
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.mft (raw, json)
Hash identifier: ToqJKfZz2NYtqpVDuuB2sVVjvm6AqLibL6LWJ4Sy+20=
Subject key identifier: 94:BA:C6:C1:DB:86:6A:42:90:E0:8D:2F:CC:F3:54:B3:05:FE:18:29
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 01988F903BD73880910F4833748E1395B56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
Manifest number: 0C73
Signing time: Sat 09 Aug 2025 16:00:51 +0000
Manifest this update: Sat 09 Aug 2025 16:00:51 +0000
Manifest next update: Sun 10 Aug 2025 16:00:51 +0000
Files and hashes: 1: 8aqhbd2NihLf0OUyEXA62VLjshQ.crl (hash: L6uQwg1OAeOfQLOsYg1CgP9/yDYEKQ1fMIxaLpZ2Ijc=)
2: lU08unvCcfUmoq9nA8rwwc_EGrY.roa (hash: r4fF+/jooZGKRffBCLRbLiandhCNSPTtKJ/Y1slqur8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:3b:d7:38:80:91:0f:48:33:74:8e:13:95:b5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: Aug 9 16:00:51 2025 GMT
Not After : Aug 10 16:00:51 2025 GMT
Subject: CN=94bac6c1db866a4290e08d2fccf354b305fe1829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:ac:5e:15:f3:8f:4d:e2:7e:5b:85:ef:d7:
e6:62:38:b2:c2:2a:40:93:95:84:99:f2:f2:b3:bd:
d3:d8:f8:f6:8c:c1:7e:32:d4:5a:dc:85:64:29:c5:
3d:4d:5f:f4:5d:f7:eb:a7:71:08:e0:c3:c2:e5:ea:
7c:85:cd:44:23:69:24:ba:43:18:6f:ae:9f:e4:3b:
e4:e8:99:a4:73:91:aa:fe:7a:fc:bf:39:62:da:70:
4a:7c:cb:0e:1f:9e:d9:90:6f:ab:59:60:eb:ed:ed:
4f:ae:7b:74:ae:3a:2b:e1:a2:87:9d:94:8a:e6:de:
bb:84:64:e2:8d:1c:6e:63:8e:96:9d:89:80:d2:1d:
88:a5:42:03:e0:bd:17:46:2b:83:a4:f7:41:7d:f1:
d3:71:35:53:00:c9:ce:52:54:7d:05:d8:90:31:a0:
25:49:f8:b4:9b:02:fe:ef:ee:43:4e:12:0c:a1:ca:
4c:c5:e9:fb:b1:db:69:a8:5f:d6:ce:e0:66:d1:59:
7f:52:a2:c7:8e:f3:98:00:c1:d9:3d:9f:2c:d8:7a:
d5:86:fb:5f:1c:6d:b9:20:06:ff:a4:4c:82:b7:9f:
8c:25:ed:2a:66:f1:b2:38:a7:c9:c4:62:be:e7:29:
f0:a9:c0:ce:d9:24:94:dc:fd:62:ab:de:f7:c7:82:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:C6:C1:DB:86:6A:42:90:E0:8D:2F:CC:F3:54:B3:05:FE:18:29
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8e:e6:36:7d:ba:03:3a:2a:5b:5a:9f:31:7d:ff:56:30:92:
cf:85:df:17:ca:61:13:72:58:b1:aa:54:76:5f:d5:3e:24:c6:
be:11:ab:20:1d:ff:8a:a7:14:53:59:79:fb:24:f4:97:cb:00:
12:a7:3d:2a:59:93:b1:e0:a5:91:bd:4c:f8:e8:7a:1f:f5:0b:
4b:5d:e0:6b:6a:60:21:82:a0:cd:fb:04:b9:8b:0e:2d:8c:14:
3d:03:af:0e:1f:ed:3d:14:a7:4b:19:c9:28:05:d0:bd:41:5c:
0e:45:0a:86:36:fe:29:01:08:00:6e:35:66:ea:42:32:c4:de:
67:63:6e:bc:ac:fb:fb:29:27:89:b2:58:8f:f2:b0:8f:43:a8:
c6:2a:c0:49:92:18:66:c9:db:6a:34:e9:cd:a2:33:3b:94:c4:
32:5a:86:66:41:27:0b:01:48:69:dc:18:3f:a3:c3:99:85:3c:
44:b1:4e:49:c1:9b:d7:c5:bd:89:0e:78:ac:86:2f:8a:44:b2:
c1:f6:a8:9e:ec:88:ba:5a:b0:c5:cc:b6:15:23:e6:af:9a:c1:
cc:16:b1:c2:b5:ba:45:f7:22:bc:71:96:a1:0d:71:b8:20:7d:
cf:99:30:46:ff:c9:6e:94:05:a2:3d:52:aa:18:ca:8e:bf:18:
9d:8d:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:58 2025 by rpki-client