Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: iFu27u00ej5HR4hbwOp7iaK09Mb14Tyrm2sT3iy7sis=
Subject key identifier: D1:3E:4F:AE:94:79:FC:C9:11:E9:42:97:AA:AA:ED:0A:F7:38:CB:12
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 01989600688B173A80C6C43195F4651A929A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 07B2
Signing time: Sun 10 Aug 2025 22:01:05 +0000
Manifest this update: Sun 10 Aug 2025 22:01:05 +0000
Manifest next update: Mon 11 Aug 2025 22:01:05 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: fiXUa2gE3+Wzsfv7W6qnHd+3xlxfe/548+5vi30RWPw=)
2: o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa (hash: B+fFcwV95+as9F86sHUOjXkwuPQBko5Sfhe+H4+0kBg=)
3: y2q7rrJdCufFxC9jfB5GgeeL964.roa (hash: nGcKe+UNcFVqcQrvyOzGyMq2AYMF9+votVilnKBTS/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:68:8b:17:3a:80:c6:c4:31:95:f4:65:1a:92:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Aug 10 22:01:05 2025 GMT
Not After : Aug 11 22:01:05 2025 GMT
Subject: CN=d13e4fae9479fcc911e94297aaaaed0af738cb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:1c:2a:d9:c7:00:da:03:07:f6:f0:05:ee:
2d:8a:7a:24:e5:60:4e:a7:bf:b5:0a:cb:cb:12:26:
43:a1:db:8a:e0:f6:d2:d3:7b:ec:53:76:5d:88:c0:
c4:eb:4d:f2:9d:75:08:73:90:cd:38:0c:81:d7:97:
e5:ad:b3:93:ea:f7:aa:01:1f:03:3f:02:c6:51:27:
3a:2f:2b:11:f9:6a:d4:18:54:d2:39:78:86:9d:46:
b3:44:98:59:8b:7c:64:24:c3:76:be:5c:e2:80:8f:
92:7f:98:79:e0:23:1b:c0:dc:f5:d7:6a:dc:24:1f:
df:31:65:23:00:6b:78:3b:66:4a:20:02:ee:c2:75:
2e:d6:e2:99:1d:94:a4:c5:c1:b1:cc:52:ba:07:0c:
e2:72:29:e3:58:c7:b6:a4:78:35:34:9e:ac:91:c1:
36:41:28:58:72:d6:1c:e4:71:02:e0:21:9b:c3:89:
cc:4a:3b:2a:38:ec:ce:b1:d3:7a:c5:05:0a:21:2a:
2b:71:7a:ac:1d:95:ca:c8:de:37:c0:1f:dd:23:63:
d1:d9:8b:43:5f:4b:99:b6:1e:34:f5:df:c2:a6:b5:
ed:03:1f:81:8d:bc:f7:ec:52:c5:34:59:f8:19:29:
bb:0b:3e:f5:3f:a9:12:04:44:65:27:31:4c:e4:b8:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:4F:AE:94:79:FC:C9:11:E9:42:97:AA:AA:ED:0A:F7:38:CB:12
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e4:53:01:f2:e3:98:6c:0b:da:03:fe:a3:94:29:77:24:3c:
73:6e:12:9c:bd:06:cb:c3:79:ce:87:56:5b:56:76:96:73:4f:
42:f7:62:4a:2e:7b:a6:c5:7f:ba:09:90:3f:58:93:8e:90:f9:
5f:99:cc:a2:32:c8:eb:6b:a7:ce:8f:17:e0:45:2b:30:af:ca:
dd:29:8d:c3:b8:51:af:50:71:83:f0:3b:45:00:a1:97:9d:74:
9b:4e:e1:c2:a8:67:b9:6d:51:65:49:65:34:15:da:34:3e:79:
7f:0b:2e:a9:b1:d8:2d:61:21:50:65:39:23:30:a6:09:0a:eb:
ff:a6:d9:b9:5f:4d:c3:64:20:55:97:17:43:99:37:14:3e:47:
57:6b:d4:23:da:59:c8:bc:d0:fe:82:3e:49:9c:62:da:43:df:
fc:c5:58:af:19:1f:0c:ee:fc:cd:1f:8b:44:96:4c:75:f7:0b:
82:25:41:ac:a7:5d:9f:3c:b2:e2:47:d2:14:eb:fd:e9:99:4e:
44:77:be:97:6b:2e:86:6e:11:13:a4:e2:93:bf:a8:5b:f8:56:
76:d6:8a:93:2c:46:85:84:cd:3a:1a:c6:69:b1:73:a4:21:23:
72:bf:68:be:e0:55:90:ee:83:7a:12:aa:3b:96:51:f5:49:23:
60:00:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:16 2025 by rpki-client