Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: urh8bvUohMPPYbKwW+cqTqtJHQsgCenOV1hX+w9VBp8=
Subject key identifier: A0:10:EB:05:54:D7:0B:DA:CE:A5:FD:33:38:CC:12:8B:A0:AE:8C:F4
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019932367393426446FEE4FEF222ECD61C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 01DC
Signing time: Wed 10 Sep 2025 06:00:53 +0000
Manifest this update: Wed 10 Sep 2025 06:00:53 +0000
Manifest next update: Thu 11 Sep 2025 06:00:53 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: EBm/itz4Xf6Y50gZZ0W+T8iCRBDuVPcgrHWOPIb7wOU=)
2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:73:93:42:64:46:fe:e4:fe:f2:22:ec:d6:1c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Sep 10 06:00:53 2025 GMT
Not After : Sep 11 06:00:53 2025 GMT
Subject: CN=a010eb0554d70bdacea5fd3338cc128ba0ae8cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:1c:0b:d9:79:26:32:f0:e0:c9:01:ce:97:
ba:c4:fe:3f:03:17:91:15:83:41:07:0e:12:77:bb:
83:68:39:ea:cd:2b:7a:da:65:1f:cf:03:3d:ef:19:
46:9f:b7:a4:0a:a6:c4:fc:75:9c:d9:5c:98:dd:ba:
58:69:0f:98:84:3b:93:cb:95:90:e7:66:6b:b2:74:
43:2a:7a:5d:a9:ea:a2:2b:80:84:ab:eb:95:56:b8:
4c:53:07:f0:5b:5b:67:10:4b:f0:e1:73:a1:6a:4c:
46:d2:0b:04:54:37:3d:77:ae:77:aa:f1:8b:da:ac:
ef:31:13:a7:93:09:9e:2a:8c:7a:9d:4e:56:ba:b5:
5a:ed:f1:5b:e1:83:cb:7e:ca:81:f8:82:c9:43:8f:
20:fe:10:b8:df:22:d6:cf:74:96:c3:ec:70:8a:e1:
a4:0d:bb:39:6b:ee:d2:1d:d7:54:77:0f:75:c9:59:
b1:2a:de:36:fd:bd:60:70:ef:ef:a0:b2:c8:af:c8:
85:75:e7:b8:9e:47:de:28:9c:8c:ca:c4:4f:24:0c:
2c:dd:92:0f:a4:5f:7d:20:08:4d:4f:eb:1e:11:63:
b8:c3:6b:86:0e:27:b0:57:9e:8e:8f:90:11:a6:1b:
0e:8f:7a:4d:a6:64:c9:6a:28:8e:77:ff:53:84:62:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:EB:05:54:D7:0B:DA:CE:A5:FD:33:38:CC:12:8B:A0:AE:8C:F4
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:8a:17:9b:3e:e3:1a:ed:60:09:79:4f:7a:66:d8:e1:26:
f9:e5:64:1a:08:f4:20:56:85:e8:5e:b4:cb:74:26:8c:3d:35:
14:4e:a1:45:7c:a1:8c:6e:c5:2b:19:ce:56:21:08:3b:0c:2a:
39:80:69:b6:15:e4:92:55:6b:81:6e:a2:fe:8e:c6:38:fe:fb:
48:f8:c2:02:e9:c6:e1:ba:05:53:99:3b:84:49:ce:04:5a:f9:
49:70:75:24:31:9c:2a:97:ad:98:f9:ec:4c:cf:a2:3d:b3:a2:
53:e2:c8:6e:5a:39:bd:b0:63:1b:5c:3e:e7:a6:db:ef:25:1d:
14:3e:4b:c6:ad:93:17:b9:6a:15:b3:7d:6c:19:c6:c2:5d:95:
1f:59:bc:48:9c:27:5c:3a:24:aa:26:a3:aa:4f:d9:56:be:b7:
6a:8e:45:9d:df:b3:b6:83:fd:57:0e:de:9b:e2:00:14:91:71:
d4:d1:98:c1:41:db:30:bf:65:0a:4e:c0:25:f8:10:e4:2a:0c:
b0:f3:97:e9:98:a7:2c:57:ad:b2:37:70:b4:d9:ad:e5:f1:5b:
9f:b8:ba:f4:67:4b:14:fc:13:61:65:d3:c0:8d:62:8a:c2:0e:
a4:4c:9c:5e:43:74:37:6e:8a:16:b4:4b:d3:51:b2:cb:95:48:
52:92:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:06:22 2025 by rpki-client