Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: 6UgWNt5P4sNthxh4KRDTcJypVMlKegzp38jqouMvIjE=
Subject key identifier: F6:6B:74:7A:E3:AC:C3:0A:C5:83:F9:5E:44:C7:E8:20:28:B1:AD:C6
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 0198D4A7C664EFE90DEF313D674AC1184692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 118A
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: Q59KyWHVyuleeKj7Wln0UKfwyBZygPiH62iUESWhnCM=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c6:64:ef:e9:0d:ef:31:3d:67:4a:c1:18:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=f66b747ae3acc30ac583f95e44c7e82028b1adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:a2:07:ab:b2:d5:7b:78:6d:2c:9f:29:97:
a6:7a:cf:3e:82:1a:46:7c:6d:1b:15:e4:71:7d:6f:
fc:08:0b:e9:ae:4c:98:8c:fe:5c:5a:37:be:f6:0a:
29:75:30:f0:10:0a:82:4a:29:79:4c:42:a7:e7:61:
9f:89:7b:df:d8:19:7b:ec:e2:ed:b9:0e:0f:ee:d9:
d4:8c:da:a3:eb:a7:93:58:eb:bd:fc:86:9f:36:88:
6b:58:ea:04:f2:bd:c1:a7:24:9f:5e:4a:5b:d8:e0:
f8:b7:85:2d:94:a0:9b:ad:cc:a2:b1:1f:8f:35:a3:
d5:3d:6e:e9:d5:3e:aa:f9:ab:83:f3:b4:25:ee:53:
1f:8f:89:2c:e6:62:c1:b7:3f:9c:9e:c4:47:db:ff:
82:9a:b0:fb:2e:e4:ff:71:65:3b:8e:21:e7:44:c7:
30:81:05:b0:c0:ca:7e:a6:bd:2a:08:84:d7:9d:db:
77:02:29:ab:50:38:10:ac:11:56:01:4e:be:88:fa:
23:7b:61:b9:04:a8:6d:d6:ae:01:79:4d:8a:31:17:
34:63:7c:14:69:e8:07:51:ec:85:6e:f5:85:e3:45:
85:a2:7d:8b:1f:8f:c0:a5:68:26:fc:22:64:e0:9c:
ca:05:89:f5:c3:07:b1:bf:c0:f0:18:9f:d3:4a:94:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6B:74:7A:E3:AC:C3:0A:C5:83:F9:5E:44:C7:E8:20:28:B1:AD:C6
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8a:22:37:0a:2f:d2:1a:87:3f:39:6c:43:95:19:a5:6f:47:
53:14:a1:c6:eb:32:e5:01:50:75:91:51:6d:c2:64:0b:bc:8f:
5e:46:1b:1a:38:a6:54:0d:d2:8a:5c:da:ae:f2:f2:b8:20:3f:
94:95:bf:c9:1f:ca:57:2c:08:f7:ea:c9:ac:f8:c0:49:48:b9:
f2:fa:74:15:a8:59:8d:49:18:67:ce:2d:3c:7c:c7:17:20:0c:
57:81:b2:a7:7b:9e:1c:f8:57:79:1c:9f:99:ec:6b:c2:f9:f9:
46:4d:ef:bf:89:e8:43:b7:9d:9d:c1:68:b2:5a:03:16:33:b0:
f2:f9:4c:63:ff:8f:5c:ef:7b:e1:bf:25:c3:ae:a1:c4:b5:30:
7d:90:7f:e6:f9:6c:85:08:de:5a:04:df:a8:a0:e9:ab:f4:9f:
1c:88:b7:57:47:86:96:d2:fc:39:31:97:ab:b8:6b:5e:fb:c8:
2f:84:c3:34:7d:bc:12:b5:d8:bd:30:b7:c4:51:e4:04:13:a6:
65:d3:8c:69:dc:d4:f9:e9:27:04:46:34:58:e3:08:94:31:bc:
e6:2b:85:1a:7c:6a:c9:dd:c4:c7:4f:28:d9:68:83:14:6c:48:
fe:ea:6a:6f:53:47:2d:9e:bd:5f:e8:cf:67:6b:eb:7f:3d:75:
39:86:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:13 2025 by rpki-client