Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: uK812VSRLSfz+OshxY9mvxmPYKtdWcnoXldeqHSTAdU=
Subject key identifier: 69:F5:81:F5:9A:92:B0:29:F4:BE:0C:20:ED:05:20:58:B0:BB:C1:F6
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 01987298681F8A816425C72ED9B2DF56DA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 0822
Signing time: Mon 04 Aug 2025 01:00:47 +0000
Manifest this update: Mon 04 Aug 2025 01:00:47 +0000
Manifest next update: Tue 05 Aug 2025 01:00:47 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: smiSSclRat4WYAzfpVfMo3gqo6dbxr/TB+XPyal2p18=)
2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:68:1f:8a:81:64:25:c7:2e:d9:b2:df:56:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Aug 4 01:00:47 2025 GMT
Not After : Aug 5 01:00:47 2025 GMT
Subject: CN=69f581f59a92b029f4be0c20ed052058b0bbc1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0c:4f:45:ab:1a:68:88:75:d0:c0:4a:be:18:
86:79:4f:88:01:e8:d6:35:d6:c3:90:96:e1:7c:d5:
0c:ea:39:4a:70:bd:24:2b:ff:2c:4e:33:29:ab:18:
50:45:d4:95:50:54:26:c9:92:b0:3b:fe:49:79:22:
03:16:6f:45:c4:ac:ad:52:97:a8:42:75:79:5a:d1:
04:ae:8e:d8:27:5f:fc:e3:2a:03:70:16:81:b9:b7:
0a:00:19:51:88:bb:22:92:3c:ff:38:f5:98:8c:86:
e5:c0:28:b6:ce:81:0a:19:4f:82:4e:31:06:c7:83:
a7:6c:9f:c9:21:ca:0f:bf:d7:fa:46:7e:1b:99:cf:
75:7f:91:b5:06:21:a3:b3:8e:ed:19:46:0f:e0:29:
69:a9:56:d5:14:36:ca:fd:40:10:4b:06:6a:cc:67:
f4:dd:3a:84:df:f2:ce:4e:73:03:30:74:ec:ea:55:
d0:95:e0:76:90:11:29:18:2f:f7:d1:c8:53:44:83:
b5:b6:27:42:33:2a:4b:2f:09:77:36:20:e6:18:25:
34:8c:34:9f:10:41:69:5c:7e:6f:d1:73:41:1f:8b:
5c:97:38:00:29:44:30:a4:f4:96:b0:c9:46:2d:41:
28:d0:30:5e:95:a8:6f:08:9a:2b:97:99:bc:86:ee:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:81:F5:9A:92:B0:29:F4:BE:0C:20:ED:05:20:58:B0:BB:C1:F6
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c3:09:08:09:f8:d0:f0:91:9f:4a:7b:20:19:2d:bd:5e:b7:
9e:8d:c8:a8:e0:5b:47:e7:b7:24:3f:f6:89:4c:09:5e:c2:39:
99:7c:f1:84:9e:d7:7c:14:19:eb:de:99:ef:c8:7b:5e:98:b1:
25:8c:23:b1:1c:1f:40:bf:51:6e:d9:b1:4e:7d:f9:f6:36:b0:
5b:2d:77:b2:c1:2a:e2:bf:ee:93:50:d5:c3:40:19:f8:5d:1c:
ad:5c:8f:e3:46:45:68:03:da:e7:7b:93:dd:b1:33:24:2b:53:
6a:8c:e8:61:05:ac:ee:ef:86:c7:2f:1e:0a:02:d5:9a:17:65:
89:a4:ae:65:f2:8b:5b:7c:b7:43:12:07:17:e8:e1:45:5f:7b:
ba:7d:08:a0:a6:c2:f9:c6:5a:21:1b:23:9c:e6:6b:e3:71:fe:
df:b0:a6:92:9a:b7:63:73:36:fe:36:9f:6a:a6:a7:61:26:6e:
d4:0b:16:ae:38:c4:3e:a9:b0:d8:4b:41:76:af:29:44:73:8d:
fe:a7:1b:92:b6:76:82:ea:30:92:7f:b7:8a:92:e8:0e:36:1c:
43:00:7e:43:b5:51:01:a4:3d:13:e4:20:02:78:92:12:2f:71:
c3:91:dd:5f:6e:58:7a:df:2f:1b:ca:d2:71:34:79:68:bc:89:
83:53:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:04 2025 by rpki-client