Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: TsRGFC5clR8crazYsxkEAl09y/aJA67Y2cxGE85JhiE=
Subject key identifier: 8A:AC:46:87:85:B0:79:7C:3D:9E:76:4C:09:BA:93:9B:34:D9:80:70
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 0198808B89E37E35239FC266E9504804CD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 162C
Signing time: Wed 06 Aug 2025 18:01:24 +0000
Manifest this update: Wed 06 Aug 2025 18:01:24 +0000
Manifest next update: Thu 07 Aug 2025 18:01:24 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: dd0YYv6gVPLvnc6U1EoJcWXjUXFcfULb+fECpu2atT0=)
2: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=)
3: ae03YOkS1ofM34wdhj2KqmDyBno.roa (hash: urHsIcZ4xBvpG+piPTKwb+t4LjinRiEgOkguvBfEZMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:89:e3:7e:35:23:9f:c2:66:e9:50:48:04:cd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Aug 6 18:01:24 2025 GMT
Not After : Aug 7 18:01:24 2025 GMT
Subject: CN=8aac468785b0797c3d9e764c09ba939b34d98070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:e0:da:52:d7:5e:37:7d:e6:84:5a:10:0d:
89:4f:e2:da:e0:45:da:70:bb:2a:16:4f:f1:e7:c2:
3a:78:8d:fe:61:fe:12:76:64:c1:57:e6:a9:50:63:
af:95:12:1d:68:cb:1c:8d:69:ea:70:1e:59:81:77:
96:c7:d1:9c:72:f2:52:d7:38:1b:54:b8:31:10:67:
d1:cf:ab:f5:e0:d8:19:87:fe:24:88:6f:b8:ed:b2:
7c:17:22:85:08:9a:82:03:43:86:8c:fa:f6:5d:4a:
cd:f4:77:df:d9:43:5a:b3:08:41:6e:0a:f0:21:0f:
ec:b1:0c:71:ec:0c:52:7a:70:51:dd:59:be:fd:eb:
ac:78:b9:b6:c0:14:32:16:72:59:58:c0:e0:bb:0f:
46:0a:d7:73:71:59:f8:4d:79:12:fe:b5:22:23:42:
a6:79:44:2f:81:44:6d:6d:c0:02:d6:01:0a:5f:a7:
b7:43:c5:2c:6a:20:4c:63:00:06:84:61:41:94:94:
a5:5e:e2:5b:54:5b:43:aa:6f:86:c9:11:5c:36:80:
44:2e:95:cb:e2:15:da:0e:a1:23:8f:c2:8e:b5:05:
ed:d7:b6:5d:2b:d2:c2:9c:e2:bd:0a:cf:c8:2a:34:
09:9a:d5:4e:48:4f:e5:bd:69:2d:81:f0:27:f4:3f:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:46:87:85:B0:79:7C:3D:9E:76:4C:09:BA:93:9B:34:D9:80:70
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:cd:ee:72:d4:20:4b:a2:de:82:f2:99:7d:4e:9c:9d:c2:36:
b9:88:12:fa:30:ce:b7:64:c0:b0:40:e6:d1:39:54:86:e9:d1:
c8:ef:ba:68:e8:1a:99:37:0a:bb:19:29:55:7e:8d:aa:96:cf:
02:3f:45:e1:ef:c2:2f:9e:e6:e3:87:9b:2e:ad:98:a9:22:8b:
d3:45:53:8f:0d:5e:9d:12:35:33:7a:53:1f:fa:8b:e4:59:1e:
35:e2:f4:84:2f:40:11:d2:0f:5b:7a:01:19:c9:2f:7f:7a:c2:
8b:f1:20:91:a3:24:55:73:70:0a:13:2e:c8:3c:9b:11:83:ab:
11:90:ec:be:76:c4:13:32:f3:81:b6:66:d8:c9:f4:eb:27:77:
15:37:b6:09:48:8e:63:5b:97:cc:df:3d:f1:0e:1c:81:71:ea:
0e:0f:e7:8b:75:63:29:d0:2d:14:01:c0:65:fa:4b:38:ee:52:
50:a2:f3:37:6e:5a:c7:72:39:40:8e:1d:2f:0f:86:20:15:df:
d9:b5:9e:08:30:75:bc:10:bd:b5:68:90:76:e2:f3:38:3b:b4:
60:39:b3:b5:46:80:f1:80:81:96:af:88:73:0a:1f:3d:af:2b:
07:7d:93:b6:70:98:3e:7c:c2:24:1c:41:65:8f:32:fc:52:d6:
2a:26:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:05:34 2025 by rpki-client