Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: 42MdwX8XAWbAGkROnNZdHncQGGgHDhDJPWca5bucDiw=
Subject key identifier: 8A:09:AF:8E:0E:91:A7:7B:92:0F:7A:B1:21:B4:1A:43:3D:A3:B9:23
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 0198469B527D4154220414EB7EE6ECD92FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 0162
Signing time: Sat 26 Jul 2025 12:00:41 +0000
Manifest this update: Sat 26 Jul 2025 12:00:41 +0000
Manifest next update: Sun 27 Jul 2025 12:00:41 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: TZLn99GmQl05fNz2iHSVDdiJ8ybLR/r8Y/jELx5juvw=)
2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:52:7d:41:54:22:04:14:eb:7e:e6:ec:d9:2f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Jul 26 12:00:41 2025 GMT
Not After : Jul 27 12:00:41 2025 GMT
Subject: CN=8a09af8e0e91a77b920f7ab121b41a433da3b923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:be:42:9f:11:e4:51:8f:dd:b8:dd:d5:20:
59:eb:97:41:93:8e:3f:ba:a3:34:65:d6:36:85:f1:
2c:82:d8:b7:af:33:47:05:3a:70:72:38:72:c5:df:
26:07:be:3e:e8:34:32:1b:cf:39:a2:49:1c:5e:93:
7c:9d:cb:8f:36:a2:91:2e:2d:82:bf:bf:86:95:82:
b1:84:30:7d:ab:6a:4c:30:2e:e2:58:a9:a4:0f:3b:
bf:1e:6c:5f:84:a2:52:11:6c:37:18:5c:46:64:fe:
ea:71:e9:ed:21:a3:99:90:aa:c1:60:97:8f:41:d8:
28:31:09:44:35:1b:46:67:9f:12:0a:2f:c7:9b:4c:
f5:4f:ff:5f:15:76:49:5e:84:ff:d1:6e:6a:2b:af:
a9:9e:a4:c9:48:31:08:ac:3b:a4:7e:ae:f1:dd:50:
4a:b1:af:e6:2e:55:4d:ed:5d:ad:18:ea:15:b8:d6:
5e:29:09:c7:00:3a:74:0b:0e:b5:c2:aa:1d:62:c2:
0b:30:e9:98:17:dc:5f:42:49:cb:a9:5b:d5:c1:3f:
b5:5d:66:8a:ff:51:9d:b8:64:3c:29:38:2a:a0:9d:
19:5f:b2:6a:cd:55:80:c4:8a:8e:7d:c0:15:f3:8d:
4a:eb:48:87:0d:4d:5c:5b:a5:e5:be:e1:ec:a3:2b:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:AF:8E:0E:91:A7:7B:92:0F:7A:B1:21:B4:1A:43:3D:A3:B9:23
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3c:01:34:ce:4e:71:79:20:b4:c3:5f:d0:d6:a0:61:d2:f1:
d6:53:5b:02:5f:2f:08:11:87:85:9e:4d:17:8d:4a:1e:57:6a:
2f:74:5e:91:78:79:a4:2b:f8:e6:bb:1b:5a:0b:fc:32:3c:62:
0f:64:c9:79:3e:35:65:a9:59:46:26:c6:aa:1f:c2:76:57:39:
c0:b3:66:f8:4b:e9:31:d1:a1:ad:99:ea:8f:10:d5:df:ff:68:
82:83:d4:08:9c:1a:18:88:97:be:93:3d:27:db:03:8a:d6:b9:
6d:61:26:c5:3a:d7:c8:47:81:c5:30:3c:f5:96:ba:a3:c9:32:
51:d5:a9:d7:f5:31:bc:33:df:5a:e6:e2:44:65:f5:e1:9d:29:
92:cf:dd:c8:86:49:56:49:bc:54:d3:31:a7:65:47:03:21:e6:
ae:ba:ca:09:46:86:63:60:02:d4:62:f6:af:9c:5c:99:19:e2:
47:8e:73:c7:ba:0e:43:4a:85:03:a2:53:29:61:ab:a0:13:2f:
a5:52:6d:75:7e:71:cc:01:76:a4:dc:95:94:08:a7:58:f9:90:
09:74:7f:2b:91:03:09:83:b7:23:94:94:36:d5:8b:5b:f8:f5:
a1:66:f7:58:da:1d:24:47:32:31:8d:ad:ec:1e:18:ca:f4:75:
e3:39:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:37:15 2025 by rpki-client