Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: jimgJBIMRM5zZaXM1rnBgy7r1+2svB2S1UGd3yGQT1s=
Subject key identifier: 90:A7:91:C8:C2:58:C0:3E:C7:35:B4:07:08:55:B0:0A:4F:68:B9:69
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 0198898E8F51C56F5EDE494C005972EDC59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0D5C
Signing time: Fri 08 Aug 2025 12:01:17 +0000
Manifest this update: Fri 08 Aug 2025 12:01:17 +0000
Manifest next update: Sat 09 Aug 2025 12:01:17 +0000
Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: cJQ4SwVxC7cF1DuRWb8zrIUzjSFfh74Kzg2AqcJj4IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:8f:51:c5:6f:5e:de:49:4c:00:59:72:ed:c5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Aug 8 12:01:17 2025 GMT
Not After : Aug 9 12:01:17 2025 GMT
Subject: CN=90a791c8c258c03ec735b4070855b00a4f68b969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:fc:74:78:6c:5b:6c:ce:07:d8:72:ac:47:
91:4b:d0:21:74:63:cf:51:75:51:0d:b4:66:b1:ef:
ab:2a:f4:ed:3d:e8:59:b9:2a:8d:6a:34:f1:49:80:
d1:0a:d4:06:38:28:42:b8:eb:b6:a6:cd:98:d2:da:
22:ae:ea:de:07:43:7b:3f:56:f1:c4:2a:14:0a:d3:
c5:77:65:16:d0:38:05:4a:25:64:5b:b7:1b:fb:84:
d9:df:42:f5:eb:4d:6f:7a:d7:49:69:0c:45:94:b3:
56:e3:8e:72:7d:e6:28:60:d2:4c:c5:a7:e4:06:b6:
c2:ba:86:04:74:d9:ac:7e:9a:7a:45:15:27:35:7e:
82:5b:63:26:7b:7a:6b:32:81:92:77:27:7a:09:98:
f2:b5:6e:32:70:24:ae:69:6b:b0:ac:fe:fc:b5:35:
d7:63:68:4c:22:2f:9e:56:ab:41:70:81:90:33:6f:
ae:33:23:79:8c:40:ed:95:78:ea:82:37:a7:ee:0d:
9a:0d:d4:5f:32:1a:ba:bb:4a:08:ec:13:34:d5:2b:
6d:35:91:17:47:7a:53:2d:61:78:4c:22:1e:d3:c7:
77:f0:8e:81:fa:1e:86:59:7e:34:5e:1e:1f:fa:65:
2b:3b:21:bb:63:f1:6d:5b:09:fc:ad:ec:14:cd:3d:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A7:91:C8:C2:58:C0:3E:C7:35:B4:07:08:55:B0:0A:4F:68:B9:69
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:f8:8a:97:c1:e5:0d:96:04:46:32:73:25:e8:4e:a0:e7:5e:
65:df:ab:15:bc:5c:c6:a2:db:8e:20:3a:37:00:0f:10:26:cb:
c9:d2:83:d6:84:0a:70:fa:12:19:31:0a:92:e6:60:f8:0d:9b:
64:b6:75:e6:10:27:d5:30:8e:1c:40:2e:bd:57:bc:8c:6b:de:
58:6a:68:3d:5f:71:15:74:2d:e6:80:49:a8:30:3c:73:38:f7:
e1:09:e1:51:04:37:7f:c2:33:27:38:0a:dd:d0:92:7d:9d:54:
84:df:9b:21:7f:cc:c2:00:06:91:a0:e4:f8:a1:54:71:17:b7:
49:00:0c:50:88:a2:f7:8f:02:ac:e1:3d:66:fa:02:3f:23:7a:
a8:ea:d6:2b:0f:7e:93:94:65:5d:18:5b:ab:5b:81:23:2d:17:
52:ad:54:55:01:bd:6c:51:56:a5:bb:bd:41:02:98:f8:c5:cc:
8a:3d:64:fa:f7:5c:62:51:43:db:f8:b8:8a:2f:81:31:92:f4:
ba:7f:4b:5a:73:59:aa:a5:4b:25:8c:b6:49:86:16:b9:dd:c0:
15:35:5c:f0:c1:74:8e:6f:49:df:5f:72:27:db:a9:dc:06:f4:
27:b9:b2:7c:2b:a5:e9:b1:46:57:0f:e9:b4:d6:1a:35:3b:e1:
e9:1e:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:52 2025 by rpki-client