Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: aKqXMOsETtN1U46xp12Xx0r8j0V0rFKuWJCSeF9WOeY=
Subject key identifier: 37:B1:2E:9C:98:78:F8:54:00:ED:44:B1:7E:49:A1:EF:58:C9:3A:45
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01989DF0AA83BBED3655C6519E2156FB142C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0F20
Signing time: Tue 12 Aug 2025 11:00:51 +0000
Manifest this update: Tue 12 Aug 2025 11:00:51 +0000
Manifest next update: Wed 13 Aug 2025 11:00:51 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: 1ROAhKB5F0Voxmi6VQ5ZPV0urg4NtoMlQnQiES/rzPQ=)
2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:aa:83:bb:ed:36:55:c6:51:9e:21:56:fb:14:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Aug 12 11:00:51 2025 GMT
Not After : Aug 13 11:00:51 2025 GMT
Subject: CN=37b12e9c9878f85400ed44b17e49a1ef58c93a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:a5:95:ca:bd:28:c9:97:82:e5:01:24:5b:
cf:7a:de:5e:eb:e8:7e:e2:0f:f6:52:a8:cb:ef:35:
0f:6e:93:03:ff:80:eb:2f:c6:32:7b:b3:5b:62:a1:
c7:04:35:0a:9d:cf:fb:8e:92:99:a8:2d:9c:96:9a:
e7:e8:5b:f3:dc:9b:e0:7c:d4:a2:d0:19:5c:0a:63:
3e:63:d2:8c:b8:1f:a6:35:20:53:a2:19:3d:f1:c2:
70:63:3b:74:81:8b:61:4d:73:5f:20:8d:0f:b6:e6:
60:e0:fb:67:57:52:42:cb:cc:f3:9c:ea:a4:9e:18:
3f:10:03:be:68:c5:1f:7d:27:21:39:9b:8e:64:4e:
42:40:f6:2e:56:da:ba:55:11:2a:3a:6d:37:48:01:
a1:92:a7:1e:26:b7:88:83:04:a8:0f:6a:04:55:34:
13:21:92:ab:fa:d7:5a:7a:33:a9:00:51:03:d4:63:
82:ab:b4:b8:62:de:64:84:a5:70:a8:0d:af:9c:f6:
85:20:43:27:c8:7f:75:91:12:0d:76:47:ae:c8:00:
0c:65:c7:ac:9a:9f:2d:62:0d:02:25:86:d0:7c:0b:
ba:34:82:cd:37:37:ff:f2:e7:52:98:86:3c:b6:20:
a9:24:83:81:f3:3b:2f:80:62:fe:42:0f:36:bc:67:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:2E:9C:98:78:F8:54:00:ED:44:B1:7E:49:A1:EF:58:C9:3A:45
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a0:c2:5b:cf:fc:fb:7d:c1:fd:6d:e0:21:53:2c:bd:07:d3:
e5:05:a5:fa:ac:7c:01:b7:25:c5:c2:38:cd:d2:1e:98:43:ae:
94:2a:8d:fa:6b:63:44:0b:98:34:ad:f6:07:ea:14:d1:ef:73:
09:e6:32:d1:1b:fd:80:83:81:e7:e9:15:03:29:b6:d9:b0:02:
2f:ba:35:35:7b:fd:e5:19:0f:d9:30:38:d4:56:94:e5:b4:a9:
25:44:20:93:d8:88:15:99:c2:d0:a5:4d:87:40:42:2a:7f:8f:
9d:9c:9d:99:2b:56:0c:f6:a2:94:46:89:62:43:a6:98:fd:c5:
ea:73:91:df:53:7e:d1:54:a5:4e:00:d3:4a:34:47:77:fb:9a:
c5:fa:ad:d0:d0:87:c2:5c:95:93:13:37:23:c5:06:10:11:a0:
ed:15:ce:ab:29:88:92:73:d9:82:cc:92:a6:ba:ae:f3:ca:6d:
84:e8:87:60:72:73:1c:a7:6c:79:9e:89:68:9c:8c:66:02:f2:
e6:fe:3d:4f:f5:c2:f8:33:eb:19:44:dd:21:f4:c1:e7:96:82:
dc:9d:83:28:a9:e4:dc:01:51:cf:c4:4e:bf:b8:56:e3:b9:74:
cf:68:40:e5:66:70:2c:9d:ba:82:a4:58:80:16:d0:86:7b:3c:
c2:81:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:16:06 2025 by rpki-client