Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
File: 8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json)
Hash identifier: ve9NRwRWw/4I762Rp6CPMX6R4mKFAscp9B/voFV7+PQ=
Subject key identifier: A9:07:BC:94:04:5D:A7:93:92:94:EF:A9:48:89:2D:36:D5:19:C3:DA
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial: 019881D4AE3DB078DC65EDAB2BCD3FFC8D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
Manifest number: 01B4
Signing time: Thu 07 Aug 2025 00:00:55 +0000
Manifest this update: Thu 07 Aug 2025 00:00:55 +0000
Manifest next update: Fri 08 Aug 2025 00:00:55 +0000
Files and hashes: 1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: LpEvTpUXZ1O1uXrRqSVT20VlACTdOlzQfgOVdPOUqdw=)
2: sW8bwiGLsI7Vh96L_GlmvLQDJKY.roa (hash: zwPk0zZ0KWeH/lkVto00u9mSsOX9BDpbaWABcwD0yq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:ae:3d:b0:78:dc:65:ed:ab:2b:cd:3f:fc:8d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Validity
Not Before: Aug 7 00:00:55 2025 GMT
Not After : Aug 8 00:00:55 2025 GMT
Subject: CN=a907bc94045da7939294efa948892d36d519c3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:dc:0c:5c:4c:bf:91:d1:3d:a0:1e:78:06:
7d:93:b1:3f:7d:32:31:3f:f8:28:0e:c5:3e:9b:9d:
ea:e9:47:b5:1d:5a:be:87:d3:6e:a2:fe:ee:1f:be:
1f:35:ff:da:09:e1:bc:f4:7a:b9:ba:49:4b:fe:f7:
c2:71:71:b4:cb:04:ac:b4:b8:3a:32:74:e5:68:49:
68:d0:6e:70:86:09:3e:1f:82:30:14:ff:37:90:25:
82:04:10:18:89:60:b5:cd:82:67:2f:bb:a7:4f:97:
a5:2c:57:3e:d8:1d:2d:e9:c8:e9:cf:11:d0:c8:47:
ed:9a:80:42:f2:1e:98:28:05:b8:b8:f5:e1:14:7e:
48:e8:98:97:f7:94:1e:50:6c:18:21:5a:3d:79:b1:
e4:20:4b:47:24:8a:ed:29:ca:bb:eb:ef:0f:4c:9f:
b9:ff:ac:30:d4:c7:8a:2d:df:43:45:19:73:cb:c9:
b7:0c:3b:40:a9:ee:6d:e4:32:96:83:4d:6f:4f:cd:
56:6b:45:22:92:21:6d:86:9a:a7:54:65:f7:14:42:
75:c5:c7:5b:d2:60:72:1c:90:66:24:a0:ef:7f:92:
d1:1c:24:10:7e:4d:0a:89:c4:2a:c0:7f:69:5a:8a:
68:1f:1c:99:85:09:0b:d4:35:c4:a8:59:a2:57:ef:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:BC:94:04:5D:A7:93:92:94:EF:A9:48:89:2D:36:D5:19:C3:DA
X509v3 Authority Key Identifier:
keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:7a:30:6e:aa:79:b3:f3:c1:ae:60:86:a3:29:f2:62:ca:
49:53:aa:b4:7f:2a:9e:4a:c1:0b:6c:5e:9e:3e:b6:82:42:bf:
65:ef:d4:78:6a:02:ad:74:67:93:1b:dc:3f:0f:ca:5c:88:8d:
e2:75:08:ec:69:c2:8b:01:ca:8a:0e:f3:0f:a8:14:1c:b1:8f:
d6:5c:39:4e:72:d7:f7:71:3c:f7:5b:32:58:23:61:b6:ab:6e:
87:0b:82:08:0d:ef:ba:f8:3a:fe:c8:aa:03:62:ec:c5:90:39:
7e:07:2c:e6:d1:5f:2d:da:b3:67:16:5d:ab:a7:22:36:87:71:
53:8b:dd:df:f3:b7:0b:c9:d3:c9:50:5c:d0:a8:33:1f:a6:a3:
f4:fd:c8:2f:21:90:27:c0:ef:75:fe:b6:f5:02:25:33:a6:01:
14:53:71:5b:e8:ac:f1:7a:a9:12:fe:78:0b:3f:0a:97:93:c8:
3a:38:be:85:74:6e:f1:90:f9:15:ef:6b:c5:a0:95:be:c9:bc:
d8:9e:3f:29:fc:c0:24:e5:b5:92:6f:b0:60:c3:59:7e:ad:d2:
ff:79:64:78:c3:d8:5e:27:de:c6:b3:3e:82:a9:14:d0:78:9b:
2b:e0:6f:00:7d:d4:a1:85:da:1e:9f:08:b6:85:36:cb:25:d2:
c5:eb:56:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:57 2025 by rpki-client