Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: nmvrCLqDXWVe2xIDCmzdptITZO4jags0FMGmi4x4RbU=
Subject key identifier: CB:C6:BD:08:3D:50:4F:F0:6D:A3:59:31:51:26:80:97:57:8C:4B:B4
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 01989F70EB484DDEFEED002AC3C92CEC0BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 107C
Signing time: Tue 12 Aug 2025 18:00:34 +0000
Manifest this update: Tue 12 Aug 2025 18:00:34 +0000
Manifest next update: Wed 13 Aug 2025 18:00:34 +0000
Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: nvj+pxyKKSOUp4DfiSVRNCefu32vvAmfb17S00enRow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:70:eb:48:4d:de:fe:ed:00:2a:c3:c9:2c:ec:0b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Aug 12 18:00:34 2025 GMT
Not After : Aug 13 18:00:34 2025 GMT
Subject: CN=cbc6bd083d504ff06da3593151268097578c4bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:28:c2:3d:15:17:5d:73:db:1b:f1:39:52:
68:48:8a:53:a5:b1:54:c0:d6:1a:36:cf:96:98:11:
d3:81:f2:db:8e:32:72:e2:44:4b:83:39:78:ba:a8:
8e:96:c2:f4:de:c8:db:ab:1d:86:30:23:b5:da:f1:
1c:ba:5b:dd:bf:03:12:27:c2:3f:10:8b:ed:81:0d:
db:4c:f4:f4:41:99:51:ac:dc:bd:d8:c2:36:cb:39:
2f:dd:56:a7:9b:b7:0a:79:7e:4b:92:bd:56:9c:41:
91:bd:34:9a:6f:d5:8e:d3:99:eb:b7:f3:ae:cb:6a:
60:09:41:77:ed:c3:89:26:14:a7:d8:ed:f6:02:eb:
96:c1:26:18:08:3f:0f:52:22:b0:d7:ad:14:2c:5d:
07:06:78:54:b2:dd:33:d0:4e:5b:bc:da:2c:44:46:
79:93:b5:12:4b:c5:b4:17:78:b7:93:4f:e2:90:0d:
2e:40:d7:32:8b:12:1c:c4:d6:8a:cf:e7:d2:47:7e:
ec:a1:6d:c2:20:27:a6:d5:66:ca:77:1a:91:f7:4a:
42:14:99:b2:eb:52:fd:07:33:ec:0c:fc:9a:86:19:
68:43:02:27:72:be:93:5c:9d:2f:12:ba:45:48:50:
e1:f2:cb:81:ba:4c:69:7a:9b:74:82:7e:99:21:42:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:BD:08:3D:50:4F:F0:6D:A3:59:31:51:26:80:97:57:8C:4B:B4
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:00:e4:17:2d:65:91:8d:6d:c7:33:28:4d:69:bb:1c:24:aa:
6f:69:77:01:61:24:92:2c:ff:a3:df:54:d0:63:13:4d:4a:d8:
94:d7:b2:60:04:f1:42:fb:3a:0f:44:06:d9:33:0d:2a:37:a9:
46:dd:39:0c:51:00:7d:75:a3:c6:f9:26:c7:06:8e:4f:d0:1f:
59:c8:e3:6b:99:7f:54:57:88:b0:9a:61:77:3b:14:51:4b:51:
8d:19:dd:93:e4:75:58:6d:e0:c0:cd:85:28:12:6a:be:1f:71:
88:e4:6a:ab:8f:a0:0e:07:f8:c8:be:46:fb:1b:f5:be:b1:7b:
f1:65:19:fd:9b:a5:c3:1a:a7:78:d3:ea:d9:cf:de:f9:68:16:
f1:a4:b6:41:69:f5:dd:07:d1:43:b3:9e:40:2a:fa:ea:9c:ef:
8f:bc:fa:46:ab:79:25:79:cd:97:7b:e5:9e:9e:2b:52:78:04:
f5:69:a4:34:17:88:ba:ea:8a:3e:13:cc:0b:d8:c3:c0:92:80:
b7:71:f4:d8:1d:6c:c4:43:67:03:8b:c1:7d:c7:5a:b9:85:5d:
00:d0:9c:06:cc:3d:3e:48:f9:93:ad:15:f9:74:09:f3:dc:e7:
47:66:b5:13:72:7a:66:30:5c:7b:7b:3a:c2:fa:96:cc:a4:45:
27:50:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:34 2025 by rpki-client