Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: 96+t76tR1+lujcUZzNs6ltxFGK+CPCgaRMOpq1tfU1Y=
Subject key identifier: A2:EB:58:9B:F9:C9:6E:AA:29:3D:65:1D:B8:4A:D5:84:34:45:3D:13
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 01988FFE42D0073180BB05662BD7C9611A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0EE9
Signing time: Sat 09 Aug 2025 18:01:01 +0000
Manifest this update: Sat 09 Aug 2025 18:01:01 +0000
Manifest next update: Sun 10 Aug 2025 18:01:01 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: Eenb3wPYfOBsk49KfaVfcYMn564ENtqoosuU69Rargw=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa (hash: 4tBHDD8ccamGIZtMNBVAmE3bow4OuhCBji726kCuMPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:42:d0:07:31:80:bb:05:66:2b:d7:c9:61:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Aug 9 18:01:01 2025 GMT
Not After : Aug 10 18:01:01 2025 GMT
Subject: CN=a2eb589bf9c96eaa293d651db84ad58434453d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:02:f5:52:f2:ee:0a:e6:bf:da:cc:9d:c7:
34:95:a3:32:49:95:52:94:b1:c2:2d:6c:72:5d:bf:
4d:ed:6d:bc:26:d9:b1:ca:af:d5:5b:06:b3:75:c0:
04:ef:2c:47:48:45:39:a5:71:03:f8:e5:ed:e9:7a:
9b:f6:b8:43:75:0b:98:93:36:68:26:98:1d:26:a3:
28:78:6f:f2:59:0d:ff:5e:29:b3:18:74:c5:c5:7f:
3b:89:04:5f:2f:0e:b9:a4:92:8c:07:83:9e:3c:4c:
52:5c:3c:07:2c:9b:d6:3d:58:78:99:d9:90:63:b8:
2d:60:f4:1d:2c:c5:77:f7:c3:f6:c4:0c:87:9a:c6:
d3:ff:3e:f5:27:aa:2d:56:76:84:89:33:93:c1:e0:
2b:34:fc:82:07:8a:f9:90:63:27:74:05:08:00:aa:
e2:bb:86:81:28:cf:74:eb:d0:3e:b9:bf:70:6a:7c:
20:d0:3c:2f:29:89:85:67:72:31:f3:5d:ee:5c:9d:
82:a8:47:87:d8:77:14:ed:17:3a:ac:dd:ac:f0:d9:
29:f1:fc:11:a0:19:1c:0a:dc:70:a6:a4:76:b8:97:
7e:39:5e:bf:f2:aa:44:58:a2:7c:25:b8:83:d9:8e:
7b:86:7b:b8:25:3f:76:8d:ec:c1:44:2b:f1:26:85:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:58:9B:F9:C9:6E:AA:29:3D:65:1D:B8:4A:D5:84:34:45:3D:13
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c6:9d:92:8a:72:1a:c7:10:d2:64:ec:da:7d:03:da:63:56:
ab:a5:11:7a:f7:28:a7:2e:43:eb:2f:ae:e0:3b:66:f6:61:21:
4f:72:ac:a1:42:6b:42:a1:c4:1e:83:e5:1c:83:3f:53:41:9e:
53:18:7c:28:ec:ac:b2:6b:7e:27:84:3e:62:a7:a8:95:ad:44:
d6:a8:45:59:fe:2e:e7:ff:ec:99:89:5c:25:66:7f:f4:be:d2:
69:d8:f6:5d:1d:87:f0:60:cb:73:59:6f:1a:55:cd:28:78:5a:
1b:be:a7:ff:e9:39:b5:99:c2:e8:fb:37:08:a7:1a:d3:97:12:
66:4e:ce:34:7b:5c:49:c4:b6:24:fa:ec:8a:b9:ce:07:55:21:
57:a2:c8:7a:85:ec:02:b9:b2:58:97:56:3e:32:82:bb:ec:db:
2a:e1:36:e4:54:cc:c6:82:27:2d:cb:f2:89:95:d1:4f:f2:b1:
4a:cc:75:67:e5:d6:26:a6:76:39:10:ef:b8:88:f7:43:6b:c3:
68:50:c2:d6:45:94:d4:ec:52:8e:ba:d3:47:aa:c4:17:95:a6:
c1:21:51:66:78:a3:ad:a4:df:f6:7b:3b:b8:e9:cc:6e:70:30:
6e:64:e0:ab:92:5a:17:03:2c:23:57:cb:7c:94:df:b1:b3:2c:
6b:76:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:03 2025 by rpki-client