Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File: 8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier: HyhH8M1z6XJg5GKr5hHfylucq6dkumhqH1mQ+fbaZJ8=
Subject key identifier: 94:D8:94:A5:BB:DA:79:E9:FC:17:CC:5C:4C:07:15:0B:34:09:B9:BD
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 01987306F8FCAFD4571E3C1E5E64E5AA6EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number: 0A9B
Signing time: Mon 04 Aug 2025 03:01:33 +0000
Manifest this update: Mon 04 Aug 2025 03:01:33 +0000
Manifest next update: Tue 05 Aug 2025 03:01:33 +0000
Files and hashes: 1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: 7ZlDhwwATMZA8xtx9n1Yyc/npTZxM2qrbyx2r8XZDv8=)
2: Bb-dCG0MYANSL8Bk5tQCjYBHu7I.roa (hash: 0dT55FR6gYNAR7wtBsJy+EY1xVBw/famE9UI3Od2H8A=)
3: K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa (hash: 2dlcOZzL+Eim7W+NTEiKqnv/Tt9OOEdX1RMt+wWQD9U=)
4: hwiO597jiOerCy1jD6kKNf_z4mE.roa (hash: At2Ig8rywEMbpAnMXYd8IjR4QLHdmR+nptBnEkQohjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:f8:fc:af:d4:57:1e:3c:1e:5e:64:e5:aa:6e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Aug 4 03:01:33 2025 GMT
Not After : Aug 5 03:01:33 2025 GMT
Subject: CN=94d894a5bbda79e9fc17cc5c4c07150b3409b9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:b3:5a:7b:d5:42:49:3e:5e:31:59:10:4c:
5d:74:47:0c:8d:f1:9f:7c:a2:3e:16:02:42:0e:f8:
ae:03:91:6b:c6:de:b6:54:e4:9e:1b:99:fd:e2:31:
c4:27:9d:f6:09:a0:24:15:d3:f8:43:f3:bb:7e:45:
9d:24:4d:fc:17:8e:89:c2:3e:c9:5b:10:bd:5a:a7:
42:38:47:1a:ef:de:db:b7:da:6a:5c:f9:21:ff:f3:
0b:0e:70:ec:15:48:06:91:9d:15:74:02:4b:4a:d1:
1d:b3:9d:d3:0d:46:f5:59:19:1f:3a:dc:f7:17:92:
fe:94:f0:b3:58:16:aa:2d:30:b3:2c:84:10:bf:22:
12:4c:e8:49:65:e7:63:28:1a:5d:62:7e:25:93:ac:
b1:b3:2e:42:9e:4f:10:a0:bb:a5:02:65:c9:e1:04:
40:b3:cc:eb:a8:83:ee:7a:f1:3b:73:09:61:67:9d:
d2:1e:d3:74:fc:98:03:68:45:24:c4:9e:19:3e:ef:
b4:fc:26:29:df:b3:1e:4e:85:97:80:b2:7c:6e:e9:
e3:ef:17:d5:f3:95:c2:4c:14:8a:e8:4a:a7:98:ab:
0c:53:6e:7b:f0:a1:f6:ff:be:60:4f:97:17:d5:b3:
38:f0:fb:f9:5d:bc:83:e7:89:89:c6:f5:7a:a3:b1:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:94:A5:BB:DA:79:E9:FC:17:CC:5C:4C:07:15:0B:34:09:B9:BD
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:04:81:4a:26:92:75:82:64:94:ea:00:75:97:42:3e:f4:d7:
94:38:da:6d:56:04:67:37:a8:f4:31:64:3b:58:9c:db:2f:a0:
1e:82:9d:3f:70:0d:65:d3:74:ba:1f:10:9e:41:86:bc:ab:16:
b1:83:43:6b:56:0d:e9:30:f8:b2:af:1e:5e:e6:52:5a:70:cf:
62:7e:80:37:67:2c:87:88:b1:20:d4:61:aa:b8:c2:19:dd:32:
7d:1f:5d:6f:b2:66:53:8d:58:65:53:4a:c8:3c:f3:4b:c7:c7:
60:06:9e:77:44:0e:22:49:88:49:bf:08:db:35:c2:e3:ff:da:
5a:69:70:de:86:36:33:96:e5:dc:08:70:18:1c:46:bd:87:8e:
19:22:c5:e5:a2:99:13:4d:50:b8:2b:b8:82:bc:ec:4c:2e:8f:
89:a3:df:6b:7f:46:17:36:73:34:26:29:1d:33:65:0b:b2:ac:
76:6e:84:e9:f0:84:89:4c:ab:d4:91:42:04:e8:10:eb:09:fd:
91:3c:08:e8:bd:ac:dd:9c:38:e5:54:e5:4b:90:bf:41:d8:0f:
f1:f4:e1:be:4c:7e:73:27:8a:b0:a5:71:45:78:c6:20:e5:d7:
78:80:bb:ff:ff:d5:6f:2b:63:fb:8a:1c:6b:d6:b0:9d:19:8f:
12:17:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:51 2025 by rpki-client