Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: ivSU5v0wrOTM+M5t3+XVQrvLfAAEcOi8eur+05TjSKs=
Subject key identifier: 95:9E:D0:ED:38:36:70:4B:A7:5A:85:ED:DC:31:55:F5:E5:DE:2F:B5
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 0198D5BBDB8A6B1AA4BE4BD9013DED62C339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: tgCuuep026igGVj5I0De+gghRkbx8BH8ei/pW9s9nQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:db:8a:6b:1a:a4:be:4b:d9:01:3d:ed:62:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=959ed0ed3836704ba75a85eddc3155f5e5de2fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:5e:ae:4e:b4:09:bc:73:e6:76:47:54:a2:
e4:fa:6e:dc:2a:f2:68:71:99:31:76:cd:d5:e2:85:
5f:55:9c:c4:61:f8:1e:25:00:fa:ee:43:e2:69:92:
4e:f2:17:8a:8a:ee:bf:a3:a4:57:51:18:9e:8e:9d:
74:ab:27:ad:cd:07:da:69:41:ca:45:46:c5:ce:4d:
53:83:ba:2e:a5:bd:b9:bb:d4:59:95:35:65:1d:9e:
b5:c7:f8:61:da:6f:54:91:97:75:bd:2c:b1:8f:ea:
6f:92:ec:2b:ed:08:c7:a3:35:65:ca:29:ed:f7:d9:
c2:02:db:38:48:61:6d:24:e5:e0:d8:67:82:44:b7:
1c:70:37:cf:07:5a:f6:02:1c:b8:81:c5:56:50:5e:
b8:1b:09:7d:f5:d5:fc:fd:ac:fa:06:ab:27:23:ba:
89:29:95:fd:e2:4c:14:27:62:8e:1b:79:f1:34:e4:
de:5d:fb:70:88:c4:73:31:1d:41:2a:34:4e:90:b5:
5f:ab:4a:fe:0e:95:f9:09:c2:72:b1:0c:c5:d6:c1:
66:59:18:04:03:65:14:8d:21:d9:84:5e:b7:fc:d5:
48:e5:a9:56:51:a0:a9:66:f7:a3:f1:0c:c7:f1:a9:
1f:5a:3e:cd:83:66:29:58:ca:e9:c8:08:37:f8:8e:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:D0:ED:38:36:70:4B:A7:5A:85:ED:DC:31:55:F5:E5:DE:2F:B5
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:67:28:65:2a:61:d8:9f:f7:51:a5:96:8b:c9:d2:57:f8:
4f:9f:23:c8:3f:94:6e:b6:81:67:a6:4d:54:ec:f6:33:f6:1c:
45:f9:96:3c:5e:26:4d:13:ab:a8:05:57:f0:9f:b3:06:72:df:
c8:6c:04:8a:ab:88:67:30:a5:ba:64:75:4c:27:4c:82:bb:d5:
c0:42:b1:6b:35:21:f4:87:ee:16:6d:ec:f3:2e:86:a7:e3:10:
6a:80:ce:12:af:df:f5:8d:0f:2a:16:de:b0:1a:d7:57:2a:45:
8c:1f:95:28:bf:d1:15:07:af:df:95:75:51:70:e8:a9:af:c7:
a2:13:36:92:8f:48:9a:6f:69:04:7b:58:96:3f:6f:82:ca:fc:
28:af:e9:74:9b:b2:4c:18:52:4e:de:e8:ec:39:d8:91:5f:85:
19:1e:5c:8e:c6:7d:8b:88:98:77:83:64:f8:37:94:98:cf:b0:
5d:0b:43:13:0a:29:4b:01:26:2b:82:a7:ed:69:3c:2e:c9:df:
16:34:a3:1b:de:38:e8:2f:6f:c4:89:f8:c8:f8:1c:2b:0b:93:
41:e8:15:8d:3f:7d:c6:31:a9:a2:e1:13:d0:2f:7c:29:0f:b9:
6c:ba:00:b5:9a:7a:46:96:c1:ae:32:aa:10:dd:39:03:3a:6e:
e1:7e:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:43 2025 by rpki-client