:2d:c1:1b:13:5d:03:58:17:4d:8d:c9:01:78:
bf:27:6a:e5:f8:e1:af:3a:73:3c:28:cc:24:00:62:
cd:c2:6d:fb:61:6d:27:aa:f5:e2:83:51:e1:41:a5:
57:a0:2c:60:58:b8:0a:97:e3:ae:0f:e3:cb:b7:2a:
90:e0:32:21:eb:4d:99:58:c1:bb:6d:23:9d:6f:38:
11:b1:d9:f6:e9:87:8e:c4:32:b5:bc:e3:5a:b8:02:
71:46:e8:1b:93:06:1e:67:52:4b:49:35:64:55:a9:
67:a0:ad:c1:9b:31:af:28:64:c7:b5:00:6f:69:c2:
ff:77:2f:a7:1f:ff:0a:b9:c2:df:57:4d:83:f3:cc:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:C7:87:02:C7:72:43:AA:D7:24:AD:5F:2F:91:AB:A0:EB:9C:F8
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b9:32:b1:78:85:0c:90:8d:34:75:de:c9:eb:bc:e8:31:2b:
aa:6c:ac:08:95:f3:ee:db:12:a2:fe:0e:9d:e8:ea:7f:ca:95:
de:ae:17:4a:ec:ed:51:42:13:b9:1f:b8:7c:0a:d6:c1:23:5d:
04:1f:d4:50:cc:bc:29:4b:bb:24:36:62:76:00:7f:4c:ec:9b:
a5:8e:ba:26:b5:7c:5a:24:24:5d:29:f4:f8:b5:1b:bf:1e:ad:
ab:6c:ff:af:71:db:5c:fa:9d:49:0d:cd:77:97:12:3a:50:4b:
90:61:89:7e:46:c1:8a:3f:36:aa:53:21:15:25:e2:17:ec:13:
02:18:3c:d9:49:7b:cc:4f:bf:c9:c9:a2:6c:46:4e:e2:f5:b6:
63:87:99:b7:6a:ac:ce:81:d6:99:be:4e:93:ee:a9:cc:18:c9:
74:d6:8b:7b:fb:57:34:2a:69:12:dc:7a:b4:31:84:dd:ad:01:
60:64:08:c7:e4:20:56:8e:88:ca:bd:02:65:c0:31:62:4d:2d:
0f:a3:d6:1f:89:1d:aa:e3:cc:01:33:2f:67:11:1d:b2:ef:1a:
9b:ff:f1:81:2b:d4:08:f8:8a:97:c5:ff:7f:83:1a:a4:86:01:
7e:f0:d6:7a:23:8d:bf:c6:f9:b4:b8:b0:3e:aa:01:7d:f1:e2:
1f:be:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:42 2025 by rpki-client