Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
File: S8K4kvLb729UtFNg_rD4QUpahQQ.mft (raw, json)
Hash identifier: +aHDKWU4NzIIqdVSrNH/wjMG3mxxg7Lm+bSb+isU8uo=
Subject key identifier: 88:78:7A:F3:4F:0B:A5:30:D2:4B:05:CC:82:58:28:F1:0A:1A:C4:E4
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 0198D4E01DC9F9A5F72ECAC44E1FFF083600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: 8XxbJK1GWPrtjat_Lpe2HKly_9k.roa (hash: 1REGOqOGYIsLrmhSt5pZG4EmBpaR7Cf++uPRynahll8=)
2: S8K4kvLb729UtFNg_rD4QUpahQQ.crl (hash: hR3W3Mk4gEZgYyRQ3hg2X/GJyj14tbbF29JPthQ3rD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1d:c9:f9:a5:f7:2e:ca:c4:4e:1f:ff:08:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=88787af34f0ba530d24b05cc825828f10a1ac4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:f9:b4:58:a5:f0:ad:04:b2:14:06:82:19:
af:3e:36:6a:b1:3a:ff:70:b2:a3:04:09:4f:be:79:
e4:45:b1:2c:95:22:15:f0:4d:c3:ab:32:52:e1:6a:
68:5c:61:b9:91:6c:98:30:79:63:9d:3c:3f:21:db:
49:14:b2:65:fb:51:d6:09:d0:21:f7:dc:90:ae:04:
17:ec:ec:25:a1:fb:a2:b2:71:64:54:ff:63:46:8a:
c7:84:62:57:98:85:bf:3e:c7:ed:ec:5f:f4:12:ec:
96:38:81:34:50:87:95:a4:5b:4c:93:72:5e:a2:dd:
73:80:35:ef:46:79:92:64:84:59:ae:07:ac:cc:18:
a2:f2:25:c4:56:75:55:4e:96:bf:32:29:15:ac:ea:
b5:86:47:83:d3:5f:43:5b:8b:7b:4c:2e:6c:4b:1d:
d5:5a:70:b5:7b:2e:cb:e9:05:0d:f3:39:96:5d:fe:
6d:51:62:5d:22:25:8a:4b:ec:3a:b9:3f:96:36:a1:
d9:5e:49:ad:fc:f9:52:2b:6b:48:67:cc:20:c4:63:
6a:e5:f1:79:0f:fe:57:6c:bd:02:36:cf:58:75:d0:
40:7f:e3:13:c5:43:62:f9:d1:06:24:1d:0b:c8:6c:
5d:d7:f3:6b:fb:50:d8:23:ce:27:26:b3:fa:cc:b4:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:78:7A:F3:4F:0B:A5:30:D2:4B:05:CC:82:58:28:F1:0A:1A:C4:E4
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:0a:f3:7b:29:39:c2:44:0f:71:50:48:1c:6d:00:17:3a:
4e:e2:e7:20:a7:80:d8:99:e2:16:e4:89:d1:08:9c:a2:e0:bd:
b9:41:80:db:1a:1a:15:05:06:5b:86:63:0d:21:fe:1c:3a:ec:
de:08:86:e5:de:27:35:ba:0c:3e:4c:f1:f0:5c:af:48:4d:10:
38:95:1b:df:9a:8e:77:55:a5:93:1e:00:88:e8:14:69:6b:f3:
87:36:5d:3d:08:bf:45:2f:e9:a4:45:c5:a1:11:95:1b:9d:d8:
88:e6:ea:7d:0c:2e:f5:97:b7:9a:34:53:db:55:5f:07:38:34:
a3:f8:1e:da:ab:08:1e:4c:5e:b7:28:12:3d:7d:45:49:b2:d9:
4b:15:9a:2b:ab:82:d3:68:a3:a6:14:c9:bf:fb:df:47:a1:0b:
db:e5:5a:71:9c:4e:a0:44:48:e3:42:50:92:58:3b:95:8a:31:
28:97:58:35:5b:d2:5f:9b:69:6b:61:67:a8:bb:8b:50:ca:eb:
3e:9a:b4:17:25:93:a7:3c:e2:22:3b:f4:9a:4d:dc:87:5e:ad:
27:12:45:6e:3b:50:33:b3:24:6a:95:04:48:ea:b2:67:53:d6:
8d:2c:39:7f:34:c2:ee:9e:2b:ed:f7:35:66:bd:b5:22:91:b7:
88:08:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:57 2025 by rpki-client