Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: /gynKqOy3Ue/DVW142nlnCeev2cmNTPnkwAWnhRLZDw=
Subject key identifier: 34:04:42:1F:23:DF:B5:7F:B5:A1:D6:C5:E7:37:3C:25:56:7D:F8:14
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 019922C339E6012B82A0040ED963CF020D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 0816
Signing time: Sun 07 Sep 2025 06:00:43 +0000
Manifest this update: Sun 07 Sep 2025 06:00:43 +0000
Manifest next update: Mon 08 Sep 2025 06:00:43 +0000
Files and hashes: 1: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: 7JnKeMdsmb4jTG01bo1wW5hGxZT5VRd0W4682Z+jYnw=)
2: DReP9bc0zwfbsr8Nie7Lz--WV3I.roa (hash: bjq88usQ48nTatb5B4QsLmgQZv99AHE50C/OVUr97Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:39:e6:01:2b:82:a0:04:0e:d9:63:cf:02:0d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Sep 7 06:00:43 2025 GMT
Not After : Sep 8 06:00:43 2025 GMT
Subject: CN=3404421f23dfb57fb5a1d6c5e7373c25567df814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:82:f8:27:86:b4:9c:a9:a4:71:ff:f1:b7:
af:9a:c3:4b:b9:2a:ab:b6:5a:14:6f:5d:99:bc:8e:
18:0a:55:59:4c:ef:8c:05:75:42:72:00:65:2d:e0:
7d:ac:29:63:c9:cc:c8:b3:ab:62:b9:a7:fd:8b:db:
c3:24:61:0f:cf:77:64:30:50:22:9e:1b:a3:7e:ad:
bb:4d:ed:09:b2:4d:ae:83:64:32:21:23:0c:2a:23:
ae:ac:41:d9:68:4d:cc:1f:88:84:51:6b:5e:6c:93:
49:01:be:c5:65:64:61:e9:fb:44:51:16:4e:63:5a:
a7:24:e6:54:96:59:9b:f1:0b:7b:77:1b:a0:aa:43:
30:dd:0c:07:78:dc:c5:1d:10:9a:83:2f:9b:32:57:
f9:92:a1:b3:e2:43:3c:2f:0d:00:b0:63:20:51:4b:
d3:bf:f9:2c:40:08:1e:7c:5c:56:39:d6:ff:1f:a1:
17:bb:44:f6:62:26:3c:3e:be:1c:04:de:df:34:53:
1d:67:8a:f1:1f:08:1c:94:da:90:fa:e6:ce:bb:46:
59:54:dd:d9:4f:70:c7:ab:b5:21:d8:f2:18:1a:c7:
0d:21:38:4c:a0:f3:af:43:b2:d0:fb:0f:a0:e5:58:
2d:b6:d1:61:e5:29:86:59:4f:2a:04:8b:85:8f:1a:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:42:1F:23:DF:B5:7F:B5:A1:D6:C5:E7:37:3C:25:56:7D:F8:14
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:94:6b:e4:53:62:f9:08:25:f8:1c:90:2c:c0:ad:da:bc:ec:
24:56:fc:f4:e6:28:b9:3f:d5:b9:2f:ba:36:2c:5d:b2:06:79:
c1:a3:76:8a:d5:35:25:fe:9b:0d:a5:5c:1b:1e:60:2a:e5:cc:
16:03:9a:0c:e1:ce:f6:c3:91:9c:56:2a:35:27:bf:e8:9b:94:
cd:0d:8d:80:a2:36:a9:cd:d9:86:5a:7a:00:cc:bc:96:34:2e:
7e:b5:19:56:8c:04:8d:3a:b7:3d:ac:81:7f:a2:ff:b0:a7:09:
d1:c4:48:50:55:c4:f3:cf:43:c5:b3:31:fb:3a:47:8f:96:bb:
c2:6b:e8:1f:04:ca:a7:41:4f:e2:5a:a0:d5:c4:77:20:6d:f7:
55:ec:a1:aa:40:89:a2:c7:38:2f:18:14:95:24:63:0b:48:27:
23:21:28:40:1d:6b:ba:cd:74:8e:f3:3c:98:9b:21:0a:39:8d:
89:b5:11:45:7a:31:2a:40:1d:47:99:eb:7a:cc:28:50:50:c6:
38:eb:80:22:ff:fe:2c:fc:d8:08:9c:fd:05:e6:03:1d:bc:19:
0f:8b:ce:fe:84:2e:fe:b1:17:d6:ea:d3:61:c7:b6:9d:74:e7:
81:16:26:5a:7a:be:be:f7:d2:0d:85:a4:75:b6:bc:77:49:23:
9a:15:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:03 2025 by rpki-client