Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File: 8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier: jv/IRO+9tD/eDeduTqjKG5mUtMYS6vuzHxh83XXKznM=
Subject key identifier: 43:61:21:35:38:56:64:EA:C4:1D:0A:F5:03:39:D2:87:43:A5:72:47
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer: /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial: 01989636FAE6823B0B31EF7369BED9207CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number: 0C2E
Signing time: Sun 10 Aug 2025 23:00:42 +0000
Manifest this update: Sun 10 Aug 2025 23:00:42 +0000
Manifest next update: Mon 11 Aug 2025 23:00:42 +0000
Files and hashes: 1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: Uuns8s5qKyw+9eGbifDU9Gq5f1ZK6AmGXVuP74KgN8s=)
2: rMoZ83VQ7iYFtJcAmlmBDs25c0s.roa (hash: 5UVFXIRMFFdYenUl6z+JEcUUQ5VhSSfJAeVRB/Ej+fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:36:fa:e6:82:3b:0b:31:ef:73:69:be:d9:20:7c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
Validity
Not Before: Aug 10 23:00:42 2025 GMT
Not After : Aug 11 23:00:42 2025 GMT
Subject: CN=43612135385664eac41d0af50339d28743a57247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e8:5f:ae:57:69:fa:df:02:86:f5:58:66:bc:
74:fe:f3:6f:1a:f1:db:8f:9a:4e:a2:a6:f6:2a:88:
0b:55:9c:bf:c1:2e:ef:4e:c1:91:1f:a3:c7:14:a5:
04:af:cd:33:cf:17:14:e5:90:40:bc:a2:07:55:23:
7d:86:3d:aa:eb:8c:cb:74:4d:01:55:dd:cd:ef:72:
f9:1a:42:9e:87:a0:f0:bd:41:6d:ef:22:da:23:d4:
04:54:66:92:c2:b7:50:c8:d5:80:39:86:7f:c1:60:
3e:8c:dd:3b:f7:9e:71:1a:7e:49:10:5d:8a:40:4a:
7c:32:ab:b6:aa:77:a6:95:7d:0b:3b:a2:30:0e:c7:
30:97:03:9e:3e:9b:0c:ff:c6:47:48:96:03:d3:2e:
4a:bc:e9:57:b9:f3:25:b3:11:41:07:91:88:12:0d:
c7:c1:9a:be:3c:6b:c1:97:67:58:ba:20:2d:88:57:
11:1b:9d:55:cf:a6:c9:56:31:ad:e3:a0:27:c5:d7:
24:e5:3a:65:b7:af:6a:88:22:de:ae:a2:35:7e:db:
b1:4d:03:53:4c:52:a0:7e:b8:6f:0f:d0:0c:09:2e:
db:9e:61:6f:10:1f:1a:4e:cd:bb:94:ab:e7:f4:b3:
91:a1:fc:ba:9d:a5:83:d8:97:9e:43:e4:b1:45:18:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:21:35:38:56:64:EA:C4:1D:0A:F5:03:39:D2:87:43:A5:72:47
X509v3 Authority Key Identifier:
keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:06:84:72:7c:09:f3:8f:7a:0f:07:86:9a:13:3c:38:9a:0c:
6c:b9:20:58:6c:6b:4f:cf:d8:de:d7:9b:16:25:cd:fc:c2:96:
c4:c9:db:34:1b:58:e0:6e:c1:7c:cf:94:c2:0a:dc:df:b0:16:
73:bc:25:ee:6b:11:26:b8:78:a8:e2:ba:d0:40:bf:b4:5d:98:
d1:d1:0b:6c:b8:16:3a:c1:c5:a3:a4:94:f4:6b:d6:d1:0f:8b:
0e:12:86:82:c7:fa:55:66:a5:07:f4:d1:dc:f5:a7:5d:a4:eb:
59:0b:bd:7d:11:d3:a9:94:78:f0:f5:24:58:d1:f1:8d:54:39:
d8:f1:3d:7d:11:d0:6c:ac:d9:01:fa:85:eb:7f:b9:28:bb:5d:
c1:08:6c:3e:da:3b:b9:22:3d:52:3b:0e:ea:39:bd:8e:9d:59:
e7:27:6c:44:90:f2:8b:07:07:dc:dd:c0:49:a4:86:47:0d:a9:
dd:47:ef:8e:72:06:1f:8f:e5:91:4c:4f:20:af:b2:63:05:65:
38:54:6b:55:9f:a5:1f:30:14:3e:9e:f5:d4:dd:e7:65:90:33:
6b:4c:49:66:08:3e:13:6e:25:0f:6d:60:8d:71:a9:b4:11:b7:
26:af:8c:23:a1:85:d2:22:41:11:64:b9:b3:6f:b1:7a:62:51:
1d:70:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:26 2025 by rpki-client