Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: Tt0bujabzA922R1ybPBL3r9Ovg8dEBjQsHy4RKZah5c=
Subject key identifier: C7:89:E9:5B:AC:7B:8C:51:42:A3:43:9F:EB:88:19:D0:6B:06:31:DD
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 0198793F260251392AEE58118E465AB824FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 102D
Signing time: Tue 05 Aug 2025 08:00:38 +0000
Manifest this update: Tue 05 Aug 2025 08:00:38 +0000
Manifest next update: Wed 06 Aug 2025 08:00:38 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: TzMN8JPjTc78ZxBJomyNdjY6POmpOI8Vv29xcinEWlc=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:26:02:51:39:2a:ee:58:11:8e:46:5a:b8:24:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Aug 5 08:00:38 2025 GMT
Not After : Aug 6 08:00:38 2025 GMT
Subject: CN=c789e95bac7b8c5142a3439feb8819d06b0631dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7f:0b:da:23:0f:ad:e2:4e:b3:63:bf:48:4c:
64:ca:1b:32:52:fd:a5:4a:96:1f:b6:61:c2:8f:07:
1c:71:1b:51:ee:65:43:9f:f3:e2:c7:0d:02:2c:97:
d6:d4:98:3a:e5:ae:50:5a:bb:87:12:e5:d7:72:21:
69:fa:c0:d4:5e:b1:b8:a4:63:70:89:fb:c3:f1:55:
5a:42:e5:13:92:c4:10:c7:d0:05:d7:2f:0d:74:62:
e2:a3:a0:13:f9:29:f4:a2:8d:dc:f0:fb:5e:3e:6d:
d2:73:1d:92:45:e3:51:3c:cb:06:f5:19:d6:5f:b4:
3a:c7:e8:89:c0:18:fd:80:8a:99:cc:27:85:e8:8e:
df:b9:a1:7d:ad:ba:57:82:b8:39:9e:f9:d5:03:2a:
e8:51:a1:83:5d:11:7b:dd:16:53:b3:dd:6b:bc:67:
d4:59:b0:65:54:5e:3c:9b:76:64:fd:e9:cd:24:57:
53:ae:9f:5d:9e:70:ca:bb:ac:a8:82:18:d1:83:7f:
2e:9c:68:ef:ef:d2:50:fa:09:c7:01:fe:2f:8a:31:
dc:60:15:bf:ff:86:e8:97:bf:2d:f0:2e:e5:6e:bf:
bd:b0:37:1b:88:cc:96:d2:6c:43:95:13:c3:ac:e5:
1b:e5:df:f8:e2:cb:cd:e4:3a:09:4a:04:59:01:dc:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:E9:5B:AC:7B:8C:51:42:A3:43:9F:EB:88:19:D0:6B:06:31:DD
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d2:70:cf:22:db:7d:10:0f:6d:e2:fd:63:58:8f:fb:e9:3a:
ae:a3:2a:b8:ce:0c:a0:42:34:06:5f:6b:32:4a:68:b2:4d:a6:
23:52:81:c0:d5:d4:46:24:9d:47:11:7d:da:27:60:66:c2:60:
2f:65:a5:cb:45:81:ee:cb:4f:bc:4c:9d:58:d2:37:49:6e:14:
91:b0:91:4e:7e:ee:43:e0:09:87:a7:84:32:34:6a:04:00:42:
ab:5b:1a:73:bd:4b:4c:9d:92:04:63:b2:58:e3:8b:8c:d0:03:
32:cd:2d:ca:2e:51:6e:88:0e:0d:a3:33:6c:2b:d0:71:a3:0d:
fa:f1:c9:27:0b:57:c3:18:c5:19:f6:3d:a6:9b:9b:9a:d7:cb:
51:dd:82:e4:e9:2d:c9:2a:9d:3b:1f:c4:44:9a:44:0d:1c:e4:
da:ef:fa:6f:69:f6:a3:b6:55:bd:56:74:c7:b3:4e:e6:d1:c4:
ed:8a:72:f8:d1:7b:7a:5c:bf:38:9c:17:be:b1:db:0f:fa:a6:
93:d4:e9:68:ed:b3:ec:ad:2a:ae:28:18:a1:cd:cb:a2:7c:c9:
50:3b:d5:e6:00:49:30:24:ee:b5:96:9a:2b:4f:e2:1c:c7:9c:
2f:d9:fd:cd:7d:c8:58:6c:19:6c:af:4b:63:a7:68:25:51:58:
4a:f1:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:53 2025 by rpki-client