Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: xOkQAmn1IfscKYPKmZdPjGU7BHogXU55fz69Wgy1ULk=
Subject key identifier: 22:4C:2D:4F:DC:63:89:53:C2:73:52:D7:57:A0:35:19:18:8D:EA:59
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 01989FA88272B3ED3FE74D9B8E59D525F2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 19:01:17 +0000
Manifest this update: Tue 12 Aug 2025 19:01:17 +0000
Manifest next update: Wed 13 Aug 2025 19:01:17 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: R21++Br1d9PKB2keR2rg2ejAPQJSK2DDsZ2i6WYn7/w=)
2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:82:72:b3:ed:3f:e7:4d:9b:8e:59:d5:25:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Aug 12 19:01:17 2025 GMT
Not After : Aug 13 19:01:17 2025 GMT
Subject: CN=224c2d4fdc638953c27352d757a03519188dea59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:07:0b:f8:75:16:25:43:6e:36:98:61:4f:
8f:02:6b:ce:78:d0:d1:7a:9a:4c:b9:ee:d3:d9:61:
bc:c1:ce:01:c7:68:85:5e:53:80:ac:80:80:2a:5e:
03:52:d4:4d:ab:71:ad:08:30:0c:24:7a:dd:fe:7a:
4d:81:f6:91:77:2c:4b:9d:39:30:a1:b5:33:2b:27:
2e:d6:b8:c0:5b:ef:aa:18:00:83:2b:25:97:5f:4b:
9e:b5:87:da:7d:26:4b:fd:db:22:77:bb:fe:aa:2d:
03:15:ae:bd:e0:0f:9b:5e:6a:e0:25:d7:9d:5e:72:
7d:2e:da:5a:8a:40:53:67:80:ba:30:69:2e:72:05:
e1:24:0f:04:31:f8:f9:0e:86:98:05:b4:8b:64:2c:
d1:a5:13:cb:cb:9f:24:63:c1:32:1e:5e:ef:02:58:
3c:d8:39:3c:76:dd:de:02:91:5c:50:cc:fd:9f:2c:
bb:1b:34:36:df:de:68:83:d5:74:77:b2:75:6d:7f:
59:c2:9f:01:8a:b6:a1:e1:43:36:01:af:07:0d:fc:
18:86:0e:cc:d5:5f:19:65:b0:f3:3c:8f:0a:76:0b:
79:57:6c:60:87:6e:b0:15:54:34:8c:d0:a5:e3:c1:
4c:88:d3:7d:f0:f9:fd:1d:5d:d1:92:55:c6:1b:9d:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4C:2D:4F:DC:63:89:53:C2:73:52:D7:57:A0:35:19:18:8D:EA:59
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:06:cd:d3:a6:1c:e5:1a:54:77:2e:05:b1:1e:77:93:d3:88:
f1:50:37:9d:81:19:3c:ac:b2:3a:75:12:fe:f1:07:52:b9:3c:
ef:b0:07:28:5b:95:37:9a:00:6e:c0:ee:49:31:51:8a:3e:68:
f1:05:b6:03:2f:ef:5a:d1:f6:53:cc:41:ac:19:6a:a5:a9:e1:
85:87:a1:d4:13:82:8d:aa:e5:d6:29:01:91:e9:13:a0:e3:d4:
05:89:5d:7c:5b:75:35:97:08:cb:b1:c1:a5:a5:79:08:e0:2c:
16:50:a5:95:85:ae:df:55:06:ea:5a:e8:35:0a:cc:58:f1:70:
d5:95:4f:a6:e8:74:61:25:f9:b7:86:d5:1d:78:60:e7:01:a8:
41:df:c9:a4:90:82:db:28:94:76:f0:bb:d9:fd:87:5b:20:7f:
58:13:35:7c:f2:f4:25:07:0d:70:88:45:77:52:23:67:b8:97:
59:80:b2:95:0d:bb:bf:84:31:e7:00:b1:e1:0e:1d:0f:ba:f7:
3f:88:fe:43:b6:44:3e:ab:d9:0d:7e:89:01:70:2c:c2:35:cf:
1b:49:12:31:25:9a:43:7f:1b:c6:fa:7a:57:fb:8d:eb:f8:47:
05:a7:bb:63:41:1f:1c:7e:ea:4b:43:2a:3f:e3:60:f1:84:fb:
7e:ff:c8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:03 2025 by rpki-client