Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: LEp4h3cZg62dc0JEteF5iYr2z7uTUXXk29wTeUiNfw4=
Subject key identifier: 23:FC:41:1C:1B:C2:0A:54:80:45:B9:A2:9C:AD:43:02:81:81:FF:4A
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 01984889E5BA0C6930A20B36A9D214A67864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 21:00:53 +0000
Manifest this update: Sat 26 Jul 2025 21:00:53 +0000
Manifest next update: Sun 27 Jul 2025 21:00:53 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: HL5TKMGinyBRi/ew60XwMO86Px4nE7GwEzuwbi+77kM=)
2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:e5:ba:0c:69:30:a2:0b:36:a9:d2:14:a6:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Jul 26 21:00:53 2025 GMT
Not After : Jul 27 21:00:53 2025 GMT
Subject: CN=23fc411c1bc20a548045b9a29cad43028181ff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:f3:26:3e:d5:51:78:e6:48:2c:b5:81:95:
1d:b1:81:a4:8c:8e:8e:b1:4d:16:ec:1c:2a:6a:7c:
ee:92:f9:2c:f5:9b:c5:1f:a0:49:be:c9:da:5f:ac:
56:95:ae:14:db:af:8a:6f:46:2e:ee:f3:80:1f:2e:
65:4b:37:32:fa:1e:45:21:b1:cd:67:68:37:5c:a9:
b6:0c:9b:a4:1d:9b:e5:3b:9b:bf:c3:23:98:a4:67:
00:7f:22:b4:de:fc:b6:73:cc:67:82:d3:90:56:4f:
75:4f:7e:42:41:90:89:aa:1c:60:a1:02:bc:ca:78:
78:40:5f:cb:c5:b1:a8:9c:38:f2:aa:df:f6:46:11:
a4:2a:93:f4:b3:e4:6d:12:1c:b1:a7:5b:23:17:52:
2f:4c:cd:7b:70:99:a9:28:5d:be:d9:7b:42:9d:94:
de:33:9b:81:0d:9c:f0:ad:e8:9f:2c:6f:6f:91:23:
2b:f2:28:55:31:fe:f0:b5:7f:c8:61:2a:4d:b4:d4:
7e:c3:fa:db:0f:d7:52:33:ff:f4:db:b1:9f:63:a3:
72:a3:3d:f6:e4:b4:aa:fb:4b:d0:0d:ff:60:9a:85:
65:ab:9e:f1:ca:c7:93:0c:9c:2e:b8:b5:c9:72:e2:
8a:80:78:af:38:43:f0:7e:e3:16:bb:7c:03:02:43:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:41:1C:1B:C2:0A:54:80:45:B9:A2:9C:AD:43:02:81:81:FF:4A
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f7:d1:70:7b:46:d4:89:6d:d3:a1:6b:0f:68:50:1c:19:59:
7f:de:6d:74:97:7b:2c:e2:28:3e:45:d4:8e:aa:21:22:1c:cc:
44:07:c3:5b:c2:6a:d6:ce:c7:22:8b:2c:40:e9:c7:5a:f4:4c:
52:6d:89:26:6a:ff:64:fc:b3:37:ad:7e:34:78:c0:0b:be:49:
cc:3a:20:de:d8:f7:bb:b4:5c:69:01:6d:44:00:2e:1f:cc:0e:
68:84:e7:46:c8:9a:8d:5a:d9:65:c8:81:3a:aa:0d:6a:1d:d8:
cd:69:b5:75:c1:50:e5:b4:7d:c3:20:35:7a:ce:c3:49:97:f8:
4b:2f:2b:ad:b4:3c:98:9f:39:a1:1a:53:6d:8f:68:20:44:70:
da:0e:fc:9d:27:0c:03:c8:da:4c:a7:82:41:53:62:97:3f:aa:
24:8c:70:b6:64:af:e8:7b:40:60:ef:7c:5a:7b:e3:75:de:4b:
30:7c:43:3c:6e:6d:40:d5:16:2c:4e:d7:0a:b7:9c:f3:1e:f7:
35:ab:cf:07:d8:df:fe:b8:a2:cd:fc:8d:22:38:ad:90:4b:d2:
2b:59:a8:1e:2b:53:fe:db:92:bf:92:f3:4b:32:d5:0a:9e:86:
d3:03:da:ef:57:c6:5a:b3:f7:88:74:4b:23:36:ae:da:b3:35:
95:55:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:30:26 2025 by rpki-client