Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: mkO4jIKB3FEW/KfiFgVT+meQj+ys4E4MgV/Q+hURz4Q=
Subject key identifier: EA:D1:26:60:C7:5E:3F:C7:F3:C0:76:0F:00:D6:B4:64:76:32:DD:92
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019890D99A04B0A5EFE947D9E539933D3190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 05C1
Signing time: Sat 09 Aug 2025 22:00:36 +0000
Manifest this update: Sat 09 Aug 2025 22:00:36 +0000
Manifest next update: Sun 10 Aug 2025 22:00:36 +0000
Files and hashes: 1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: /T3vjDk8oAyA8J57sfNlO/7i0Cuy06kLxbWoqliOTzc=)
2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:9a:04:b0:a5:ef:e9:47:d9:e5:39:93:3d:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Aug 9 22:00:36 2025 GMT
Not After : Aug 10 22:00:36 2025 GMT
Subject: CN=ead12660c75e3fc7f3c0760f00d6b4647632dd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:77:fc:f9:76:ba:2a:0f:7f:b2:ca:67:d0:
a3:22:7f:c5:2b:f2:3e:1f:c1:eb:da:0f:f0:8a:fb:
de:15:62:28:69:fe:d7:37:a1:e1:91:15:11:a0:66:
7c:67:04:ea:6f:be:0c:86:a7:83:ab:11:22:c8:5a:
ce:32:0d:84:88:21:77:4f:e5:d6:b7:78:92:44:2e:
0c:3c:c8:6f:58:93:72:f8:4f:11:ae:57:52:72:ad:
ad:34:0a:02:48:7a:d9:05:b5:5b:d9:85:4f:05:9e:
f4:6b:92:8b:4c:83:21:65:30:5c:da:5f:dc:b8:d6:
1e:69:55:61:5d:70:be:19:f9:0a:4a:23:e5:76:46:
a4:f6:f1:11:6e:56:37:3b:9a:fd:b4:98:a1:e3:87:
69:1c:8c:1b:90:46:92:d0:7b:e2:95:84:44:a4:50:
99:31:8c:90:7c:a5:af:54:e5:75:17:06:c3:e3:83:
71:38:ab:50:87:2d:07:98:8b:f6:07:7c:20:ba:20:
76:4a:e2:02:9d:45:e5:f6:18:01:f6:09:11:c7:35:
81:4a:0b:fb:1c:59:00:6b:d6:c9:52:21:fa:2f:eb:
df:78:5d:3e:c9:0f:c1:94:82:cb:71:26:d4:2a:20:
57:a0:30:9c:93:77:e0:4f:d2:96:ea:e6:a5:86:07:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D1:26:60:C7:5E:3F:C7:F3:C0:76:0F:00:D6:B4:64:76:32:DD:92
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:59:5e:01:b7:ed:4e:7b:29:b2:49:9f:bd:51:e5:55:0d:75:
9f:01:b8:a3:a6:93:03:74:e1:57:90:f2:eb:6f:38:3d:99:51:
7a:94:59:8f:c2:27:34:fe:f1:72:a2:91:4e:86:d2:cc:1d:50:
9c:81:aa:b9:11:2c:58:10:78:86:30:fa:6b:04:d6:78:ad:2c:
92:ba:d4:fd:ec:23:ef:1b:11:ac:e6:7e:13:b6:cd:f2:b0:cb:
da:38:fc:de:b6:74:9d:a0:bf:af:6d:3c:6f:6e:9b:b1:6b:99:
8b:bb:a2:80:d3:2a:6f:ed:62:c4:4a:52:e0:23:5b:10:38:05:
e3:db:a2:99:e7:9e:54:1d:8f:c5:30:98:76:dd:73:23:39:2d:
de:c2:d4:78:61:0a:1d:ef:74:48:db:b8:c1:91:ca:51:c0:f8:
bd:87:ff:95:37:0f:6c:50:d9:e8:32:3b:8e:12:82:2d:60:39:
ed:4f:5d:4d:13:e0:33:ec:a8:db:a3:90:2a:8a:50:86:26:70:
b2:83:3e:5b:da:61:54:25:4b:b9:99:88:4a:90:a6:9a:f1:54:
d1:c5:08:fe:67:59:71:5e:5e:24:27:e9:70:76:b5:03:84:22:
30:9a:00:64:2b:88:d2:a5:89:93:34:94:31:65:56:df:8c:16:
a3:6e:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:14 2025 by rpki-client