Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File: Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier: mCl39BbT3H6mDrxpSQYto0VVJXvnFTFjV/wmpHbuazM=
Subject key identifier: F8:EA:40:FB:28:2C:2B:25:44:B2:93:84:34:0C:86:6E:FA:82:BB:77
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial: 019891108158FB30A0C96ADD037A1D535A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number: 159A
Signing time: Sat 09 Aug 2025 23:00:34 +0000
Manifest this update: Sat 09 Aug 2025 23:00:34 +0000
Manifest next update: Sun 10 Aug 2025 23:00:34 +0000
Files and hashes: 1: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: BpYSWzQ92PMIsIL5hFNjXThUvQxGMTvN4iIaoktBDaI=)
2: ozTEzJ9CezdFTub-OtUArZTGCUk.roa (hash: hY/JTd/yJ1qrW6X45LIcw6pONHk7vyqJi7EpOCN1u7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:81:58:fb:30:a0:c9:6a:dd:03:7a:1d:53:5a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Validity
Not Before: Aug 9 23:00:34 2025 GMT
Not After : Aug 10 23:00:34 2025 GMT
Subject: CN=f8ea40fb282c2b2544b29384340c866efa82bb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:f2:26:43:13:ff:c5:1a:c0:2c:fe:f5:47:
30:09:85:3d:ef:4a:4d:63:b9:7c:22:3f:3d:d5:5c:
79:3b:91:3c:de:8b:a1:2c:05:02:bb:4b:6e:bb:8f:
4e:32:dd:c9:bc:c7:55:3a:94:16:10:94:89:87:d5:
e6:e3:c4:e5:8f:5b:14:00:de:91:06:bd:c2:b6:41:
92:65:d6:75:0f:a8:e1:b0:40:58:c3:4d:26:a5:f9:
47:87:10:d1:0e:8b:c5:9c:13:da:7f:f3:bf:7e:32:
6b:a1:67:a5:a8:f3:f0:f2:5c:a5:02:61:c1:ec:31:
73:97:96:d5:eb:c1:f0:11:4e:19:f2:c6:80:93:76:
0c:b2:f6:b8:5f:ee:43:98:b3:4d:d9:44:9c:1b:a3:
dd:d4:44:34:a7:8b:29:5a:81:9d:df:50:54:ee:f7:
92:47:79:8a:68:f9:b3:a4:d7:e7:5b:35:50:a9:50:
b5:f9:e2:2d:b7:9f:4c:75:65:34:43:65:10:ae:4f:
72:21:7d:3d:70:ea:e0:39:d3:97:ee:c9:8a:3a:b0:
8f:7e:96:7d:b2:5e:25:42:8c:c8:7a:88:70:91:b0:
48:e5:bf:9f:96:cb:71:c1:d0:dc:78:29:fd:93:1a:
49:8e:a5:92:d0:19:a0:ba:cf:ba:eb:63:dd:97:76:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:40:FB:28:2C:2B:25:44:B2:93:84:34:0C:86:6E:FA:82:BB:77
X509v3 Authority Key Identifier:
keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4e:06:07:69:17:b4:14:c8:b7:c1:f7:b6:5d:34:d6:c5:42:
e5:5b:c1:f8:a8:6f:05:e4:12:7a:22:e9:dc:35:4d:b8:09:51:
ef:6b:57:50:77:c1:99:70:b6:54:65:d9:b3:89:75:4d:9b:0d:
43:73:2d:48:b3:0d:7b:2a:81:d8:d3:37:51:0b:27:d9:f8:4f:
43:e5:aa:59:e7:4f:2e:3a:7c:6a:e9:32:1e:3d:01:e5:71:84:
f0:e3:dc:20:e8:17:4d:ce:85:c6:76:77:b7:3d:eb:74:ab:c0:
3c:23:09:a3:b2:5e:a0:c9:55:f3:c1:24:f8:86:40:84:b3:b1:
f1:97:af:e5:89:1d:90:88:87:d6:f5:ef:17:fd:07:f3:9a:be:
6e:2b:59:96:29:38:bd:91:27:f2:a2:26:a9:7d:09:4d:93:87:
ac:b2:e3:79:1e:ca:1c:0d:29:54:06:7b:56:80:49:55:71:b7:
0a:ef:b4:af:8c:09:91:40:be:4d:1c:6f:0b:9d:c4:7c:51:90:
f1:71:09:b7:a2:db:47:b1:01:1a:55:ec:72:eb:81:8e:db:01:
1c:f1:6e:d1:1a:07:75:0e:d0:9e:51:b4:d3:67:09:33:44:20:
fc:4b:5c:08:51:0a:3c:a7:97:ba:df:1e:d2:53:ee:68:f2:44:
1d:35:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:43 2025 by rpki-client