Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.mft (raw, json)
Hash identifier: H2lKC0QKAQbi0KQleIssdULUeFzLNAA0gbB1qnZImOM=
Subject key identifier: F7:66:EC:7C:47:25:AB:F9:76:7E:92:6D:5E:AD:87:A3:18:AA:C1:DD
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 01984062035EA78529DBD5C444BA5343505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
Manifest number: 0C4A
Signing time: Fri 25 Jul 2025 07:00:21 +0000
Manifest this update: Fri 25 Jul 2025 07:00:21 +0000
Manifest next update: Sat 26 Jul 2025 07:00:21 +0000
Files and hashes: 1: 8aqhbd2NihLf0OUyEXA62VLjshQ.crl (hash: XXMBtd6uEX+N7Yhklt1ytfAm1jraUslX9eah0ZErO8Y=)
2: lU08unvCcfUmoq9nA8rwwc_EGrY.roa (hash: r4fF+/jooZGKRffBCLRbLiandhCNSPTtKJ/Y1slqur8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:62:03:5e:a7:85:29:db:d5:c4:44:ba:53:43:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: Jul 25 07:00:21 2025 GMT
Not After : Jul 26 07:00:21 2025 GMT
Subject: CN=f766ec7c4725abf9767e926d5ead87a318aac1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:53:e6:41:68:b0:cb:52:f7:96:b2:d2:ea:
58:99:ff:a9:aa:48:7f:4f:e0:ea:a1:b1:cd:9f:c1:
55:60:74:d5:e6:26:5a:f3:d5:cd:8b:d1:a0:ab:23:
38:c5:c4:4d:8d:df:dc:8d:eb:01:73:5c:4d:0d:fb:
7e:45:8a:ac:48:23:68:74:70:ea:22:51:3d:1a:2d:
d1:57:3f:cc:02:b3:08:c7:2f:74:5b:e8:b9:dc:47:
e6:dd:06:c0:19:cb:20:25:2f:b1:82:9a:41:d2:4b:
57:87:91:4d:89:3e:0d:aa:29:95:e4:17:7c:60:ff:
a0:61:69:42:78:f5:3a:33:36:d5:26:3b:ac:f1:36:
50:8a:f8:e3:36:a3:9a:17:f6:da:8c:90:ff:bd:ab:
cd:1b:2f:66:cc:04:40:88:e4:17:ad:83:8c:f1:2d:
d7:57:79:f6:b1:78:a3:8f:05:69:f7:30:64:05:90:
47:c4:71:6b:81:2f:cf:c6:8e:5d:2a:27:7c:60:bc:
6b:b7:a7:e7:c7:10:b3:e5:38:0e:76:11:dd:38:48:
43:6f:12:aa:a9:de:63:7d:c6:30:01:36:4b:14:8f:
9a:e0:a2:30:bf:0d:11:ed:26:86:34:44:01:42:b5:
b7:6b:c3:a6:c5:9e:af:76:42:de:e8:f4:05:a2:51:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:66:EC:7C:47:25:AB:F9:76:7E:92:6D:5E:AD:87:A3:18:AA:C1:DD
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:82:c5:eb:87:79:6e:06:bb:46:ee:3f:7f:55:10:1b:8c:00:
21:b5:1a:8f:d1:a8:4b:73:2b:4b:94:f0:60:47:34:89:c6:4a:
9b:2a:d6:c2:1b:ea:82:12:75:04:aa:b3:62:69:03:55:1c:9b:
20:28:9b:19:cc:d8:4f:2d:60:b1:ad:96:1f:1f:81:90:94:36:
da:e6:a3:ff:5d:48:55:7e:69:e9:39:c4:6c:d3:ee:13:64:7f:
60:24:0d:6d:67:72:d6:e0:54:c3:db:7e:1a:b5:d4:c6:9f:8c:
cd:46:f2:bf:0f:99:88:47:c6:48:07:fb:d1:e7:06:3c:97:a6:
65:15:7e:59:c3:0b:f2:53:ba:45:d7:ee:ce:7d:c5:1a:69:4c:
76:4c:e6:23:5e:e1:2b:45:a6:9b:df:92:b2:74:05:67:e5:6b:
c8:6c:24:ae:25:53:fb:18:f7:13:8c:2e:bb:86:81:19:98:55:
20:ca:92:59:40:10:04:7f:7d:59:ce:8b:0a:39:83:b1:37:59:
3b:f6:02:98:fe:2d:d6:68:9c:e4:37:35:6d:38:76:78:40:e6:
49:b5:4e:7f:b8:00:8e:07:78:e5:b4:0c:e2:32:1d:e1:4e:71:
50:9f:0d:55:e6:0b:0f:43:fa:a0:e4:37:78:12:06:20:49:b6:
77:9a:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:41:47 2025 by rpki-client