Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: UJQ7qaz8NO3C6of52DJg+l4vbvidI3yr/n+yr2v5leU=
Subject key identifier: 56:81:28:5D:43:10:B0:C3:F8:03:E2:42:D1:9B:97:6C:5B:56:DE:7E
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 01988A6A0FEE5C5F0B141255D494415A21AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 16:01:03 +0000
Manifest this update: Fri 08 Aug 2025 16:01:03 +0000
Manifest next update: Sat 09 Aug 2025 16:01:03 +0000
Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: vX6WSUevSsR8tNsJ1uRU7xXghMe2rshAF5qrFYVpivs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:0f:ee:5c:5f:0b:14:12:55:d4:94:41:5a:21:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Aug 8 16:01:03 2025 GMT
Not After : Aug 9 16:01:03 2025 GMT
Subject: CN=5681285d4310b0c3f803e242d19b976c5b56de7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:d0:29:97:84:b3:02:37:91:ea:be:e1:a6:
4d:53:2c:21:9d:04:6d:d5:2b:b9:5e:58:55:62:41:
2c:43:9d:b3:92:63:5d:f1:89:16:90:74:8c:66:f0:
8a:b8:2c:8f:82:ce:6b:69:dd:fd:03:8f:09:31:6e:
dd:5a:1a:b4:c2:bb:b1:a5:ca:5d:c8:f4:76:1c:b0:
8b:f6:9b:a7:e1:c0:5b:fa:34:3a:ab:65:5a:95:b7:
0f:cc:73:60:7d:42:b3:d2:dd:8a:b4:04:e6:65:99:
cc:7f:65:4d:af:12:a7:c5:20:d9:a4:7e:05:b0:83:
79:92:90:b9:a7:51:9b:85:4c:07:d9:dd:31:6e:f5:
65:72:82:ff:bf:0c:5a:79:86:6e:04:e4:d7:21:7e:
9f:b2:c8:58:cd:4f:72:59:30:4e:59:c9:6c:23:26:
e1:d2:77:f7:03:99:ad:08:4a:7f:92:79:d3:cf:48:
16:1f:66:48:8e:a7:8c:c5:11:e2:67:03:08:84:95:
cd:4c:88:9f:90:4a:c8:a5:3e:c4:d2:44:69:25:ff:
05:08:bb:f1:60:0b:08:4e:d4:92:48:e7:ac:10:af:
cc:0f:c1:39:d3:5e:0d:8c:33:16:38:f5:01:60:08:
d2:c1:8a:a6:c4:e6:ff:2b:64:72:33:c8:6b:f3:5a:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:28:5D:43:10:B0:C3:F8:03:E2:42:D1:9B:97:6C:5B:56:DE:7E
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:2a:63:69:e1:99:fb:24:3a:62:75:18:b1:43:d5:9d:89:
29:08:69:c1:bf:8b:29:79:f3:a0:20:20:81:3f:56:18:ec:13:
e3:fc:29:e6:4a:48:56:6d:39:95:74:5a:2a:b6:81:72:8a:73:
d0:5d:88:7e:3c:a8:7a:8c:99:2a:2f:18:02:0a:ce:24:43:0d:
56:01:11:30:60:12:99:3a:3a:eb:36:4c:95:74:3f:27:8b:f7:
bb:0a:17:5b:04:06:c2:6d:6d:41:a7:c0:4e:ee:27:df:25:8c:
ff:f9:4c:3d:46:c4:7c:19:cf:8e:81:ca:fe:1b:d3:4e:1a:84:
e4:16:22:bc:f5:3e:99:23:8a:72:da:4b:64:e0:44:24:c3:21:
1f:24:fa:d7:d3:8e:dc:ec:dc:39:0f:84:c8:1d:7f:36:d8:0b:
da:4b:1a:33:1d:ee:84:28:e4:94:35:f1:da:51:c7:46:1c:44:
3e:d7:f3:6f:1c:a5:81:17:09:41:8f:80:f3:b0:71:fb:6f:4e:
c7:f6:77:c3:36:f8:2a:d0:9c:1b:dc:ee:33:f9:b9:24:71:50:
c5:e7:6e:a4:68:50:8b:ce:d3:8f:9c:e3:9e:53:b8:ec:40:de:
de:77:f0:b2:11:94:a3:7d:bc:29:ec:89:ac:1b:62:e6:ff:36:
fe:77:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:28 2025 by rpki-client