Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: YsQGH4XlcDbdYKfMmAZK0BO+S7dm2GKo79i0DL1ay3g=
Subject key identifier: 2C:F0:54:B3:5A:87:D2:CD:F3:D8:94:8F:74:8F:C8:45:DB:27:2E:53
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 01988D6B22C57F29586FB34BB49C60505811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 06:01:05 +0000
Manifest this update: Sat 09 Aug 2025 06:01:05 +0000
Manifest next update: Sun 10 Aug 2025 06:01:05 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: FSVj9f2k+iNtfIurBET1gGw5G298J5xvn7743FtKzW0=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:22:c5:7f:29:58:6f:b3:4b:b4:9c:60:50:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Aug 9 06:01:05 2025 GMT
Not After : Aug 10 06:01:05 2025 GMT
Subject: CN=2cf054b35a87d2cdf3d8948f748fc845db272e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:8b:f9:c1:db:23:17:8d:c8:6d:19:99:fc:
f9:5f:7d:9d:1d:73:99:10:32:0e:49:17:9c:86:60:
4e:f6:3d:74:a3:3d:49:83:22:21:73:42:12:17:1d:
17:13:3a:ba:ba:7b:bf:b9:72:cb:78:1b:6e:25:f0:
a5:a3:ec:1a:a5:3c:ef:a3:ae:a3:be:3e:4b:0d:54:
5d:fd:25:fc:35:83:93:28:02:c6:ee:e5:6d:44:d6:
94:f5:82:0d:38:97:f9:6f:dc:0c:25:a5:71:ad:6f:
73:c0:59:eb:44:96:3f:5c:f5:5f:fb:1a:f7:67:57:
e9:9f:ae:f3:ab:3b:77:a7:28:d7:0d:8d:78:67:9b:
45:e0:6a:ce:e8:dc:17:3c:12:be:f6:21:c1:f1:c9:
e5:a7:30:a0:46:e9:26:ec:cb:78:c8:9e:5d:90:44:
f9:a9:28:ce:05:c7:48:30:4c:78:7e:68:78:26:6b:
69:2c:f8:89:b3:59:85:76:0a:fe:ae:81:21:cb:bb:
23:55:03:fc:ef:13:81:dd:e3:64:ec:7b:e0:fc:d5:
62:d1:fc:65:5f:7b:42:47:cf:5e:f1:f9:ee:6a:7f:
b4:d7:bc:8e:6a:87:e4:e8:f6:e4:d5:36:56:c4:00:
50:51:fa:af:69:a2:32:59:39:40:5e:65:db:80:47:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:54:B3:5A:87:D2:CD:F3:D8:94:8F:74:8F:C8:45:DB:27:2E:53
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:51:2a:c9:df:2d:b9:7c:d6:30:ae:ce:cc:8b:f9:71:c9:
8e:f9:32:d3:23:93:62:64:37:dc:67:d0:04:16:36:3c:56:b2:
2f:75:fd:5e:36:de:86:3c:2f:7e:ff:80:16:40:f0:ab:3c:74:
ed:95:a0:2c:de:e6:e9:cf:54:70:95:02:d8:f9:7c:d7:9f:e4:
50:5a:34:47:e3:4e:14:c8:b7:93:f6:a9:53:fb:7f:f7:a3:d7:
df:9c:f6:b1:71:d6:a5:cc:f8:b4:0d:e2:b4:e0:27:10:50:f5:
7e:e8:8c:44:38:de:b0:50:b9:08:26:e6:ae:50:27:f4:6a:02:
56:de:3d:3d:e7:85:66:d0:55:65:44:ef:dc:ee:21:5c:63:5f:
6a:74:e7:32:6b:9e:b1:5a:0b:9e:84:b1:94:ec:7c:f6:62:1f:
38:c7:77:bc:3e:55:ac:ee:05:72:57:a4:45:34:77:67:df:18:
7d:ad:52:d1:42:f7:71:6a:35:f1:84:0c:24:dc:7f:ae:f6:08:
27:22:d6:38:a2:1c:f1:be:cd:7f:be:b9:0f:38:ad:15:e2:30:
61:de:a4:86:8b:cc:31:9e:d6:f9:1b:08:7f:f8:bd:22:98:d8:
f7:7c:5e:6e:03:5d:b0:2d:af:47:28:30:4c:f2:88:f5:67:1c:
4c:c3:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:26 2025 by rpki-client