Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: da4BFyWPsEVRs/2pnLHKZo9RYWdW0YYVrxfndv9dUWI=
Subject key identifier: 46:78:E3:F6:28:66:9B:E5:D0:1D:1F:7F:28:F9:18:7E:98:97:2A:03
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 0198D583D559C3176F5417379742FAA7A60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 154E
Signing time: Sat 23 Aug 2025 06:00:43 +0000
Manifest this update: Sat 23 Aug 2025 06:00:43 +0000
Manifest next update: Sun 24 Aug 2025 06:00:43 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: XYmoLqX7Zg5o+jI4wjvvL/Q6zy01BHNuQhUGwaMaiaw=)
2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=)
3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d5:59:c3:17:6f:54:17:37:97:42:fa:a7:a6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Aug 23 06:00:43 2025 GMT
Not After : Aug 24 06:00:43 2025 GMT
Subject: CN=4678e3f628669be5d01d1f7f28f9187e98972a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:3c:a0:0d:28:d3:f3:87:c1:ce:25:c2:47:
3a:2c:1f:05:fc:69:0c:b0:52:42:e2:a9:01:df:ad:
aa:2c:7d:0a:aa:49:28:51:31:48:0e:56:d7:f3:b4:
92:fe:d9:44:0e:49:34:92:a8:97:96:b2:94:04:15:
bf:a5:b6:b8:48:45:53:4e:2d:d4:71:2e:74:2b:ba:
db:16:83:af:ff:69:4d:ca:2c:81:54:4d:ae:4b:0b:
a8:28:22:4f:54:de:f8:ed:99:7c:33:86:6a:12:3e:
e2:52:8b:ce:b3:d1:b5:6f:23:f4:3f:d3:13:cb:75:
c5:c9:dc:10:db:39:a3:21:e3:37:f6:7e:58:b2:16:
89:8d:f0:be:bd:23:53:f6:7a:26:07:70:15:e4:66:
9d:5d:7e:1a:db:ac:35:02:8e:7c:7c:59:8c:6f:ae:
dd:e3:d3:b3:b8:de:7a:38:82:89:a7:bc:b9:aa:05:
9f:ca:72:d2:9e:96:b4:a9:7b:2c:37:ad:11:be:56:
3a:88:16:62:8b:3c:6f:ff:81:99:ca:4b:bd:8f:15:
44:ea:f2:a1:b2:12:fc:f5:7d:44:0e:58:3f:f6:ae:
16:8e:ac:19:47:97:e7:b7:6c:7c:de:84:99:ed:82:
2e:fe:88:ac:5c:12:78:c1:7a:d7:f4:ab:7c:f3:2a:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:78:E3:F6:28:66:9B:E5:D0:1D:1F:7F:28:F9:18:7E:98:97:2A:03
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9f:e1:54:76:e8:62:27:46:eb:eb:3e:61:8f:3e:ff:a6:e1:
6a:25:82:52:6a:c1:9e:8f:53:9c:da:e9:a4:35:8d:d7:3c:44:
b6:c6:b1:9b:f9:3a:7b:97:b1:04:dd:c8:84:2f:a8:89:c2:f0:
96:74:6e:86:83:32:f5:d4:3a:6f:6f:e2:44:a1:0d:c2:d5:ca:
de:99:c4:25:67:3f:21:fb:b6:5f:f8:ce:75:8a:b9:3e:54:bc:
f0:a9:4b:7e:bc:34:3b:b3:81:94:73:0a:a1:e1:7b:84:e4:28:
96:5d:e8:53:f0:69:f8:39:79:74:5c:91:ff:7f:31:30:05:e9:
10:6a:a5:33:b1:e9:96:5d:c1:94:1f:ca:48:1a:b8:11:1f:62:
bb:30:77:ea:2e:df:5a:d6:8b:67:6c:eb:4b:d3:91:47:27:6c:
4b:cd:ee:77:c5:7d:59:1e:41:ed:bb:79:2f:c5:72:18:c4:24:
30:30:75:3b:d9:fb:c9:f9:b3:bd:82:ec:4e:49:d6:b9:15:d3:
35:93:99:d2:1d:62:54:50:9a:48:4a:d9:b2:77:47:fc:a0:28:
8e:b4:6a:74:df:c4:2c:d6:a1:e8:a6:76:d3:c9:26:52:da:a3:
e2:0b:99:c9:1d:82:98:fb:d8:92:53:14:4e:ba:34:8e:f2:8f:
9b:05:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:40 2025 by rpki-client