Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier: r2ZPe5Q9zDCeylVR3yF6IQD+kDi1v0YTFlYFnaoGgKU=
Subject key identifier: 38:B8:13:22:ED:56:E4:12:D4:0D:C5:1E:BD:78:B9:A1:A6:D2:32:74
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 01983B04FF9CD3E497D0471FF0B0E9856CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number: 15FA
Signing time: Thu 24 Jul 2025 06:00:39 +0000
Manifest this update: Thu 24 Jul 2025 06:00:39 +0000
Manifest next update: Fri 25 Jul 2025 06:00:39 +0000
Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: ClUeecbXKzvuPvowxgHD4wJxPPZ93JEogJ/VVbvIxxY=)
2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:04:ff:9c:d3:e4:97:d0:47:1f:f0:b0:e9:85:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Jul 24 06:00:39 2025 GMT
Not After : Jul 25 06:00:39 2025 GMT
Subject: CN=38b81322ed56e412d40dc51ebd78b9a1a6d23274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:6d:14:c4:c0:aa:91:80:f9:1f:34:ac:d3:
d2:04:7f:5c:a0:64:53:81:8b:90:dc:f9:4a:0a:89:
c7:05:a8:1a:a1:7a:c5:18:81:c0:9d:3a:e0:b3:3d:
a4:16:f7:0f:8c:55:54:10:a7:b3:fa:c7:fd:d9:8a:
bc:17:69:6f:83:8a:e1:96:26:27:29:93:9b:36:42:
9d:b5:64:a8:0f:b8:62:85:ae:53:86:0c:95:93:41:
49:08:bd:3c:c7:89:27:06:72:d7:5d:92:24:aa:48:
59:2a:cc:b8:69:3a:c1:7a:2e:33:18:37:84:c8:a0:
86:c7:d6:12:9a:38:bc:16:fe:d0:ba:aa:24:55:d1:
08:f7:db:51:82:18:0a:e5:e3:78:da:7d:12:13:e3:
e8:6a:55:6b:70:73:5d:7e:d0:ef:b3:ef:92:8b:27:
cf:bf:71:46:34:df:b1:6e:20:41:70:a1:34:99:d6:
42:d4:0f:c9:b0:eb:53:94:5f:57:91:f1:0b:a5:13:
f8:0d:58:8d:07:0d:1a:7a:52:96:a2:b6:ce:34:ab:
9a:63:e6:cb:d9:2b:35:60:68:d2:fb:cf:3b:f4:eb:
6b:ed:ff:34:69:aa:3c:7c:99:f1:c4:79:f2:d5:08:
cf:c7:86:88:23:5a:55:37:c3:4d:03:24:ce:02:17:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:13:22:ED:56:E4:12:D4:0D:C5:1E:BD:78:B9:A1:A6:D2:32:74
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4c:83:ed:42:83:cd:19:a4:b7:d1:df:32:dc:40:15:39:0e:
84:40:52:c6:f8:0a:a5:17:ce:20:d1:2a:77:e0:d1:bb:50:37:
30:a7:e6:3c:36:b9:d8:6f:64:93:bc:a7:73:e2:69:4b:eb:07:
cd:ca:0a:f3:24:53:a2:19:1d:b6:aa:e4:bc:f0:ea:2e:dd:cb:
70:4e:42:b8:ea:ef:33:86:39:a8:90:1a:eb:92:de:92:7d:ec:
32:1d:02:74:b6:70:e2:f1:3e:fd:a5:89:c0:89:04:a5:9f:ce:
58:22:42:a5:d3:25:15:a8:7d:d4:9e:46:7c:ca:01:98:db:7f:
72:5e:54:44:ff:f3:fb:8a:ad:c7:e8:95:11:f2:16:bb:d0:11:
ec:4d:b8:a7:9c:f3:91:7e:b4:19:e6:4e:14:1f:f3:2b:d8:67:
56:78:07:d6:df:a2:90:42:ea:5f:db:dd:3e:85:86:ba:2b:3e:
d8:3e:07:d1:65:a7:ee:cd:a0:04:f7:0b:68:c8:fb:56:c2:0d:
ac:af:ed:c6:5a:64:5a:fb:08:4c:07:54:b8:c1:4a:60:e8:fd:
a3:00:96:77:7f:42:0c:32:22:28:15:42:6b:e6:07:5a:0b:d8:
61:ae:fe:b7:4c:2d:06:c7:a7:f9:93:73:e8:8f:cf:ba:da:73:
6b:7b:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:22:46 2025 by rpki-client