Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File: 8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier: KdXRTjiL1V/C1xqqTbatmt+0lBAnA0S+8jmUGcR28Dw=
Subject key identifier: 38:FA:38:5A:29:53:EA:B0:DF:28:BB:AD:7E:11:4A:F9:12:C1:5A:17
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer: /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial: 01987B9C708B2EE83C2E8E8DB451292E3986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number: 0CA7
Signing time: Tue 05 Aug 2025 19:01:46 +0000
Manifest this update: Tue 05 Aug 2025 19:01:46 +0000
Manifest next update: Wed 06 Aug 2025 19:01:46 +0000
Files and hashes: 1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: XbJ0U3y4+0jNpXDQ/PFtmYzTrKfHwckDPKFtnAITmac=)
2: Nh4smUq7Nayhm_h4hcJhFSXbd98.roa (hash: 0tOyxit0JfWpS02swEQXMIpCvZrxbPbACrr2wxwWLsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:70:8b:2e:e8:3c:2e:8e:8d:b4:51:29:2e:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Validity
Not Before: Aug 5 19:01:46 2025 GMT
Not After : Aug 6 19:01:46 2025 GMT
Subject: CN=38fa385a2953eab0df28bbad7e114af912c15a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:59:11:21:ea:9b:92:91:e2:54:22:7d:3b:
2d:59:f1:bf:9d:68:68:0f:9c:95:aa:ed:df:5f:63:
c9:98:da:8b:62:ed:06:1e:bb:e5:5d:00:90:95:c3:
e0:5e:a6:39:32:14:9b:56:c8:a2:8c:71:59:08:77:
67:65:88:3d:fe:01:3e:8e:2a:8b:85:e4:0e:18:37:
c0:b2:b0:74:f8:a8:6b:26:5e:24:46:12:fe:d7:1e:
5d:f1:50:61:e3:8d:84:19:95:74:0e:80:46:2b:1e:
20:fe:44:62:8c:cb:40:f5:73:d8:6b:7d:67:cc:b1:
0c:01:47:6e:12:8d:2d:6e:11:d8:59:4b:1a:4d:05:
2b:a9:aa:b5:c9:c5:0d:ca:52:90:39:bc:90:08:cb:
47:01:51:75:00:d4:6a:9e:67:a8:14:0b:45:85:78:
93:52:db:b6:e9:44:3c:95:a7:56:ed:95:78:cf:9e:
23:e9:bc:cd:51:8f:e4:4f:13:d2:11:89:5b:b4:ca:
2e:3e:c2:55:82:6f:93:03:25:f4:8b:4c:92:6d:95:
1e:50:df:b9:d9:5b:49:cc:c6:dc:ac:f4:6e:6a:e7:
4f:9b:eb:8a:85:fa:f2:c3:65:74:44:d8:90:c9:59:
35:a0:d4:81:fe:f1:e6:dc:1b:71:c8:b0:fc:33:f2:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:38:5A:29:53:EA:B0:DF:28:BB:AD:7E:11:4A:F9:12:C1:5A:17
X509v3 Authority Key Identifier:
keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:de:51:65:70:b8:25:7e:4d:0f:65:b8:57:8e:ce:f8:7c:f9:
ae:a4:d3:06:19:23:60:21:12:df:68:e3:6d:92:7f:3a:aa:29:
27:ef:23:44:83:64:47:4b:9c:b0:08:58:5f:ec:33:d9:a4:0d:
4b:e0:6b:6c:e0:0c:d2:f4:5f:35:10:ef:58:de:69:45:26:d0:
ed:80:6b:9e:a2:e3:4b:9b:6d:25:f8:06:99:e1:a7:88:4b:6e:
dd:a0:7f:35:a0:75:a6:ec:72:a0:8d:05:34:1b:ec:16:fb:83:
ab:2f:8d:9d:7e:4e:a3:cc:96:f1:c3:c1:a0:39:6c:7d:9a:a5:
f2:0a:3c:25:a1:ca:13:af:b9:91:22:98:91:92:69:28:3e:b0:
ae:1b:99:6f:32:30:6a:8e:04:66:76:3d:45:a9:a4:50:83:3e:
b6:98:77:ab:df:58:54:b6:cd:d8:37:9d:9b:80:89:3c:0c:51:
14:56:38:7f:cf:04:c2:f5:77:15:9b:d8:c9:b6:db:70:4d:45:
3f:a9:87:68:ed:f3:25:90:be:58:7d:88:2f:ff:98:10:2b:71:
0a:06:74:fd:91:00:87:ce:83:78:78:00:cc:57:db:54:8b:c2:
6f:65:8c:d2:01:0d:92:8b:16:53:54:a8:85:d7:80:cb:31:17:
c7:f5:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:35 2025 by rpki-client