Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: eXs2yeLr6tbV1EG0cngXy44XUUruPT7mtW90vSOtBrE=
Subject key identifier: 2D:D7:00:8C:6D:F7:49:1C:E8:7D:D7:EA:51:0A:83:73:AD:D0:6E:D5
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 019881D46EF185B3E5AC217410BB54407826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: DE
Signing time: Thu 07 Aug 2025 00:00:39 +0000
Manifest this update: Thu 07 Aug 2025 00:00:39 +0000
Manifest next update: Fri 08 Aug 2025 00:00:39 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: j2o4BpKyZlao5zcUxKAzIcKQ3yUZBT4jbVtubAgI0G0=)
2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:6e:f1:85:b3:e5:ac:21:74:10:bb:54:40:78:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Aug 7 00:00:39 2025 GMT
Not After : Aug 8 00:00:39 2025 GMT
Subject: CN=2dd7008c6df7491ce87dd7ea510a8373add06ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:ad:8e:74:5c:13:e8:24:39:90:40:21:c1:
59:57:ea:6c:50:aa:fb:ba:36:1d:1d:a5:96:f8:07:
90:b9:f3:dc:53:75:9c:da:cd:56:26:2a:d3:e9:3d:
8b:fd:6a:fd:9b:be:e6:5b:06:ab:7a:4b:27:6e:12:
ac:31:c4:e3:c8:c8:05:da:d4:4c:96:7a:74:b5:67:
e3:07:97:0f:f4:f5:da:3c:09:eb:0e:7d:e4:2f:1d:
b3:71:77:0e:3c:69:91:2a:4f:ee:cf:ec:0c:0c:5a:
9c:6c:64:f4:cf:15:cc:65:6f:23:fe:aa:72:80:4b:
35:f7:51:09:59:89:80:66:9c:60:aa:ca:aa:0a:c8:
f3:7e:ed:76:72:6a:52:41:54:90:40:9e:86:99:e0:
8b:2c:1d:68:50:34:3a:cb:c3:99:ab:57:52:3e:32:
a3:9c:88:24:04:20:de:3a:35:90:fb:94:d1:28:b1:
7e:4c:6d:07:93:63:73:04:64:b2:f8:b1:ae:26:76:
d1:bd:8c:b5:52:9d:f4:19:2d:4e:ea:51:f4:3d:aa:
9a:06:04:1b:d1:98:59:5c:99:50:66:5b:11:3e:6f:
4b:98:96:3a:47:b5:19:d4:ee:5f:38:2d:61:f8:91:
85:c0:ff:68:0e:f5:53:b5:c4:c7:9a:b7:ac:06:1c:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:00:8C:6D:F7:49:1C:E8:7D:D7:EA:51:0A:83:73:AD:D0:6E:D5
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d0:60:0b:69:61:c2:ca:09:49:86:03:2a:31:15:0e:2b:2b:
61:94:11:86:b8:1d:65:54:e6:14:f9:44:db:67:f8:42:19:3d:
de:40:3b:b4:35:95:6f:1d:7c:7d:71:76:5d:29:51:fd:bd:03:
d4:c6:f3:8e:a2:62:88:bb:53:ba:a8:7d:3c:2c:b1:4f:5c:0b:
d9:e4:90:60:12:5e:f0:02:64:c3:27:9c:44:43:ee:45:e1:08:
2e:81:e6:0d:c8:96:ff:1a:10:5c:e3:d3:bc:e2:f1:2a:e2:54:
b0:2c:1c:7e:02:74:87:73:46:78:15:b9:4e:32:2a:64:44:87:
c7:54:b6:ae:9f:01:28:7b:da:95:77:cb:c6:5e:fd:71:68:87:
e1:44:65:04:05:2b:ad:90:34:f4:97:3d:0d:d8:23:8b:e6:58:
5b:16:9a:cb:88:e9:75:19:e5:4c:02:2e:3d:3c:14:9f:10:69:
f7:46:21:c1:3a:56:36:24:0f:9f:a1:b8:36:54:6c:3e:4d:8b:
f7:4a:05:a2:93:44:4d:38:ca:43:5c:10:cb:32:9d:4d:48:4d:
15:d5:8b:2b:29:27:79:f3:13:25:77:4a:28:b9:34:41:5f:62:
4a:42:e5:ed:02:8c:8f:36:0d:7b:48:62:de:29:fc:41:95:1c:
3e:34:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:49 2025 by rpki-client