Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: o3W7AtwpEKFdEdWJwVFUou89d3FX+OMi2vIzgJPU+BU=
Subject key identifier: 40:B9:2F:76:26:08:9B:BB:3D:57:5C:48:A6:B4:E5:6B:56:DE:C9:12
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 0198D5BBFC9F232C4F911932E07D2FBEF66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 0EDB
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: AtnXUnfFmeh/wI1pykLsxk0MW5wgOmdbGWFJAx5Hfqw=)
2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=)
3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fc:9f:23:2c:4f:91:19:32:e0:7d:2f:be:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=40b92f7626089bbb3d575c48a6b4e56b56dec912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:c8:4c:be:b4:33:2e:f2:c2:af:b8:f1:9b:
1d:67:73:22:c5:51:5e:0e:f1:6f:1b:77:01:04:0b:
8d:31:b7:87:36:fa:07:b1:d0:5d:6c:8e:78:83:30:
af:73:c4:80:94:b5:dd:79:c8:fb:0a:71:fe:12:c2:
10:b6:a1:52:54:cd:71:2f:de:19:ff:82:7f:5f:3f:
ca:1a:5e:49:12:13:13:7f:c7:eb:12:76:f9:d6:3e:
5b:2d:3f:aa:d6:4f:dd:37:3b:dd:cf:4c:2a:ed:cb:
2e:ad:f8:fd:98:5a:ac:17:e6:a5:f5:19:21:74:e3:
3d:56:9e:b3:77:0c:27:07:cd:8a:5c:a0:88:80:eb:
ba:69:b3:de:5d:a3:8a:7b:8e:9c:28:48:4c:75:0c:
e4:3c:b8:69:3f:60:84:4f:e6:e2:f6:85:54:17:03:
c7:0b:a8:4e:73:c9:96:00:b7:aa:be:65:92:87:14:
8d:f8:46:a3:1e:a2:39:d2:36:50:97:56:ec:4f:d0:
81:6f:8f:5b:86:38:25:27:90:b3:03:a2:0a:7e:1c:
f5:ba:71:7c:1e:4a:c2:71:2b:5d:14:78:fc:ed:9d:
49:df:00:35:2c:ee:40:b0:62:07:83:a8:f5:3a:70:
79:56:ab:89:47:cc:8b:e3:c1:fa:58:b6:45:50:6a:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:2F:76:26:08:9B:BB:3D:57:5C:48:A6:B4:E5:6B:56:DE:C9:12
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b9:fc:69:db:d3:38:3e:af:7b:b9:0f:78:33:a4:6e:a0:aa:
d5:00:16:98:55:30:6c:db:8d:96:fd:bb:4b:98:64:3c:2e:97:
d0:d3:df:db:14:ad:d6:0f:28:72:fd:0e:74:8f:4c:d6:c8:f7:
ad:b3:03:a4:3e:6f:f5:41:4a:17:4d:2c:75:a0:3e:b7:d0:85:
32:13:df:be:8e:25:75:b8:bb:c0:41:b6:68:9c:f6:7a:20:30:
a7:bc:a1:c0:f5:de:5a:1d:e4:86:fb:ce:bd:0a:c4:8d:6c:38:
40:18:9e:07:e9:4d:34:e2:fa:ae:72:ea:b6:05:4b:0a:98:3b:
ba:84:20:d0:7a:80:d1:64:47:47:e3:5b:c4:79:50:96:5b:dd:
af:9b:be:0d:b2:df:56:af:53:f7:a3:72:19:72:f6:8b:32:33:
79:e8:f4:52:28:b6:1a:aa:01:00:f6:f7:37:23:33:be:d1:80:
9b:a2:0b:6a:2b:63:e9:1c:9e:66:e4:0b:83:7c:a4:c7:62:b4:
45:95:72:ec:01:f6:11:55:48:8f:45:b2:e2:59:09:3d:31:96:
1f:f3:79:42:ed:32:d9:29:12:39:5d:01:21:b6:14:48:db:09:
45:d6:e8:5a:ca:40:61:f1:79:3f:e5:ec:8f:c1:79:fd:a2:92:
e5:d5:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:41 2025 by rpki-client