Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: NPgY6Fcw8qY1GzSTRCqBx+uIZvwTnkSODZvXpS+4OaI=
Subject key identifier: 86:F8:9A:35:8F:0A:9C:67:F3:ED:E2:7F:BB:89:9D:E5:00:B5:B8:EB
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 0198394D4D5DF3755AE3979535BD7A72A874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 0E8A
Signing time: Wed 23 Jul 2025 22:00:24 +0000
Manifest this update: Wed 23 Jul 2025 22:00:24 +0000
Manifest next update: Thu 24 Jul 2025 22:00:24 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: O/UEIa4++Gmho8Hf4AnYI8Xsjld9AjFgQyf/0ePTiAA=)
2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=)
3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:4d:5d:f3:75:5a:e3:97:95:35:bd:7a:72:a8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jul 23 22:00:24 2025 GMT
Not After : Jul 24 22:00:24 2025 GMT
Subject: CN=86f89a358f0a9c67f3ede27fbb899de500b5b8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:10:55:5e:eb:ac:83:8b:d8:69:36:63:7f:
d5:6b:ae:2e:9a:89:33:56:91:ba:cd:69:95:a5:d7:
6b:bf:97:30:53:2d:2c:98:22:82:44:fb:23:04:00:
4f:28:72:ec:30:9b:cd:af:2d:1c:18:3b:b6:93:a7:
0c:1c:04:e3:b2:b8:5c:03:17:99:a8:9e:d1:96:25:
8a:71:c6:86:2f:7b:25:76:2b:6e:2d:a0:67:6c:69:
0f:03:19:33:7c:8c:fc:ef:13:74:93:a1:93:10:0a:
46:15:ec:49:d2:ca:9f:ed:c4:6b:2c:04:23:cb:db:
3c:31:a9:2e:ce:3a:fa:b2:3d:01:c6:a1:91:28:f9:
90:7f:2e:d7:b7:5c:55:59:8c:02:a1:d8:04:7e:97:
97:df:dd:b0:3f:80:83:c4:b3:a4:2f:f7:cb:72:64:
3b:04:de:04:81:07:cb:4f:72:74:c1:a7:77:bf:50:
1f:89:0e:1e:7e:07:2f:6b:2d:e3:10:62:ed:1f:f7:
5d:4b:18:05:81:4b:5c:ca:08:34:f8:23:5f:62:38:
01:5d:d6:ea:68:5a:3a:68:bb:e8:43:cc:15:63:5f:
bc:c8:b6:16:08:d0:71:97:1e:bf:fd:cc:1a:d7:3e:
20:b6:d7:40:6e:91:d4:57:0f:82:7c:4f:13:ac:67:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F8:9A:35:8F:0A:9C:67:F3:ED:E2:7F:BB:89:9D:E5:00:B5:B8:EB
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e8:0c:e3:1a:c3:60:2d:02:a8:da:77:5f:b3:8b:1d:92:fd:
69:41:8f:91:1a:65:da:82:6b:87:a0:1d:55:b6:55:3a:c0:47:
84:06:13:e7:f1:bf:05:17:bf:89:69:43:3e:bd:c6:31:68:c7:
72:33:95:25:62:01:77:17:9c:2a:48:b1:48:3e:90:58:9e:9c:
8c:af:ab:28:58:1d:01:cc:e3:ae:87:0b:5c:7e:ed:5d:7b:3e:
06:2c:2f:86:7e:17:7c:88:39:2f:3e:44:a1:92:65:cb:51:3c:
9c:9a:7b:36:f3:ee:85:89:eb:e9:1d:26:f2:98:38:8e:cd:91:
eb:b7:5c:16:12:91:64:37:ad:89:bf:42:94:59:d9:5d:3f:f8:
1b:e0:37:46:65:19:4e:9c:f6:e1:9f:db:5a:61:83:f2:c6:47:
83:d7:0c:54:f7:81:46:c0:4f:23:24:14:b1:02:a2:53:73:ff:
56:8b:cb:29:e0:ef:ad:81:5f:78:e8:fe:94:42:fe:60:3e:5a:
5d:68:89:99:e3:22:e5:20:d2:46:83:a3:e2:cd:41:22:ec:34:
28:bb:31:06:19:80:fb:53:70:07:c2:22:45:d5:42:99:6b:6d:
80:3e:77:d5:37:e2:3f:89:1b:88:e3:e6:a2:66:cb:21:e5:54:
3c:2e:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:41 2025 by rpki-client