Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: 4oMhrph5BWkGTLBAKGFaPKxWpYoiT9pbYfsbjm3/p3I=
Subject key identifier: 38:5D:38:19:60:DC:C7:70:9B:BB:63:F9:DA:DD:47:0B:7F:25:4B:A3
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 01992EC73275879FB0FDECC1CE88869B417B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 05F8
Signing time: Tue 09 Sep 2025 14:00:30 +0000
Manifest this update: Tue 09 Sep 2025 14:00:30 +0000
Manifest next update: Wed 10 Sep 2025 14:00:30 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: nOX6QBiw80uHJLJ7Pttv5jlr5vWGzuzeyOGcu/JwaUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:32:75:87:9f:b0:fd:ec:c1:ce:88:86:9b:41:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Sep 9 14:00:30 2025 GMT
Not After : Sep 10 14:00:30 2025 GMT
Subject: CN=385d381960dcc7709bbb63f9dadd470b7f254ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:eb:5b:89:17:81:25:df:7e:4a:9c:5b:de:
85:e5:c6:23:37:3e:22:ca:3e:ae:b4:48:aa:f6:53:
ae:4f:50:e2:17:5d:be:d5:30:a4:45:dc:99:d0:0e:
aa:ed:ee:17:0e:f4:69:28:11:b1:12:c4:3a:26:08:
a6:c9:ca:da:38:0b:7f:da:e2:87:a2:42:68:fb:eb:
70:26:5a:ba:e9:7c:b6:9a:d0:2e:16:63:ff:b9:52:
85:c3:3c:62:e8:2c:08:df:80:83:8c:6c:a0:df:bc:
b5:e2:dc:e0:7f:10:66:96:03:91:9a:0c:bf:c9:a5:
37:a1:b2:00:1b:f6:f0:5f:ea:9b:06:48:4f:30:e7:
1f:94:c8:42:35:1d:7b:8e:b3:0c:62:07:8d:6a:12:
0c:cc:0f:fd:8c:f2:c7:47:00:05:ca:fb:75:0c:1f:
0b:df:35:79:22:c0:6f:19:b8:7c:24:85:6c:37:51:
29:ec:6c:33:e5:58:b1:72:f9:8a:5e:81:8e:30:17:
61:dd:5c:59:05:e2:c1:6f:04:ed:d8:e5:55:9b:60:
9b:49:f0:e2:ec:e4:af:c3:3e:ec:f6:dd:2b:89:31:
91:9d:f3:d4:11:84:a6:43:8c:45:39:1f:7d:e6:25:
88:63:e8:5b:cd:5d:30:c7:32:e8:7a:44:28:75:97:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5D:38:19:60:DC:C7:70:9B:BB:63:F9:DA:DD:47:0B:7F:25:4B:A3
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:31:ff:ad:59:c3:f4:23:41:fc:b2:10:ee:0f:e2:f4:76:0b:
29:63:2e:8e:bd:1b:24:73:62:80:58:7f:c8:64:e3:28:f9:74:
27:ae:d0:33:9a:51:50:42:9f:a6:de:08:e6:bf:5a:fd:a6:58:
b4:31:09:6b:6d:7c:eb:e1:af:3b:66:63:48:fb:af:f4:40:84:
98:78:1d:71:4c:a1:71:24:0d:ba:15:0b:22:c7:61:d3:45:bf:
c8:19:92:db:44:b1:c7:3a:88:e8:c7:88:3d:6e:a4:18:a5:07:
a7:ae:63:21:78:f0:2a:50:32:81:42:cf:da:8e:5c:ec:a0:c4:
20:a2:66:32:c9:8e:be:13:7a:99:1b:54:49:0e:b1:5c:73:82:
ea:0b:46:0b:98:43:62:f4:53:d6:83:3c:18:10:2b:f6:56:95:
b4:f0:b4:c2:20:b1:f7:e0:66:65:14:44:ba:da:0d:22:ac:96:
ea:a4:d1:0a:97:23:61:44:94:19:49:ec:2a:44:82:54:d1:e8:
bf:63:ac:c8:bf:1d:0c:c1:b3:49:5c:13:26:c9:50:43:b6:7c:
88:81:f9:ce:1f:ce:cd:f3:88:38:39:06:dc:72:89:89:7a:46:
d2:7a:e9:5f:28:e4:77:a9:61:9b:11:29:10:8b:be:2e:64:fa:
ac:06:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:10:02 2025 by rpki-client