Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: 7eMsEC0o07ja7uP5xjeLx1EqWhJ44p4LhVDtOWoohTo=
Subject key identifier: 0A:12:BB:D1:D2:31:2E:C6:B8:44:EE:94:AA:0B:B0:A9:7A:6C:64:B3
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 0198819DDA4119A4B8708C6C70DBF4FFFFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 09D1
Signing time: Wed 06 Aug 2025 23:01:02 +0000
Manifest this update: Wed 06 Aug 2025 23:01:02 +0000
Manifest next update: Thu 07 Aug 2025 23:01:02 +0000
Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: X1S1mWST1rWMJw1hZe6GKUj/um3LJVLh8cece7PY7+c=)
2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:da:41:19:a4:b8:70:8c:6c:70:db:f4:ff:ff:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Aug 6 23:01:02 2025 GMT
Not After : Aug 7 23:01:02 2025 GMT
Subject: CN=0a12bbd1d2312ec6b844ee94aa0bb0a97a6c64b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:dd:37:d0:29:ac:62:b4:64:4f:fb:57:85:
70:9f:40:ca:14:50:0e:6d:2f:4f:47:e4:e7:ef:72:
90:5a:43:e0:6b:ab:85:e7:75:d4:e7:9d:8c:94:5c:
e4:1a:24:ab:2f:20:4f:a3:1a:4b:1e:0a:86:fb:dc:
c3:df:4b:72:9f:bc:0a:ac:fb:9e:df:10:c4:b7:29:
69:56:04:d8:34:d2:55:cf:31:ec:12:d0:c9:44:0f:
2b:e9:67:51:7a:85:6d:02:fb:9a:31:6d:0e:2d:bb:
4f:36:0a:e1:8f:85:4f:bb:a4:84:e6:c6:04:c1:99:
3e:49:b3:cb:64:41:90:65:38:47:1f:d1:9a:22:10:
18:db:e0:b3:7f:ae:67:29:12:86:71:44:6d:13:3c:
cb:52:75:e5:a0:18:f2:1c:0e:ff:60:5e:c4:92:37:
fc:10:0d:33:fd:7b:d5:e8:f6:42:de:d0:47:79:a9:
10:af:c9:1d:95:13:d4:ff:5c:43:9c:d4:6b:fc:30:
d5:36:8b:9a:b5:eb:63:fd:3a:fd:ad:45:5f:36:4c:
87:c4:89:ae:45:e3:46:45:5f:69:72:0b:b9:b8:27:
53:e7:f3:47:21:08:bd:bc:6c:89:af:98:69:41:de:
6a:e0:08:78:7b:2b:d6:49:8c:8b:58:dc:68:36:12:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:BB:D1:D2:31:2E:C6:B8:44:EE:94:AA:0B:B0:A9:7A:6C:64:B3
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:64:bf:2c:fe:50:ad:bc:8e:53:47:dc:89:7b:eb:de:5d:34:
06:b7:47:b0:71:eb:88:33:19:91:24:aa:e9:c1:6d:27:0e:c1:
c4:3a:46:be:b4:82:27:12:de:ea:97:0b:d8:f4:a6:d1:06:6c:
f9:51:d9:00:50:14:03:44:4b:1b:1c:c9:1f:4b:95:4e:02:67:
70:11:af:85:92:fd:35:92:5f:34:2f:25:3e:83:75:39:f4:d1:
9f:5e:a5:75:30:37:e2:00:96:dd:3e:65:45:1f:fe:63:2d:d8:
28:00:42:1a:23:d6:95:17:df:cc:be:b6:78:75:45:cd:2c:03:
7a:ab:37:5a:56:56:50:a6:d9:5f:0f:0e:64:1d:cf:1f:58:cf:
9f:b2:99:8c:6b:ba:05:83:bd:d0:47:b2:45:70:00:41:46:63:
19:be:1f:04:78:24:02:81:d8:a7:98:24:60:e1:d8:fc:ea:99:
1a:f6:c6:a1:43:5f:94:4a:30:75:54:15:a8:4e:5c:eb:9e:0f:
5d:0a:78:11:aa:09:8c:e5:a4:dd:0a:04:7e:e5:fc:74:33:93:
ce:c7:62:de:82:21:66:6d:56:91:d5:7c:85:ca:de:49:b9:d0:
98:8c:a5:a8:bd:d5:6f:7c:fc:24:cc:c5:f3:57:9a:cf:f7:de:
db:9f:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:21 2025 by rpki-client