Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: BZjl0QZ/qtV7EuU6MDE4cc7iC3pI4fP83valRwIaB6k=
Subject key identifier: 3D:68:BB:C3:A8:DE:14:7B:FA:E7:B1:29:C8:B4:22:AB:CF:35:88:77
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 019895C8D958C81322BDF453D06AA494C344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 21:00:24 +0000
Manifest this update: Sun 10 Aug 2025 21:00:24 +0000
Manifest next update: Mon 11 Aug 2025 21:00:24 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: feV2hbyyDvG0h+SGhWwEBGb1o0gZ18o1Iymmw3Mmkds=)
2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c8:d9:58:c8:13:22:bd:f4:53:d0:6a:a4:94:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Aug 10 21:00:24 2025 GMT
Not After : Aug 11 21:00:24 2025 GMT
Subject: CN=3d68bbc3a8de147bfae7b129c8b422abcf358877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:2b:11:6d:0b:73:02:e1:07:b4:78:de:b6:
72:5b:5f:22:f1:a6:8b:4d:e9:61:05:e4:0a:7d:9e:
41:89:56:48:74:2f:42:05:6c:14:6d:e7:5f:8b:47:
f5:34:4f:f6:30:c0:f3:f1:01:68:fd:07:53:d7:4f:
14:af:af:d2:e2:7d:d3:b3:a7:c1:ee:90:11:87:0e:
82:e8:8a:14:c4:a4:eb:6a:8a:cb:fe:80:06:31:62:
46:89:fc:42:67:61:06:f1:10:92:5b:30:00:d4:08:
89:34:22:80:8e:4f:4e:4b:6f:3b:dc:46:87:db:b2:
2b:79:74:a3:71:77:e3:2c:1b:ee:c3:cc:ec:c3:f1:
6c:8d:07:91:77:be:3b:68:d1:47:56:fb:36:ce:4e:
8d:13:82:97:73:8f:5e:11:09:dc:8a:67:88:e5:de:
6a:c2:fd:67:60:62:fa:d3:a7:ac:18:45:4c:97:1e:
83:2f:24:38:3d:31:c2:ab:7e:42:70:9a:ef:fd:ee:
a6:d0:0e:0b:c7:cb:17:af:90:3f:84:e2:d3:ec:da:
d0:bc:0e:5a:10:59:48:98:3a:39:b9:d7:3e:db:3a:
96:1e:0a:db:23:86:50:00:27:0f:ae:56:87:bb:4b:
72:71:31:06:d8:dd:dd:b0:bb:44:cc:89:c5:96:5c:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:68:BB:C3:A8:DE:14:7B:FA:E7:B1:29:C8:B4:22:AB:CF:35:88:77
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ec:d9:e3:87:82:c8:1e:af:d3:be:a4:62:36:c6:f0:7c:13:
b0:df:55:76:cb:df:aa:1d:1c:04:0a:98:44:28:58:d2:01:55:
04:29:fd:50:a6:3e:5d:e4:fc:d3:45:21:27:c1:40:41:4f:c3:
1f:0d:4b:07:a2:28:da:2e:2c:28:2e:cf:f5:4e:8a:76:8e:73:
0f:55:e7:08:30:2d:4b:61:bc:6e:e5:d5:50:b5:bf:82:e8:29:
29:bd:51:41:b3:40:04:5d:0f:a1:c3:2b:98:fc:0f:0d:76:6e:
0f:d1:1f:ba:6a:b2:80:f3:26:9d:d1:8d:96:76:cf:ef:87:68:
3e:20:3e:9b:30:9e:0f:f5:55:70:2d:a9:ef:b5:5c:3e:bc:d7:
cb:1d:9d:40:01:23:a5:e7:4a:39:f5:4d:9d:ae:c0:6d:18:5f:
49:94:db:a9:71:05:3e:f8:c5:f7:00:03:70:d7:d5:1e:8b:85:
1b:8b:98:84:45:9e:d5:b4:28:69:8d:b6:77:76:52:d1:a9:9d:
15:e7:8d:06:d4:2c:a6:d3:90:1d:1c:67:a8:60:a4:ce:38:b9:
62:dc:16:8e:8e:86:a9:55:5a:8e:0e:70:cf:92:54:9d:f9:01:
eb:1f:df:24:1c:93:a6:d4:fc:8d:db:d9:c2:24:99:b2:f7:ce:
e9:e7:8d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:18 2025 by rpki-client