Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: 3xeH0aENOd/GcjIh+u3aZy3C3Y5ajKGitrwWiTbvfOk=
Subject key identifier: E5:23:00:74:D4:37:F4:07:0A:AB:88:31:1E:72:36:6F:CE:FF:4A:8F
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 019891110BC763804723877CB0D11A76134B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 1218
Signing time: Sat 09 Aug 2025 23:01:10 +0000
Manifest this update: Sat 09 Aug 2025 23:01:10 +0000
Manifest next update: Sun 10 Aug 2025 23:01:10 +0000
Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: 8K9ikH9yTZLaC05L6CPVo5dOVg/MCTUMz1w3ImIyGaY=)
2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:11:0b:c7:63:80:47:23:87:7c:b0:d1:1a:76:13:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Aug 9 23:01:10 2025 GMT
Not After : Aug 10 23:01:10 2025 GMT
Subject: CN=e5230074d437f4070aab88311e72366fceff4a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:06:6c:58:02:c8:04:69:4b:3a:9c:0e:7e:c6:
b8:75:c1:2f:f8:63:ba:a8:22:a9:94:51:3b:d5:b2:
30:1f:20:f3:21:53:fc:86:f5:1d:ac:94:0b:90:bf:
6f:16:68:7f:de:00:94:b5:da:99:b0:22:10:05:6d:
db:5f:1c:b3:49:5a:20:d5:60:84:64:17:ce:0d:db:
fd:79:b5:2f:94:1a:51:f2:b8:67:02:37:d8:a4:70:
5d:5f:f2:94:21:42:17:02:e7:83:cd:30:8d:d7:64:
63:2c:40:78:33:92:94:a5:86:25:54:5a:33:25:c2:
f7:66:b0:27:35:ce:6d:ba:ff:c4:f4:f8:73:97:84:
e1:b8:4b:a5:95:7f:12:77:1d:96:d9:a8:d1:65:ed:
73:ab:7e:ec:f7:21:11:20:b1:44:6a:4c:77:d0:0a:
81:58:b1:a4:78:ed:51:c8:ee:84:3d:52:02:4f:65:
00:94:5c:14:f8:c8:0a:a9:47:22:cf:e2:5c:48:ab:
56:26:b1:90:23:01:1f:b8:ed:ba:f7:37:41:da:b4:
49:d1:0d:32:b5:26:60:2a:fd:2d:7f:35:0a:1c:6b:
f4:f3:ee:a8:3d:c1:69:7a:64:7b:40:0e:f7:95:44:
1c:1d:51:6a:62:96:b8:48:89:04:93:92:bc:bf:d5:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:00:74:D4:37:F4:07:0A:AB:88:31:1E:72:36:6F:CE:FF:4A:8F
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6c:ba:5a:52:79:a6:28:3e:1d:9f:eb:fb:41:c7:ee:47:e2:
fa:13:d8:7a:67:a0:c3:c0:db:16:e1:df:d6:4b:99:5a:ce:91:
2b:87:06:45:ea:80:21:b8:ef:84:46:03:ac:98:c9:d5:43:d2:
63:de:81:39:cd:ca:0b:57:a9:d4:f0:8f:d3:b5:ce:d9:8d:26:
5a:04:da:81:65:88:61:83:be:fa:96:03:10:1b:50:fc:1e:cf:
ed:c3:fc:56:d3:6e:58:e3:6d:b2:8d:d6:9a:57:72:13:af:6b:
2e:a9:10:b7:5e:b3:73:6c:72:b3:e8:11:4c:32:97:35:67:cd:
32:b4:60:84:58:fe:3e:dc:fe:d9:4b:75:32:d9:05:4b:3d:01:
89:bf:06:ec:b7:9c:b9:91:fb:79:79:6a:50:78:19:27:51:7e:
60:7c:3c:d8:c6:22:00:aa:53:f2:2e:cf:5c:21:1c:fc:0f:b7:
b9:fb:6e:0e:63:e4:48:1f:fa:6c:f8:dd:5b:b0:80:cc:43:a9:
99:39:bb:93:8f:67:d6:28:6c:8e:61:2d:50:7f:4b:7d:1c:25:
6d:65:2f:97:94:a7:ba:0d:a3:92:8c:2c:45:d1:1b:6a:54:a8:
5c:5d:75:fd:4c:6e:01:12:3e:ba:11:47:a9:37:e9:17:6b:21:
ea:59:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:13 2025 by rpki-client