Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: B14qv1wAZNRfXnrYwCDh2pGBw5D8pde4hZYBj/yJ9oQ=
Subject key identifier: 17:A5:88:C1:BD:E2:55:C8:29:FA:E9:CD:6F:82:1D:B6:1C:2C:DB:CF
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 01987306A647A16F9CB4B79230CF2FE57486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0DA4
Signing time: Mon 04 Aug 2025 03:01:12 +0000
Manifest this update: Mon 04 Aug 2025 03:01:12 +0000
Manifest next update: Tue 05 Aug 2025 03:01:12 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: 0YvN7n9F5qInI0VH9LkMxynSeD8YtBJlRu2Krc77TQ4=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a6:47:a1:6f:9c:b4:b7:92:30:cf:2f:e5:74:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Aug 4 03:01:12 2025 GMT
Not After : Aug 5 03:01:12 2025 GMT
Subject: CN=17a588c1bde255c829fae9cd6f821db61c2cdbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:50:17:94:77:0b:af:e7:44:f3:44:6a:bd:
70:05:f6:a2:dd:4f:19:27:d0:dc:0a:84:b8:42:bb:
7f:cd:21:56:a7:12:6a:9a:3b:71:7f:62:06:97:ec:
04:c2:82:79:27:ed:f0:53:59:d2:11:77:9d:ea:9a:
ca:90:5e:e9:ec:d8:e5:d7:72:3f:8e:e1:2f:4a:cc:
84:b4:b6:4e:00:77:a3:07:fb:13:70:42:27:eb:b7:
5f:cd:de:48:41:db:0c:45:de:21:e6:fd:fb:20:0d:
c2:1e:50:0b:23:f3:fe:f2:54:f8:ac:37:79:8a:bf:
66:81:ee:66:21:60:10:cc:21:84:b0:4f:18:0c:03:
76:55:7e:d1:45:89:99:f8:5e:a6:53:a0:46:ff:8b:
12:41:27:ab:3c:cc:88:4f:ab:3b:94:89:7a:1d:c5:
9e:6f:9d:68:84:c7:eb:19:d4:ba:df:b4:0e:d7:83:
00:02:94:7f:dc:ef:ff:5d:75:2b:9e:e7:f5:61:42:
3b:52:35:a9:ab:0a:6d:53:70:b1:53:a1:ee:3d:28:
35:f4:f6:d7:d9:eb:d6:3e:bf:38:c1:d0:98:57:d2:
45:c1:5d:fb:51:40:96:8e:e4:6c:5a:ae:3d:f5:b6:
be:52:0c:d3:37:63:8e:5e:1d:b0:3c:9f:54:66:19:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:88:C1:BD:E2:55:C8:29:FA:E9:CD:6F:82:1D:B6:1C:2C:DB:CF
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3d:12:0b:f8:0f:87:b4:fc:08:6c:43:38:cd:53:f6:45:b4:
0a:f4:21:ba:9f:66:d7:e0:2d:ee:c8:08:ca:8f:e5:ad:c4:72:
22:c3:1f:d1:84:a4:e9:e3:54:41:dc:d6:02:f4:32:a2:c1:00:
cf:26:46:26:e4:1f:0e:96:c2:37:b0:bb:1c:0b:b1:0f:1d:56:
65:a9:a1:3d:97:28:54:37:25:cd:a5:5d:2d:7c:8a:f3:17:46:
49:91:c8:aa:bd:93:01:77:3d:af:b5:f0:44:9e:d2:4b:01:6d:
b0:32:f9:8a:3c:06:50:ab:ee:4e:3b:7e:42:5f:52:b2:fe:3c:
a6:1e:fb:43:30:57:c1:b5:c6:c4:68:15:ea:06:f8:e2:8f:5d:
65:89:7c:8b:a7:b3:85:30:ca:a9:3c:f7:a5:e6:89:12:74:b4:
44:3b:3c:aa:c8:72:b3:04:30:c8:cf:15:6f:95:07:c1:9f:64:
7f:08:d9:e3:63:cd:cc:7a:cd:ff:fe:aa:f5:da:e0:0a:3b:af:
c7:73:ba:9c:1b:03:58:24:7e:ae:c1:c3:cc:e2:8b:67:70:ed:
0e:52:89:3a:04:b5:f1:19:95:f3:a9:c2:7e:64:bf:c1:36:2e:
b0:39:01:18:45:fa:d8:90:63:74:4d:d3:3e:8d:95:8d:fa:eb:
3f:ce:a8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:09 2025 by rpki-client