Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: 4rwx1tkOI1B4R7LFoLylOa7Sm/zyBZT8s3KPDaZWhz0=
Subject key identifier: 3F:40:6F:57:9A:BC:87:76:7A:6F:9A:06:5A:4F:6B:91:F7:96:8F:1C
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 01989825BDFFD63D4DB0266D556FF9B8081C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 103A
Signing time: Mon 11 Aug 2025 08:01:06 +0000
Manifest this update: Mon 11 Aug 2025 08:01:06 +0000
Manifest next update: Tue 12 Aug 2025 08:01:06 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: fw6NqU+OysJX2RC4thZG4WpajWyvG6Bh5oRfqMk7XvQ=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:bd:ff:d6:3d:4d:b0:26:6d:55:6f:f9:b8:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Aug 11 08:01:06 2025 GMT
Not After : Aug 12 08:01:06 2025 GMT
Subject: CN=3f406f579abc87767a6f9a065a4f6b91f7968f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:24:19:f4:20:be:60:9c:69:85:a3:e8:2f:
47:25:5f:5a:c4:5b:82:9c:e3:1c:96:b8:6a:dd:02:
0d:a1:de:85:54:9b:f2:34:1a:83:45:e0:f2:82:d3:
cd:9f:bd:23:13:a0:d9:3a:9f:28:7b:52:7b:65:6b:
b8:18:8b:35:54:25:26:21:5d:5e:c2:dd:cf:84:32:
2f:94:ea:a7:15:41:11:1b:66:9d:3f:4e:25:7c:2e:
61:0b:28:29:53:44:08:df:92:c2:ad:7a:ad:34:ce:
b8:83:c8:db:91:fa:c0:e7:80:32:7a:34:5e:ad:69:
46:fe:7c:2a:53:c2:02:1e:89:e6:68:6a:a5:63:2f:
27:fe:e3:69:b1:92:54:b5:d3:0d:6c:67:25:50:54:
c4:c6:b1:db:2d:87:36:7b:ad:d4:4a:4c:4a:4b:96:
92:d3:50:49:1d:07:91:90:90:74:5e:dc:68:82:3a:
52:df:7b:12:69:5a:c3:d1:29:0b:f8:86:8e:9b:1f:
73:7f:36:0c:11:5e:6c:21:85:95:95:83:69:2d:e0:
76:74:d5:77:86:67:8b:0b:1b:46:d8:a0:7d:6e:05:
34:b9:e8:b5:43:4b:41:c1:69:1c:bc:83:71:a1:c8:
c0:d3:27:11:45:b4:55:ed:b4:ff:34:a9:02:24:c7:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:40:6F:57:9A:BC:87:76:7A:6F:9A:06:5A:4F:6B:91:F7:96:8F:1C
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:21:63:20:57:21:1a:9d:2c:f3:04:a1:17:18:2b:83:36:65:
c8:32:ac:27:26:34:90:b3:eb:d4:81:b3:60:39:0c:60:83:92:
30:b1:6e:0e:2d:94:dd:83:4a:13:e7:3e:0f:22:6b:ee:bf:a8:
70:2c:33:44:4f:0d:7c:40:b6:0a:33:72:7e:3d:f6:77:be:8d:
8c:f3:fa:d1:87:ed:7b:54:71:60:53:44:e6:64:8d:75:7f:f8:
9a:f7:fd:41:0d:da:99:13:02:a3:0d:b0:3b:2b:cf:e0:ef:a4:
b3:fc:2c:6b:db:15:92:ba:4c:f1:10:6d:f1:d2:e7:42:4e:9b:
4e:82:35:7a:c0:9f:61:c1:b6:5f:93:b2:05:32:ef:4a:b9:cc:
60:a9:c6:86:c7:a3:ea:1e:e2:d5:20:88:ef:26:70:0b:d8:ee:
09:04:ed:5b:67:82:ce:83:49:2f:ab:5a:56:da:a1:90:3f:1a:
30:6d:a9:5d:1a:06:3d:2b:7c:f7:96:04:51:eb:e6:e3:bc:5e:
c8:fc:fb:75:f6:8d:f6:2d:55:1c:2e:ad:8f:58:86:26:aa:20:
9d:10:7f:84:bd:b9:ef:af:1d:24:17:a5:62:3a:ee:ce:8e:b6:
2c:31:00:79:05:fa:41:2b:15:7d:8c:15:40:81:43:a7:0e:a5:
ef:95:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 11:56:04 2025 by rpki-client