Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: gb2wZFyGKtBXyqMx/Fg4fMVcN3eUbhrF0JYi7afU8PE=
Subject key identifier: B7:3D:58:61:76:78:94:B6:72:3C:81:C2:FE:04:74:2B:D9:52:3E:47
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019890D9B5A67DA442B47D98DAA039080AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0C2B
Signing time: Sat 09 Aug 2025 22:00:43 +0000
Manifest this update: Sat 09 Aug 2025 22:00:43 +0000
Manifest next update: Sun 10 Aug 2025 22:00:43 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: c8wMviKsiu0k1PSIhrG5s/ehIUv0Rb6+XjYlDkItqTk=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:b5:a6:7d:a4:42:b4:7d:98:da:a0:39:08:0a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Aug 9 22:00:43 2025 GMT
Not After : Aug 10 22:00:43 2025 GMT
Subject: CN=b73d5861767894b6723c81c2fe04742bd9523e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:13:46:45:e1:c5:76:9b:59:70:4a:42:ac:
92:63:1c:8f:ef:08:d7:13:8d:a2:97:45:e7:b6:39:
6a:e3:b6:91:c1:a5:cb:1f:05:a6:14:a7:04:b9:90:
cb:10:c0:9c:a3:75:03:4b:72:6d:7d:4f:e2:80:49:
d6:4b:bb:e2:33:f4:20:f8:81:8e:de:e9:3f:a1:fb:
d9:6e:cc:53:5a:e2:8a:2e:f2:c6:60:31:02:b9:49:
20:7e:ec:e7:b3:5e:0b:16:a3:a5:a8:6f:0c:15:90:
06:1b:c9:8d:6b:06:2f:a7:82:4e:86:12:77:66:f7:
47:11:56:e5:bf:a7:b7:a1:78:52:82:c4:46:44:4e:
64:72:f6:3c:9d:5c:b4:55:04:7f:ae:3d:a5:ec:2f:
30:5e:80:05:a8:01:39:a3:6f:5c:97:d2:26:19:e5:
76:62:70:22:6d:57:c0:1d:63:fd:74:09:23:c5:52:
78:bb:dd:95:af:df:0a:a6:17:3f:73:53:cc:b1:10:
c3:b8:1b:71:8c:5a:0d:33:7b:32:46:36:93:fd:c1:
a2:83:f4:e1:90:3b:fe:19:f3:27:69:87:67:f6:71:
6e:67:56:6a:76:f1:e8:d9:f4:7a:89:a0:9f:ba:2b:
83:68:1e:b0:00:7c:fc:86:f2:49:64:8a:9d:d0:43:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3D:58:61:76:78:94:B6:72:3C:81:C2:FE:04:74:2B:D9:52:3E:47
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:08:75:44:ac:15:5c:c1:b8:c2:6c:46:7f:e9:dd:3a:c1:
6d:2a:f5:c9:74:fa:8b:5c:4f:ef:78:77:a4:29:ce:1f:61:59:
bf:44:54:25:5d:98:4e:6f:cb:a2:66:dd:87:a5:7b:90:af:e1:
02:07:a1:dc:e0:89:98:13:77:e9:bb:eb:9a:d5:e2:aa:d4:c5:
82:09:93:c2:60:17:b5:6d:3b:ce:49:fa:d0:36:0c:6c:7b:41:
46:c5:0f:33:70:00:7d:a1:aa:fc:75:d8:98:45:d0:14:00:40:
fc:53:22:b2:28:24:b7:40:d8:14:ef:93:58:36:d2:79:d3:58:
0d:19:00:84:fa:15:41:7a:b2:5f:35:f3:70:7e:ad:27:b4:cc:
b2:89:a5:44:49:ef:f6:59:ff:57:d8:1a:ed:11:79:f0:97:5b:
b6:96:ab:f3:29:2c:29:b5:29:f7:4b:80:1b:ec:0c:3e:60:88:
97:e7:cb:89:42:0b:2d:df:73:7b:96:74:c2:21:81:ac:61:87:
8c:91:88:bb:17:27:b7:87:39:60:ed:92:00:ff:85:8e:55:7b:
12:72:52:d0:09:57:d9:a2:5f:c5:7d:86:a4:a6:94:17:fe:2f:
fe:1a:62:bf:7e:50:28:8c:c2:82:76:c2:56:c6:53:86:94:3d:
4e:54:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:52:41 2025 by rpki-client