Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: Lx+SHNqdXxrexlrOkFJ1EW/19rVGVSxbT7bLxzMaF3w=
Subject key identifier: 3A:6E:AD:40:8A:4C:4E:EC:E1:80:72:92:F5:3D:F0:74:47:C2:BC:03
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 0198D884BADE0D28F205714801BCDEE8D487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 0712
Signing time: Sat 23 Aug 2025 20:00:33 +0000
Manifest this update: Sat 23 Aug 2025 20:00:33 +0000
Manifest next update: Sun 24 Aug 2025 20:00:33 +0000
Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=)
2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: Fm89fUZhGW0LMu40VovpJAEyov0v4lHFodhXUip91T0=)
4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:ba:de:0d:28:f2:05:71:48:01:bc:de:e8:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Aug 23 20:00:33 2025 GMT
Not After : Aug 24 20:00:33 2025 GMT
Subject: CN=3a6ead408a4c4eece1807292f53df07447c2bc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:a7:23:10:9d:e8:fa:3b:54:cf:16:c6:47:
0b:fe:cd:b8:3e:26:9a:15:1c:dc:0f:8e:48:f0:f7:
92:e5:de:fe:43:a2:b6:b9:a0:fc:49:61:09:08:74:
91:54:52:3f:bd:ae:c2:a1:cc:fa:6b:08:3d:27:dc:
4e:f5:03:5b:74:e8:2c:c0:e3:e9:13:90:a4:80:8e:
6a:f1:8c:10:83:f4:f8:70:7b:31:71:22:ae:a4:4d:
ae:1b:09:08:d4:23:9c:f0:c2:a7:e9:6a:02:19:71:
a2:b3:4d:90:a6:d8:af:2b:d2:93:93:a4:9b:9a:aa:
ee:4a:c9:81:9f:12:60:73:f9:dc:14:f2:84:42:a2:
75:d4:e7:5b:ea:68:c5:27:14:99:e1:08:98:57:9c:
30:e7:59:dd:7b:7b:10:f4:fc:f8:d9:95:9d:41:df:
66:f3:83:37:ba:41:d2:5a:72:66:d9:1e:b9:0d:08:
5f:b2:0b:a3:5d:b6:f4:1a:1e:0a:8d:c0:48:33:2e:
da:3d:a8:08:b2:cc:96:e5:cc:ec:65:e7:8a:78:ef:
db:f5:c8:7b:b6:97:11:d3:89:f1:3f:4c:a9:aa:ae:
d6:fb:c1:37:11:3a:a2:1e:66:13:2b:35:d9:ff:f3:
2c:0d:ed:bd:fe:d9:59:22:f3:4a:4a:d8:af:34:9b:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6E:AD:40:8A:4C:4E:EC:E1:80:72:92:F5:3D:F0:74:47:C2:BC:03
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c8:24:6c:ae:d3:32:1b:f4:15:67:9e:c4:60:bd:6a:6d:7f:
68:26:5f:88:59:3a:81:8d:f1:99:49:b9:78:ac:47:d4:89:ef:
d8:fe:2c:19:54:e3:c0:6a:05:91:70:31:e4:95:cf:a0:3b:66:
b2:10:c6:b6:26:e4:94:23:48:df:c8:c4:b2:65:93:68:29:22:
1b:93:8b:8b:e1:97:99:f8:83:5f:1b:7f:6e:19:bd:bc:29:96:
17:4a:b2:1e:b0:a2:bd:9a:dc:0e:cc:09:7d:be:7f:9a:b5:c0:
a4:c0:63:c9:59:59:3b:83:bb:12:ba:40:e6:d0:17:e2:7c:ab:
1f:7f:d4:1d:7a:90:0e:f2:59:af:e9:42:2c:2f:64:75:57:d9:
7d:96:00:f3:1a:3c:32:a6:2e:f1:88:d7:11:a6:f4:ee:79:05:
64:30:db:aa:95:eb:ad:94:41:35:41:a7:19:82:7a:c0:28:ca:
39:31:ce:8e:df:bf:e8:6d:8d:cf:4d:48:be:91:be:7f:20:f4:
c4:9c:a7:cb:25:e6:35:58:fa:cb:ed:7d:24:30:63:b0:67:5a:
14:3b:e1:0d:98:ea:58:a8:63:70:c9:58:69:ca:ed:bd:e0:41:
df:f7:f9:23:08:df:66:52:6e:ee:ef:36:1a:57:dc:0d:0d:7d:
43:71:a4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:30:24 2025 by rpki-client