Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: CdG0z+jqZg6WwJVez4QfKCe2RmQyLH6TYNZLxKUrIqY=
Subject key identifier: BB:DA:64:62:F4:23:F2:A6:07:C2:72:41:5A:FA:90:3F:B4:1E:A8:8D
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 0198D7A9183B9FB9C95C6BE65139F3707C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0AA9
Signing time: Sat 23 Aug 2025 16:00:39 +0000
Manifest this update: Sat 23 Aug 2025 16:00:39 +0000
Manifest next update: Sun 24 Aug 2025 16:00:39 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: bzfV3CJmHEx67EF6HEByXUhFqgXwlLSRDd9X6qd1f1c=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:18:3b:9f:b9:c9:5c:6b:e6:51:39:f3:70:7c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Aug 23 16:00:39 2025 GMT
Not After : Aug 24 16:00:39 2025 GMT
Subject: CN=bbda6462f423f2a607c272415afa903fb41ea88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:d3:df:dd:42:6b:41:4e:a3:e4:ee:42:fa:
5d:37:0c:5d:df:84:56:33:2a:8d:2c:a0:8c:ac:08:
ec:d9:03:d4:24:4f:1c:c4:a8:1f:a8:16:c5:b4:71:
27:1b:2b:1c:16:08:5d:41:44:e3:e8:1e:38:9f:e4:
a2:74:67:f5:eb:fa:6c:6c:70:ac:56:d4:8e:a3:c6:
ac:6f:3c:69:6d:41:e0:c3:2d:ff:9d:c8:46:43:b2:
cf:f5:e2:ad:58:f4:4b:90:be:2d:81:8a:70:de:2b:
66:ba:89:24:6f:18:a9:de:8d:6e:92:ed:1f:c4:4c:
47:6a:c3:62:aa:5d:c4:a7:c7:df:3d:3b:70:db:d3:
ba:e6:40:81:33:bf:1d:76:5e:55:6c:bf:9c:7a:88:
f4:69:3a:06:70:8f:97:41:38:7b:fa:0a:15:b0:79:
90:ec:37:19:79:42:60:9f:f3:88:fe:38:81:af:42:
6f:a8:d3:56:78:21:90:5c:52:3e:ec:3e:98:ea:0c:
a0:03:72:bd:56:16:5c:9d:dc:f7:71:76:66:ca:f6:
01:84:bc:51:1c:a3:bd:91:1d:e8:bb:e7:da:f9:8d:
2a:7d:fa:5c:96:28:30:36:9c:64:f6:67:cd:ae:28:
d1:92:a6:0d:17:c1:66:e2:4e:8a:b1:de:9d:1a:05:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:64:62:F4:23:F2:A6:07:C2:72:41:5A:FA:90:3F:B4:1E:A8:8D
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:22:a8:bc:b5:74:09:44:a2:41:89:aa:20:d3:10:43:b5:c1:
0e:e7:35:b1:de:7b:bb:c5:d8:9e:39:8a:d8:3d:ac:0b:07:6c:
b1:5d:4b:5b:92:53:01:52:86:f3:54:11:60:4c:49:bf:b8:b4:
4f:d9:89:b0:be:19:f2:41:62:13:44:4f:4e:eb:f4:76:14:78:
00:bd:03:c7:30:18:00:84:fb:a5:83:d0:09:2a:a4:a7:6e:7c:
e6:84:4f:4d:c0:98:49:34:37:16:b4:ed:49:30:96:f9:3e:2b:
5a:27:b1:71:9d:f5:cd:77:48:50:ef:9b:2c:cf:4f:9b:f7:64:
23:b8:f1:88:9c:35:25:51:12:3d:cb:36:98:e7:f0:cb:f6:86:
f1:94:fe:c5:a0:a5:33:4e:8c:27:9c:c0:59:80:43:63:54:cd:
1c:ea:0e:76:da:3c:4b:63:24:17:77:4a:86:b6:08:5e:29:29:
6a:33:ee:ea:bc:9c:65:c1:78:af:f9:6a:07:37:34:dc:1f:a1:
70:36:be:87:eb:bb:31:52:6e:9c:5d:2d:ad:36:fa:ce:3d:1e:
2e:16:c0:21:84:f6:3c:72:06:e1:4b:97:d6:cb:79:a2:ae:7e:
67:4d:9d:06:40:d7:63:ff:19:1a:45:70:94:e2:9b:2e:73:a3:
b9:0d:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:30 2025 by rpki-client