Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: 7OJpyHEWUZI7G/s18EF5NZ5BsHZNETpGus/AKKrIghU=
Subject key identifier: 6C:61:EC:02:C5:03:EF:E2:50:CB:BE:E7:C9:34:1A:63:55:C5:6D:66
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 0198A04CB2BFA11D4224550AD118401A6DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0D23
Signing time: Tue 12 Aug 2025 22:00:37 +0000
Manifest this update: Tue 12 Aug 2025 22:00:37 +0000
Manifest next update: Wed 13 Aug 2025 22:00:37 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: OHTX4iqAtT8zS9bXFeH1aOyEPBrXM7P77PcqYTALGIU=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:b2:bf:a1:1d:42:24:55:0a:d1:18:40:1a:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Aug 12 22:00:37 2025 GMT
Not After : Aug 13 22:00:37 2025 GMT
Subject: CN=6c61ec02c503efe250cbbee7c9341a6355c56d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:58:79:7b:4d:f4:4b:1b:18:db:b1:4b:27:
64:ce:f5:b1:ed:0c:ee:ae:7a:36:c9:76:f9:d7:9b:
be:47:c0:8b:6e:ff:78:46:3b:57:71:6f:09:b0:0d:
07:41:d5:34:d6:e7:5a:49:4d:d6:92:40:fb:9e:72:
d0:d7:88:81:23:a0:18:82:5c:a1:f5:76:93:f7:06:
68:3a:1c:3e:6f:06:72:aa:54:1b:b0:74:04:5d:09:
84:91:06:79:db:ba:74:db:01:50:ab:66:85:de:0d:
67:c7:2e:f3:23:27:e9:cc:79:19:4f:fc:42:53:0d:
6b:54:65:bb:ab:ca:e4:bf:28:5f:87:d3:6c:3a:f8:
97:88:9e:a3:52:41:70:87:02:42:77:68:14:78:ad:
15:9a:19:dc:10:2f:bf:57:64:cc:2d:a3:cd:7c:b4:
e7:60:d4:a6:ae:61:c9:05:0f:b7:ef:98:d0:88:18:
44:69:ff:54:ed:ff:3e:aa:0a:a9:b1:2d:88:20:6e:
62:14:a4:42:4e:6d:07:08:e7:32:bd:5e:60:14:88:
81:8c:86:5a:92:fe:da:ec:ef:f3:f9:a8:92:bf:2e:
96:91:7c:fe:06:15:72:8a:7a:ae:a6:b9:22:0b:3a:
0a:0e:b9:d2:85:9b:7c:56:6b:19:9c:1f:18:e2:6a:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:EC:02:C5:03:EF:E2:50:CB:BE:E7:C9:34:1A:63:55:C5:6D:66
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a4:a2:85:2e:1e:f4:53:4b:50:3c:58:b0:b3:df:c4:3d:15:
60:c7:62:61:2e:9f:99:dc:62:70:26:b0:20:07:40:56:57:9c:
24:da:4a:8f:55:91:e1:5d:1c:88:df:c3:3d:ce:3a:9a:7f:9d:
52:ff:28:2e:71:da:91:de:1b:55:eb:42:49:85:11:da:db:fe:
09:b9:10:04:96:08:e9:53:6d:4f:b2:18:85:b9:d1:7e:69:b0:
5b:8c:be:37:0e:17:b2:53:6b:aa:13:01:01:c2:96:dd:20:d2:
35:33:1a:ea:22:51:de:24:c3:01:43:2b:c3:7a:af:9c:45:e5:
f4:2b:e1:d3:f7:ec:10:33:46:0f:67:0e:5e:a5:45:64:36:8f:
68:b6:ed:48:6e:22:04:57:a3:21:4d:c6:5c:5c:18:b0:6f:06:
d9:db:ca:f4:30:45:e4:d0:e9:34:12:56:e1:50:6e:64:d3:2d:
b4:b8:10:13:ec:ef:06:e2:16:64:ac:71:82:9d:52:34:00:a2:
17:2c:ce:c6:58:58:29:3c:46:54:21:64:85:4e:3f:1c:19:9f:
eb:91:d1:22:b1:7f:30:14:62:e4:62:f3:6c:cb:e6:22:b2:be:
0f:ad:eb:53:57:9e:cb:05:b2:9e:65:34:9f:21:10:75:a8:f8:
e8:c1:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:46 2025 by rpki-client