Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: 8AuDSvwKerwtDXxQ3QIBL0xTMSplh7+cm7pxoqod1lk=
Subject key identifier: 58:3C:63:7F:6F:CD:8D:D2:39:ED:E1:00:A9:CF:A5:9B:6E:AB:8A:57
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 0198763E4E1BD1FB6DD1D0B946808FFD84BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 12E6
Signing time: Mon 04 Aug 2025 18:00:51 +0000
Manifest this update: Mon 04 Aug 2025 18:00:51 +0000
Manifest next update: Tue 05 Aug 2025 18:00:51 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: 6q6yV7j6drZWlaDZBSU3BujgD/I800uYMIt+u7GgJM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:3e:4e:1b:d1:fb:6d:d1:d0:b9:46:80:8f:fd:84:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Aug 4 18:00:51 2025 GMT
Not After : Aug 5 18:00:51 2025 GMT
Subject: CN=583c637f6fcd8dd239ede100a9cfa59b6eab8a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:6d:17:7b:04:00:64:11:aa:29:1f:91:e4:
9f:66:c0:fc:6d:3d:05:ee:19:3f:a4:61:15:e1:c3:
79:22:a9:59:c4:28:41:40:ad:1e:42:c5:0e:bf:ef:
41:52:09:92:83:30:77:3e:78:d1:96:3a:99:f0:39:
04:64:3c:5c:ab:5c:47:eb:5d:7b:c3:8a:ce:62:c8:
be:e4:ce:10:51:57:96:49:45:33:42:c0:c1:bf:7f:
90:4c:87:b5:08:52:9a:1f:3a:9d:40:19:24:f1:a1:
c3:79:db:04:c6:d2:4f:79:ca:36:74:eb:fa:ed:06:
30:48:8b:2a:1c:42:df:5f:da:27:d3:c1:10:50:0d:
e5:fa:f6:1e:e4:ea:d2:3b:4a:6d:ce:71:4c:c7:2a:
91:27:e7:6f:79:67:2c:26:56:f7:fc:33:6a:c9:3c:
9b:fa:1b:02:35:14:c7:eb:31:a0:ac:ae:96:b9:af:
76:e9:a7:ae:14:d4:9f:16:73:92:cf:10:65:76:e9:
a7:52:d3:c3:61:2f:97:15:e1:fc:8d:9b:59:81:06:
8b:87:62:cd:43:6b:58:45:04:bd:55:85:a5:23:2e:
2a:6a:de:43:49:27:75:d5:49:0e:fa:db:85:6d:a0:
64:37:49:8b:f3:1d:3f:cb:15:09:f9:1f:5a:45:6e:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3C:63:7F:6F:CD:8D:D2:39:ED:E1:00:A9:CF:A5:9B:6E:AB:8A:57
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0a:49:0a:05:d5:80:43:e2:d5:ff:79:a3:f7:1e:d4:6a:61:
88:f8:10:e8:93:03:9b:6c:07:82:e2:93:ad:1f:58:56:b5:33:
95:04:36:f6:1a:6e:67:77:6e:25:2d:e4:f1:91:06:5c:a7:42:
bf:6c:4c:4e:34:cc:0f:54:16:04:34:04:c9:d1:58:c9:40:8d:
2f:90:88:12:20:f8:4c:b0:e3:7d:34:e1:06:54:e8:b1:36:8a:
ca:f8:18:a1:7f:00:77:03:c3:93:8e:5e:fa:ab:51:62:2c:43:
d9:d9:d5:63:c8:77:55:55:d6:5b:1d:ea:19:bb:4e:c5:9e:44:
be:32:b2:00:fd:d1:e0:2a:c1:ea:c0:0c:bf:b5:c9:f5:9c:d4:
72:7e:49:1c:8f:7e:e5:26:19:74:f7:33:7b:ed:4e:17:99:e9:
5b:ff:2e:4f:6f:70:9c:76:04:5a:c7:51:76:3a:e2:b7:d7:d0:
65:b6:aa:21:38:63:9b:9a:8c:a3:96:51:c3:dc:e0:59:46:fb:
d5:68:d0:28:71:56:32:65:92:0a:e3:53:a0:44:11:c1:a7:c0:
ca:14:5d:df:3d:12:50:69:ea:81:f1:2b:c0:44:7c:90:01:13:
67:61:2f:f4:a6:4c:40:a2:1e:9b:0e:66:b5:9c:9c:24:85:6c:
51:2d:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:55 2025 by rpki-client