Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier: rqLfhYhajHe+wPf0vILuvyYYZJZF8ALpb72TRMnWkU0=
Subject key identifier: 20:CD:6F:A5:C0:55:DD:9E:E9:5B:F9:55:60:41:D2:9F:E6:79:9C:7E
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 0198D4728D13D50B8D0FBD06EB013F3E41C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number: 02BC
Signing time: Sat 23 Aug 2025 01:02:13 +0000
Manifest this update: Sat 23 Aug 2025 01:02:13 +0000
Manifest next update: Sun 24 Aug 2025 01:02:13 +0000
Files and hashes: 1: XDaCGcZealj-spshbO6gPk6HDcA.roa (hash: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=)
2: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: rOJyRO8eEUTVRF0/tk9O0YtZcW0ixsoAnfe8Ra2pDYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8d:13:d5:0b:8d:0f:bd:06:eb:01:3f:3e:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Aug 23 01:02:13 2025 GMT
Not After : Aug 24 01:02:13 2025 GMT
Subject: CN=20cd6fa5c055dd9ee95bf9556041d29fe6799c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:7a:c2:98:a7:be:10:35:69:c2:13:79:81:
4f:fd:cc:36:54:04:79:82:3b:bf:6a:4b:d3:c7:e8:
44:32:4f:aa:ba:57:e7:52:22:bd:22:93:d9:c0:e8:
c1:6a:6c:1c:01:53:80:0d:2c:b1:0a:3a:49:d6:44:
23:b6:ac:79:a3:24:94:09:b2:49:9c:1b:f6:e8:60:
b5:fc:ad:f6:bd:55:f6:3f:ef:2f:45:d4:b4:92:e3:
18:de:4d:fb:39:90:aa:a7:d7:f0:92:78:19:c2:b9:
be:00:04:10:51:aa:7e:d6:da:4c:73:e3:89:68:ae:
d9:e5:7e:02:30:30:8d:8f:8b:ee:fa:29:f2:01:c5:
da:c3:00:f5:5a:5b:3b:90:a5:18:60:7c:a1:2d:e2:
78:b1:9c:36:ac:65:11:39:ba:e4:e4:81:9b:93:8e:
bb:44:96:1a:eb:73:11:91:96:ec:a2:72:3a:a9:f1:
f6:e4:d5:4a:ac:20:3a:c5:8b:2e:a4:d4:f5:b8:27:
13:d8:a4:b9:3a:f3:0e:a1:dd:a5:9a:d3:f7:58:9a:
e9:23:ac:55:86:36:bb:86:d1:2f:99:bd:86:47:ab:
7a:99:ed:56:1c:39:29:21:2d:7e:a7:9d:77:d4:89:
96:5c:dd:8d:b1:f9:68:bb:f1:23:36:77:3d:62:3d:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:6F:A5:C0:55:DD:9E:E9:5B:F9:55:60:41:D2:9F:E6:79:9C:7E
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a6:1f:7e:b8:71:4c:a2:f8:7e:19:8d:9b:7e:c0:28:7e:d0:
69:02:9d:5b:3e:ba:a8:d7:76:92:1d:7a:02:25:e4:93:c7:3d:
15:95:f5:81:f9:85:14:4d:53:5a:18:63:c5:d3:a5:a5:0b:c9:
64:40:b4:ed:58:d1:aa:c0:e6:8f:05:20:df:0e:e1:bd:b2:9f:
71:15:68:ae:e0:7a:ca:21:e6:be:c3:4e:ce:33:ce:97:82:3e:
2a:4a:d7:33:6c:de:78:0f:bf:74:a5:8d:70:83:c4:a6:29:15:
4a:21:ec:42:f1:b4:66:79:85:d8:e8:d9:ee:c8:f3:9c:77:48:
24:cf:8c:02:10:da:af:a7:c0:96:0d:85:26:7f:de:db:5e:ca:
f1:fe:e9:40:cc:17:ab:dc:27:6a:25:75:19:7f:d2:38:52:97:
ff:8e:f7:f7:6b:f6:1d:ab:55:f1:9e:1b:88:c2:13:b6:07:1d:
f5:31:a6:0f:b2:d2:b3:60:0d:e8:51:c9:c2:46:34:2c:26:a1:
d7:5c:f7:8f:4c:c8:e5:d2:89:b0:eb:ee:d5:d0:62:f9:6e:2d:
f0:71:df:d1:92:1d:23:c0:25:6c:8e:52:a4:81:2a:c8:69:43:
5b:30:5e:09:61:bd:a6:54:0f:32:5c:3a:a1:2c:be:bb:c4:02:
f0:1e:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:49 2025 by rpki-client