Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: gfkYFzPiGLGCiBymycD4a7Axb+qEGiBxBxFHAO2D8QM=
Subject key identifier: F6:76:64:E3:A6:51:56:C3:C5:B9:BA:76:53:B5:B0:D5:D1:DC:41:B0
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 019842199700A117A0BF12368C5198BF1CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 15:00:29 +0000
Manifest this update: Fri 25 Jul 2025 15:00:29 +0000
Manifest next update: Sat 26 Jul 2025 15:00:29 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: bHf+tW5JLRzEdayyE9EfkAjKIb6wa9xHjwbU9cqfjWc=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:19:97:00:a1:17:a0:bf:12:36:8c:51:98:bf:1c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Jul 25 15:00:29 2025 GMT
Not After : Jul 26 15:00:29 2025 GMT
Subject: CN=f67664e3a65156c3c5b9ba7653b5b0d5d1dc41b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:46:8a:72:93:ab:f6:91:49:bd:2c:b5:15:
29:04:3a:32:c0:e1:77:34:b9:2a:f4:f6:70:7b:a2:
5f:82:02:4e:f9:19:2a:d3:dc:d5:c1:79:42:9f:8f:
32:04:7f:e1:5a:d6:85:7d:b3:88:f6:94:68:36:ac:
2c:ed:69:7a:24:c6:82:d7:71:ca:94:f5:e2:95:d5:
a7:3c:ea:e3:56:c8:ca:db:6d:47:62:b8:70:0e:a1:
1c:fc:5a:f2:de:b6:e4:56:1a:93:7c:22:cc:98:ec:
6f:6f:c5:f4:8c:64:6d:cf:a2:7d:49:11:b4:50:c0:
8f:7c:4f:86:fd:99:98:98:8c:5e:cc:d1:0f:63:f9:
55:52:02:7b:28:5e:d9:98:76:fd:cb:cf:4d:08:66:
5a:0a:05:65:ef:5e:91:53:ec:d1:9d:b6:3d:07:fe:
02:72:da:22:df:f5:42:cc:60:c9:72:c6:b4:d3:db:
ce:f7:cf:81:29:66:48:b0:e3:1d:b9:e4:59:3b:c7:
7e:a4:7d:29:c8:bc:96:df:b6:ec:bc:7b:62:04:a4:
a1:3e:cd:8d:ff:38:1c:42:4c:0c:7e:1d:23:85:be:
ff:cd:1c:c8:13:3e:e9:a7:b5:e4:71:c9:0d:a9:7e:
a3:bb:da:8e:f4:ca:97:84:e2:1c:37:88:f6:44:d2:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:64:E3:A6:51:56:C3:C5:B9:BA:76:53:B5:B0:D5:D1:DC:41:B0
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9d:24:20:24:ab:1a:b2:85:c8:f4:e7:b7:df:c8:1f:6d:fc:
63:04:c8:31:98:59:3e:1b:e3:f6:0b:39:b1:05:1f:54:51:86:
6c:7a:7a:77:24:d9:a9:47:d7:26:68:8f:bb:1a:41:18:4a:b9:
e9:c0:18:63:39:51:52:33:6e:65:71:63:dd:99:5a:f0:99:6d:
df:e7:4f:3f:77:cd:59:f1:e2:8d:64:c0:82:c1:8d:ff:8e:b8:
5f:7a:2a:31:b8:6b:d6:b6:59:0c:d8:91:ed:ce:da:13:e1:f9:
20:52:1a:7c:b6:9b:59:b9:12:ec:1f:ef:ab:16:e4:44:da:8a:
55:3d:a1:9b:b4:d9:91:1e:cb:bf:ee:be:83:bf:bf:49:90:17:
56:15:72:31:05:02:3b:4a:d6:ef:ae:31:b4:46:9b:b9:bc:d7:
87:61:a7:60:60:22:09:4d:5a:6b:51:da:07:ef:ad:d2:54:82:
fe:4d:a5:fb:10:7e:3f:b5:a0:8b:df:6f:af:ff:12:82:13:71:
ad:ec:48:66:7c:d9:3e:7c:2b:75:b0:a4:09:4d:21:8c:7d:ec:
39:f9:30:ec:09:f0:38:ca:e3:f3:c2:a6:f6:70:2b:b4:f4:72:
63:c4:13:30:cc:96:23:a4:e7:1b:1d:c6:58:5e:be:da:94:d7:
64:59:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:30:52 2025 by rpki-client