Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: Y0cR08C1xlWmPs3lyId60digIDYIJHqSPENAx5yKPHo=
Subject key identifier: B3:7A:12:0F:44:98:0B:D1:4B:E3:B6:68:51:09:BC:7D:F6:4D:06:37
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 0198D65F0E3F8A454240175D02DCC74C372E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0D3F
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: jCsj8oPHo9BxftLnuAVw/Zev8tBq1KEY+XiIf991fw8=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0e:3f:8a:45:42:40:17:5d:02:dc:c7:4c:37:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=b37a120f44980bd14be3b6685109bc7df64d0637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:0b:8c:14:95:14:4a:cb:5e:de:ed:b3:d3:
d3:9a:7e:32:69:f9:15:b0:ca:2e:3c:e3:e5:6e:b2:
27:42:09:04:cd:d2:03:2d:0d:6c:cc:ef:fa:60:b2:
00:dd:c0:9f:c5:b8:db:61:ac:f7:35:c8:1a:6c:52:
72:4a:93:a0:4b:50:43:de:bf:b5:f5:aa:b8:77:1e:
85:bb:1b:5d:1b:1c:ce:15:84:44:17:d2:1c:a5:31:
bf:60:b6:5a:d4:4b:b5:a1:53:ca:86:8c:44:5c:02:
83:3f:0a:d1:66:81:2b:26:b2:81:72:b1:b2:3f:60:
b9:7b:f5:05:49:4e:7a:ef:87:e3:cd:a1:05:f8:aa:
68:fb:b6:0a:bd:c8:30:ba:1a:52:c2:f7:2f:ad:85:
fe:3b:4c:51:84:88:36:e8:fe:e9:eb:50:d7:bc:78:
e6:c3:8b:62:1c:53:16:49:3c:67:06:2a:33:c3:df:
cd:7b:29:50:1c:69:0c:4f:d8:bd:1e:3a:74:5b:0e:
0e:41:fd:d1:d9:95:a0:28:41:f6:85:6f:33:f7:a2:
90:51:ac:48:8c:89:e9:42:3c:e9:a1:fb:e2:89:11:
5e:2f:8a:44:b4:6f:e2:68:73:6f:3c:1a:dd:7b:f5:
15:8f:53:34:07:3f:7e:df:0f:9d:45:2c:0f:6c:00:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:12:0F:44:98:0B:D1:4B:E3:B6:68:51:09:BC:7D:F6:4D:06:37
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c2:25:4f:33:cc:38:1a:2a:ed:75:9e:db:41:92:fa:63:f1:
81:9b:a5:d1:af:bb:78:85:39:ac:17:83:f8:6c:f4:48:65:35:
a4:06:4f:08:52:11:80:3c:f5:99:37:e3:69:81:f7:bd:dd:12:
89:f4:51:b0:6c:ad:1e:55:a5:a4:01:06:84:16:77:c6:d6:46:
95:02:e3:67:83:22:9e:bd:3c:73:ac:7d:bb:f4:93:53:62:33:
8f:9a:de:a8:5c:b6:00:72:e1:59:64:88:32:99:6c:96:af:28:
7f:98:89:77:1e:50:d3:7b:a2:ef:61:8e:80:e2:88:3d:a7:7a:
3c:aa:0e:b9:e5:c4:f0:cd:a4:eb:f1:30:c6:73:2f:53:f7:3e:
3e:5c:94:d7:36:6f:a9:3a:a9:07:dd:0d:a7:94:dd:41:4b:37:
55:d3:87:fc:46:ef:c7:b1:37:3a:fb:53:ba:c8:0a:68:45:b8:
4f:ca:2e:21:99:39:a8:8f:b8:f9:80:b1:40:04:77:16:64:3d:
ff:1d:be:d2:4e:87:25:36:03:5e:94:ff:c9:b2:91:4a:9e:48:
ed:8a:92:9e:e5:dd:62:6d:ac:72:57:9b:2d:91:45:08:58:11:
52:bc:c4:b0:41:79:dd:d7:f1:d8:b3:05:57:08:68:51:12:a0:
d4:ae:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:25 2025 by rpki-client