
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: n0inDYACVA4T/29rFpKBQzHwErsnPQtIchYjiFd4Mh4=
Subject key identifier: 86:9D:94:B0:5D:7F:7B:A4:C6:4A:88:06:92:E1:3E:61:26:82:AF:8A
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 0198D583F584E435FED7012AF0AA7357AF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 05CA
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: tFXpLam8GrFH8UJt4KZhJbHZyUx2TWef8lq9y0U+gFo=)
2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f5:84:e4:35:fe:d7:01:2a:f0:aa:73:57:af:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=869d94b05d7f7ba4c64a880692e13e612682af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:22:22:14:78:d4:f0:40:31:b6:9e:fd:6f:
52:49:3a:78:fe:54:fc:ea:e3:86:be:51:d2:82:cb:
c1:1d:72:f3:54:bc:48:6b:85:89:55:03:5c:0a:3c:
0b:9e:26:81:44:16:bf:ee:c9:8a:2f:3f:7f:cd:a5:
56:32:77:06:4c:75:60:11:f1:33:26:dc:d2:f5:f8:
34:eb:ee:e9:b1:0f:d4:21:66:cd:6d:9d:66:bd:db:
35:9a:cd:9a:2e:26:03:d0:fb:e8:3b:ea:62:96:8f:
4e:e1:b6:f0:39:2e:0f:5e:14:01:b9:2c:41:78:76:
72:4e:6a:de:ee:04:1e:1d:69:c2:44:55:11:3c:de:
ba:e1:2f:d6:f3:22:1b:ad:fe:5b:46:4a:6e:5a:95:
96:61:31:fc:e7:02:40:8a:d6:41:8b:de:dc:5c:26:
bb:49:14:6c:3d:3d:32:f0:c8:7e:42:ea:43:73:7b:
16:a6:a3:1b:74:1d:4c:72:b3:68:be:7c:84:49:e2:
c2:48:ef:e4:65:56:07:4e:7a:2d:d4:05:68:71:06:
49:41:c3:f8:28:bf:9c:ef:17:d3:d5:02:47:75:64:
3a:a1:1e:5a:ad:dd:f3:67:6d:bb:44:fb:63:20:0c:
aa:16:f3:7f:8c:71:c3:e2:76:04:5f:3e:8d:31:f1:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:94:B0:5D:7F:7B:A4:C6:4A:88:06:92:E1:3E:61:26:82:AF:8A
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5f:15:cf:62:1a:32:83:bf:93:4b:5a:c1:dc:ae:63:36:e9:
07:b6:a6:12:b9:fe:46:33:e2:de:ff:c1:c5:c9:83:98:39:ba:
26:c9:d8:24:d7:9e:13:fa:d3:03:5e:0f:6b:80:74:77:b4:75:
5d:aa:33:a2:50:ad:a0:9e:b4:49:b9:13:55:8f:a0:39:1c:d8:
72:ca:71:b8:b5:5a:86:c4:32:94:c9:f4:a0:c6:77:5a:eb:95:
d3:b5:91:e5:fe:53:f9:b2:df:d9:50:10:9f:e8:03:42:19:e8:
17:65:62:6d:eb:44:cc:60:e0:f3:d8:d4:af:f5:22:d0:b3:cc:
56:6b:42:2d:2d:77:b0:cc:6a:59:f8:1a:e9:fc:2a:8c:07:1f:
42:8c:fc:ff:92:74:d0:8d:44:90:76:71:52:ac:59:77:2a:8d:
86:fd:e7:74:f9:76:47:01:11:9b:5b:cf:bb:88:d2:f3:c9:3d:
d8:32:bd:78:b1:8d:5a:e9:67:83:90:7e:b8:fa:a3:01:7d:3f:
d4:fa:b9:f0:3b:1b:f3:bd:b6:57:55:b2:b3:8b:eb:85:e8:61:
9d:a2:32:d9:89:a4:be:f5:22:ee:ce:00:3f:a5:1c:4b:01:42:
a8:f5:4d:ba:9e:dc:ab:a5:0a:fd:71:f7:b4:c9:f9:8c:ef:45:
56:cb:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:58 2025 by rpki-client