Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier: gjUwAxzq7vjvLQAj3U0eQEDnlQx0a3jztJX7K9ym9Es=
Subject key identifier: AE:F4:6B:23:C4:F1:68:44:3C:F1:88:9B:98:02:D0:33:EB:86:C0:B8
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 01988A331D3EA646EEF5C304C1354B6FE368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number: 13D6
Signing time: Fri 08 Aug 2025 15:01:02 +0000
Manifest this update: Fri 08 Aug 2025 15:01:02 +0000
Manifest next update: Sat 09 Aug 2025 15:01:02 +0000
Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: is0igTt/r32mrL1IPJ2GgZuAGgtqzisihL+JZud2Qcw=)
2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:1d:3e:a6:46:ee:f5:c3:04:c1:35:4b:6f:e3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: Aug 8 15:01:02 2025 GMT
Not After : Aug 9 15:01:02 2025 GMT
Subject: CN=aef46b23c4f168443cf1889b9802d033eb86c0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:f7:15:b6:29:79:7d:4f:98:06:8e:30:e2:
9e:52:fd:4d:94:15:49:b1:53:cb:96:47:f5:fb:de:
78:90:f6:f2:0f:0e:ba:32:59:93:19:be:44:5e:9b:
7a:7c:31:ad:79:62:68:5b:84:9c:b8:3c:37:3b:6b:
ee:44:82:74:6e:ff:3e:61:77:a5:a6:de:32:e4:71:
fb:25:7f:b5:12:70:fe:59:51:7f:9d:c5:50:fa:d5:
31:81:e4:0f:7f:3e:fe:07:9f:f5:7a:53:dd:4b:98:
57:41:2c:f1:68:7b:ac:b9:bc:8e:30:a9:34:1d:e6:
8b:87:67:62:9e:22:19:8b:52:06:6c:c6:d1:8a:fb:
d8:88:7e:31:dc:41:a6:f6:31:01:25:13:77:c4:1d:
24:7a:9b:79:e3:b2:19:cd:29:cf:c5:11:59:26:5f:
3f:40:75:d6:47:7b:a8:f4:63:d8:c3:bd:b8:f7:98:
ae:27:cb:22:1e:48:53:87:94:95:62:ac:79:f7:17:
8b:9e:d8:1e:81:85:fd:c8:c7:74:d5:ce:d2:63:ff:
8b:98:0f:d4:f4:6c:40:b0:54:72:c9:f3:ac:ac:2f:
fa:17:c4:cd:1a:fb:60:9c:3c:96:4f:6c:d6:76:55:
db:27:0e:7c:0c:1a:c8:e7:85:c4:b9:f7:85:c3:4d:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:6B:23:C4:F1:68:44:3C:F1:88:9B:98:02:D0:33:EB:86:C0:B8
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:72:31:79:48:ed:f8:07:64:67:28:d7:26:8f:70:6a:31:10:
93:2f:53:3e:5d:6d:da:a2:b8:46:e9:48:72:e2:cb:1f:4a:2c:
e0:d9:59:cb:7c:19:f6:31:c8:38:c3:01:5b:d1:21:37:5a:69:
7e:44:12:3b:78:7b:cf:1c:7a:d7:cd:0d:35:00:5a:cb:c1:24:
96:c5:bb:32:9a:0a:f8:ef:3f:0c:c7:7b:b0:9a:84:28:7f:02:
12:75:5f:b5:e9:3c:de:c1:50:03:f7:13:8f:13:2d:97:fe:76:
e6:e1:74:63:58:14:d4:31:c7:7c:f1:7d:65:67:52:df:c4:34:
f4:29:5f:9b:e4:58:77:3b:19:6c:cc:06:f8:71:3a:0f:f5:df:
e0:5d:7b:f3:e8:d5:c8:d9:4f:84:8a:c1:a2:3d:61:9c:09:32:
d8:ac:3e:a8:19:96:e7:86:57:1b:38:9a:74:57:00:98:2f:0f:
5f:3e:37:47:59:9c:47:91:b3:65:78:79:6f:30:9f:9f:17:df:
36:1c:c9:2d:09:c6:88:b0:79:20:96:7d:75:e3:f4:71:12:83:
86:5c:68:74:20:c7:96:35:74:80:39:b4:c0:2a:40:ad:8b:55:
56:1e:c6:d0:57:ad:5b:42:1e:42:99:e7:73:d6:bd:5e:8d:89:
96:7a:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:13 2025 by rpki-client