Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier: KGDDJYEgk151O2iEFrW5g5U1Cs+LBkHWvuQqGVq8LXo=
Subject key identifier: 68:6B:13:9A:25:F1:07:9E:6B:07:E9:90:AB:50:65:1E:E9:35:B1:A8
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 01988B0E7665DB489731E91C4533411E5E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number: 0481
Signing time: Fri 08 Aug 2025 19:00:37 +0000
Manifest this update: Fri 08 Aug 2025 19:00:37 +0000
Manifest next update: Sat 09 Aug 2025 19:00:37 +0000
Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: WPrpfl2cCN/tkS32RZNMSRBSCh7ZpYHgxKQwlL7hqRc=)
2: v9SdGCEbNFlSuDgWgo1kf6nL3As.roa (hash: qiXG0Rmw4yiW0AhRjg9/OTIgPd0soD+OwXQ8XH+CjYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:76:65:db:48:97:31:e9:1c:45:33:41:1e:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: Aug 8 19:00:37 2025 GMT
Not After : Aug 9 19:00:37 2025 GMT
Subject: CN=686b139a25f1079e6b07e990ab50651ee935b1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:35:7e:9c:6f:25:29:8a:0c:a9:99:19:4b:
ef:88:b9:69:d5:25:2b:a1:d3:35:c6:3c:67:a8:8b:
7f:57:e3:12:24:99:40:89:ca:3b:0d:7c:73:29:2d:
e1:96:de:4a:f8:85:15:b4:5a:2e:29:a4:7f:e2:18:
5e:33:07:d4:26:ab:5c:51:6b:53:0d:3f:95:d9:b9:
11:72:a0:53:da:5f:00:8a:ca:fa:b3:52:0d:da:41:
68:93:ba:59:09:7c:3a:4e:d8:2b:a7:94:c5:26:3f:
59:24:51:6f:2d:f2:ad:df:b3:04:31:8f:ad:c9:e7:
6f:de:01:09:84:2a:86:33:d9:28:57:63:cf:16:63:
f1:eb:57:3e:a5:fc:2d:f8:01:90:2e:3f:f6:ca:93:
e2:b5:01:d5:54:50:7e:60:6f:24:bf:3e:19:96:08:
19:a8:30:88:c3:fe:9e:e4:f3:9a:81:b7:07:31:e8:
e3:2d:f4:ba:56:a3:ba:3c:14:12:28:33:00:ed:ea:
ea:2a:97:2d:ad:d6:6b:3d:ae:30:ff:8e:7d:1d:29:
df:21:6c:4c:7c:49:2d:c6:a8:69:f3:c2:a6:10:8d:
8b:d5:aa:bd:34:95:61:25:ef:0c:44:e6:31:d2:e0:
37:ab:3f:e3:c1:a8:c2:0a:57:55:6f:97:60:34:3b:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:13:9A:25:F1:07:9E:6B:07:E9:90:AB:50:65:1E:E9:35:B1:A8
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2c:20:f0:87:f8:31:71:37:ed:10:65:a9:a2:c7:ec:f2:13:
3a:39:5a:f3:9c:e4:90:73:96:22:09:14:cd:54:17:79:9c:79:
e7:f9:88:8a:d8:50:58:01:6c:1b:c0:d1:4e:2c:8d:89:60:c7:
57:81:7d:58:21:ab:63:ff:07:ec:f4:e7:d0:22:ba:b8:85:8b:
1e:bb:87:9e:65:18:7d:5a:2a:62:72:ed:7a:6c:5c:22:47:c5:
1b:84:99:f9:3c:8a:bb:51:50:ce:23:2d:28:9b:f1:ea:91:35:
9c:33:91:2f:4d:ca:5f:1b:bd:15:e1:29:0e:32:b4:02:81:99:
68:d8:5d:fc:91:71:81:cb:78:a7:b0:ac:02:86:e7:3d:3f:84:
81:f8:66:75:57:ac:dc:49:4c:fb:f0:3a:a6:29:34:07:d9:55:
23:48:de:b2:19:a3:86:e0:64:b4:45:73:e3:39:36:c5:c5:93:
ed:8c:c7:ce:7f:f0:76:9f:fb:b2:ca:49:c6:e9:8b:94:6f:b4:
bb:33:1c:ab:36:70:ac:e4:55:62:95:94:97:81:1e:18:fd:11:
b8:87:15:c3:75:22:e1:cd:2e:57:e8:da:57:83:1a:37:ba:7e:
7b:c7:18:22:74:00:7c:27:df:2c:b5:21:98:d3:02:fe:eb:e5:
70:29:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:00:56 2025 by rpki-client