Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier: TqxiCkmB9NOmdNP8gSH8u1KQLbVpkNConrVIOKCGqec=
Subject key identifier: 2A:24:D4:DF:AF:34:8D:20:C5:17:A7:BE:50:83:78:E7:49:BA:E6:B6
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial: 01988B1067C757F902D3B8DF060E1AA75DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:02:44 +0000
Manifest this update: Fri 08 Aug 2025 19:02:44 +0000
Manifest next update: Sat 09 Aug 2025 19:02:44 +0000
Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: nrewYJRyHKqm898ozpqrT2s0WUh9fnGJj/OgcB8XocM=)
2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:67:c7:57:f9:02:d3:b8:df:06:0e:1a:a7:5d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Validity
Not Before: Aug 8 19:02:44 2025 GMT
Not After : Aug 9 19:02:44 2025 GMT
Subject: CN=2a24d4dfaf348d20c517a7be508378e749bae6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:ce:02:d1:7e:15:29:d8:0e:df:54:55:e1:
0e:7e:90:69:dc:89:d4:e4:69:f4:6f:bf:e8:46:1c:
d4:be:11:43:9a:4d:67:c5:5a:c0:93:37:c6:99:73:
4a:10:17:74:40:d1:0c:55:6b:ab:d6:35:00:e5:bb:
11:4f:93:38:1a:92:7b:63:2d:7a:72:a5:ef:8c:a4:
66:9b:ae:0f:44:1c:67:4c:65:9d:6b:f3:31:93:47:
ea:5e:0a:5b:f9:fc:4e:a9:8e:d0:f4:e0:26:23:d0:
7b:a6:5d:58:b4:e9:20:3e:8b:9e:2d:62:c3:0f:f1:
9c:3f:9a:6b:ea:2d:0a:e3:0c:8b:75:16:85:7a:3e:
2e:62:e6:50:4d:f7:b9:18:a6:20:56:ca:45:60:83:
26:f5:f0:be:05:a0:be:be:3f:b9:76:9a:9e:fa:a1:
65:6f:a9:17:30:73:a9:56:45:00:d7:a2:3b:14:c1:
b5:d4:d2:f5:ac:a6:ef:77:c3:6b:0d:0a:05:1e:77:
db:f2:52:3f:89:0f:6f:9c:0f:13:3c:a9:fe:70:30:
24:6f:dd:50:01:05:f0:31:1d:05:73:10:7e:95:eb:
3f:c1:8c:7c:57:1a:81:a3:52:05:fa:a4:1f:90:9b:
97:0d:b5:b0:60:a6:4b:04:45:31:4c:38:f3:d5:96:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:24:D4:DF:AF:34:8D:20:C5:17:A7:BE:50:83:78:E7:49:BA:E6:B6
X509v3 Authority Key Identifier:
keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:64:08:29:c3:bb:37:0d:67:b7:ed:00:61:fa:e6:f7:03:
2a:0b:f6:11:a2:ce:e8:67:ff:e5:19:14:0d:9e:f0:49:a7:58:
8d:88:04:33:9c:81:92:2d:7f:81:da:e3:a8:29:ea:cc:5e:f8:
fa:37:13:dc:98:b0:25:d4:e4:89:5e:c8:5b:aa:e1:c6:75:ca:
f5:f3:03:f2:06:b2:d6:83:1c:28:dd:d9:8a:83:72:41:ab:fd:
13:a9:4d:84:00:99:4a:1a:62:78:f1:f3:c6:1f:29:a1:a1:5c:
d9:e6:b3:35:71:bb:ba:2c:e0:cc:23:af:37:55:12:ef:fd:a6:
ab:97:79:82:89:ea:c6:43:7e:32:07:e9:2e:2a:04:e6:94:6b:
58:92:68:4d:b6:0f:11:b2:00:c5:31:7d:4b:5d:60:f9:24:29:
5c:05:7a:e3:00:b1:b1:59:0a:9d:8d:3a:7d:a1:28:37:12:42:
90:79:4d:c3:12:8f:af:1d:80:ad:e6:b1:ef:e4:93:be:ab:e7:
99:ef:07:03:b9:f3:cb:49:89:25:8d:14:67:c4:09:6e:9f:d2:
b6:06:49:3f:76:1c:32:0f:13:2b:61:e7:63:fa:c3:85:89:d4:
f3:2d:5e:07:f1:08:12:53:a0:4a:b0:09:34:ff:05:c5:5a:bb:
55:34:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:17 2025 by rpki-client