Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: xtr3c0dSnsBzARIcaKMNZnc49OvIG7wgSEzUGxxPVUc=
Subject key identifier: 12:D1:C2:FA:31:68:04:32:CB:CA:F4:1C:D5:85:72:32:52:1B:AB:C3
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019881D5730A29E52BE4143610C0BBF5F74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0D14
Signing time: Thu 07 Aug 2025 00:01:46 +0000
Manifest this update: Thu 07 Aug 2025 00:01:46 +0000
Manifest next update: Fri 08 Aug 2025 00:01:46 +0000
Files and hashes: 1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: RDTkcFWcZT03vpouMSZerRbrgIQgoPeauGpqzqMmcjg=)
2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:73:0a:29:e5:2b:e4:14:36:10:c0:bb:f5:f7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Aug 7 00:01:46 2025 GMT
Not After : Aug 8 00:01:46 2025 GMT
Subject: CN=12d1c2fa31680432cbcaf41cd5857232521babc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:1e:19:7d:18:21:01:8d:45:43:fb:76:c3:
07:fb:ef:43:0d:37:94:2c:a0:a9:ac:01:c7:24:4d:
7f:0c:e8:c5:18:f5:a8:05:9c:55:d1:fc:d5:1f:2c:
e2:97:cb:be:97:58:7f:74:cf:c4:cb:74:02:f4:fa:
a1:e5:01:f1:fa:fa:21:17:3f:22:09:13:c5:07:14:
b9:28:bb:25:7e:ad:1c:ab:b3:a3:fa:e7:7f:75:7c:
c7:c2:d5:57:3e:b5:49:87:22:18:07:e3:7e:8a:7f:
25:96:4a:ad:2a:64:ec:1e:66:e9:d6:47:a4:46:f2:
8a:9a:5b:fa:e9:4a:22:81:59:f1:de:48:bb:a6:3c:
ab:43:1f:45:77:e2:f1:59:e5:70:c3:4b:c8:fb:5f:
a1:f4:8f:9e:58:35:af:e3:79:ea:a2:3a:b4:a2:e2:
be:1a:04:a8:a4:f4:34:f4:ed:60:49:fc:23:55:22:
6b:30:90:84:40:da:8a:57:c6:01:ae:1e:2e:c5:95:
f9:08:d7:c2:f1:10:5f:6b:ef:a0:43:36:31:fc:b9:
2f:72:18:44:43:1e:18:8c:a6:68:1e:8a:d6:ff:bf:
12:ad:50:c9:49:48:0a:48:1c:d4:6d:d6:7a:64:ec:
f5:ac:a8:b6:95:a3:33:5a:ec:d5:b5:8b:68:74:bd:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:C2:FA:31:68:04:32:CB:CA:F4:1C:D5:85:72:32:52:1B:AB:C3
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:11:af:12:77:18:b0:6c:3e:17:57:d4:e7:fe:0d:94:c3:
db:2a:00:69:91:65:f5:a6:f9:1e:73:90:6f:fb:7d:07:1e:24:
7c:89:39:3c:67:45:ad:7d:51:92:6f:1c:be:20:4a:74:61:51:
fd:dc:6c:bb:7f:9c:db:48:cb:75:fe:03:40:d9:13:ba:bf:1b:
a6:45:fa:db:b5:0a:2e:4e:89:d6:b2:66:07:2b:a5:1b:e3:ca:
29:4e:68:79:ff:6e:75:9c:e9:b6:36:cd:12:1f:cd:d8:8b:a2:
fe:bc:e1:57:65:8f:c8:47:0a:a3:b2:03:d1:6f:5d:56:12:b2:
69:38:eb:62:7d:fb:4d:90:c5:20:20:18:23:f6:2e:58:e9:b8:
65:ac:51:2d:63:a0:4c:d8:f7:30:c5:bc:2e:e9:8c:ad:ff:a8:
84:36:8a:7a:7f:10:b7:03:41:d4:3f:45:dd:04:33:f7:ae:93:
3e:a7:fd:dc:82:a8:66:8f:45:f7:af:0a:11:57:2d:04:a9:06:
bc:95:f4:18:41:54:a6:a8:7d:6c:33:e3:69:a2:b2:a9:cc:27:
2e:ed:0b:68:fa:07:0e:3a:52:b0:92:8c:0d:d2:c9:8d:14:3c:
45:3f:a0:a5:f3:49:d0:e9:5b:ae:70:5f:4b:e1:ea:3f:3c:47:
0d:2d:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:17 2025 by rpki-client