Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: ePaMDcwOBsJ6C6Y2qn821+ngUUO6Kwuvrtu6kBJPQ1c=
Subject key identifier: 41:C5:83:3E:AE:B8:A0:BE:90:EF:4A:86:02:79:9F:93:24:CE:A7:C7
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 0198D5F1CBABF977A28FE60D18F0BBA84394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0F3D
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: EdCeYFTIun53YSiHDaF5JRGxBh/POxdW3AtiCBmn/z4=)
2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cb:ab:f9:77:a2:8f:e6:0d:18:f0:bb:a8:43:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=41c5833eaeb8a0be90ef4a8602799f9324cea7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:d1:b5:3f:a0:b7:ba:5e:81:4f:4d:3f:b7:
73:d6:82:0a:20:14:7d:68:69:13:97:b9:d4:26:b5:
83:30:70:67:76:a8:21:28:75:0c:a4:ee:f2:61:21:
79:65:6a:aa:5d:f1:36:d8:5d:f6:bc:60:d6:10:c0:
4f:d5:7d:54:95:16:87:0b:1c:7f:50:cf:1d:30:87:
8b:09:4f:58:df:98:36:ab:be:0b:f5:69:f4:9d:d9:
28:eb:f4:23:49:f6:8e:76:98:fe:29:22:29:7c:12:
72:2d:0d:ea:3f:52:fc:40:a1:d5:a0:47:d6:1a:88:
fa:ce:29:9d:1e:35:bf:d7:45:fa:04:a8:c6:02:6c:
d5:c9:fb:c5:fb:c5:d6:0a:d3:dc:ce:fa:35:2e:56:
a7:96:ab:24:43:b8:bc:4a:0a:ab:b0:ee:99:83:59:
a0:42:9b:db:d3:60:ac:fc:5b:6a:3d:10:cb:d6:ed:
79:d8:59:a3:e8:e7:37:dc:90:36:8d:71:ff:19:e8:
b3:9c:a1:9e:cc:b5:5e:ef:19:1e:b7:00:cd:19:54:
64:95:f6:2e:ba:e5:1d:21:aa:4c:96:c4:68:c9:28:
0b:e6:8b:d8:87:7b:bc:8e:df:a2:8c:84:60:57:5e:
39:f2:dd:61:ff:75:f8:c4:be:1b:a7:23:3a:e6:c7:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:83:3E:AE:B8:A0:BE:90:EF:4A:86:02:79:9F:93:24:CE:A7:C7
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:53:ba:eb:23:b4:b0:0b:af:f5:d8:30:1d:a6:d2:12:05:6d:
73:58:3f:1e:df:20:1a:1d:34:bc:27:f2:3a:4e:1c:aa:da:48:
1a:3e:d9:b9:56:73:c0:0d:e3:5c:64:b1:6e:7d:22:0d:46:b8:
88:ef:20:24:45:fe:60:cf:f0:5e:ee:b8:de:dd:06:81:f9:05:
ee:54:01:a5:27:7b:e9:61:c2:17:da:97:fd:fd:ac:23:f0:ab:
fa:47:2d:35:ba:aa:5f:28:0f:c0:c3:ba:de:19:e8:26:4d:d9:
99:ea:c8:d6:48:67:9f:89:8d:79:88:ce:fd:8c:ab:fe:14:fb:
a8:2b:5f:97:a0:91:b2:5a:28:d1:b3:d8:c6:86:6a:f4:e3:1d:
30:5f:a6:1a:a1:c5:ea:b8:52:34:b3:dc:ae:5b:88:4d:ca:0a:
2b:6c:87:2b:fb:82:cf:91:63:af:14:d9:55:1d:5e:55:8d:eb:
58:bd:23:9d:72:e5:0e:4b:fd:9d:9a:63:6d:1e:05:59:46:b5:
ec:da:2e:0d:4f:a5:41:ad:da:7c:32:ad:10:04:30:65:c6:97:
cf:26:66:82:ec:5f:ba:39:9d:c2:7b:5a:c6:41:46:57:3e:09:
44:24:94:68:9d:a7:32:64:18:4f:79:e9:71:12:d2:52:b1:d4:
c9:53:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:50 2025 by rpki-client