Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: xtjZMPcDNIt2Akvx37P1aKFBe52bOgNSjfauEzc7zMQ=
Subject key identifier: 8A:80:1D:4C:BC:52:45:78:BB:E6:5F:EA:65:7B:52:C9:38:7C:F5:93
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 0199500B6AFA81A199BB520BD2A4534B088F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0808
Signing time: Tue 16 Sep 2025 01:02:29 +0000
Manifest this update: Tue 16 Sep 2025 01:02:29 +0000
Manifest next update: Wed 17 Sep 2025 01:02:29 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: eKXK502HQ4UDv1cRMotfMkDLKIaEwI107SVV46Hf+MY=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:0b:6a:fa:81:a1:99:bb:52:0b:d2:a4:53:4b:08:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Sep 16 01:02:29 2025 GMT
Not After : Sep 17 01:02:29 2025 GMT
Subject: CN=8a801d4cbc524578bbe65fea657b52c9387cf593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:9a:e2:98:30:87:22:53:8c:34:a2:4a:c8:
b7:43:af:83:36:07:ef:4c:c4:b5:02:a5:32:54:af:
6e:91:8c:7b:4c:97:38:9b:f0:e6:67:70:14:83:3b:
bc:e9:ed:cf:9e:e3:54:24:9b:9b:ed:f3:51:15:39:
ab:18:f4:97:02:e5:de:ad:d0:cd:8a:6d:15:13:41:
1c:de:19:94:2b:8f:8c:b7:7b:ec:f2:c5:9e:6e:1c:
44:c1:ab:bd:ff:79:7b:72:67:b1:5e:c4:c8:f8:a4:
81:2b:e7:2d:d5:d1:3c:03:06:56:46:2f:77:79:bb:
85:dc:82:6f:93:b4:5d:51:1f:07:ef:30:88:97:dd:
61:59:65:b8:77:0b:ca:54:fe:02:a1:a8:73:d9:60:
79:cc:0c:0d:cc:a9:1e:32:93:52:3b:a3:80:d7:50:
b7:b8:cb:e7:29:09:b5:0a:24:fe:d6:87:30:10:18:
81:6e:f9:0e:ad:c7:5b:8d:0b:66:30:c3:98:24:20:
96:ec:90:15:44:0e:ad:7b:df:2f:da:ca:ee:29:6a:
08:07:90:8c:c4:7c:4d:ab:4d:ac:46:55:78:f6:30:
f9:85:d5:f0:f3:d8:0d:ad:50:9d:63:8d:9c:d8:af:
86:da:3f:83:b9:9f:45:05:92:3d:93:43:77:ef:e5:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:1D:4C:BC:52:45:78:BB:E6:5F:EA:65:7B:52:C9:38:7C:F5:93
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6c:32:26:ee:80:a9:79:ff:a5:14:1b:53:88:18:7e:c9:9b:
21:50:c0:67:d2:14:76:fc:c1:23:78:43:94:34:29:6d:bf:a1:
d7:b4:ba:28:8c:06:80:5c:36:6b:3a:db:ff:0b:ca:0d:48:db:
5d:e7:2a:ab:93:6e:61:e9:16:46:82:79:e3:cb:b3:74:ae:41:
44:38:f1:17:75:86:c1:85:e3:6b:e2:12:2d:8f:6d:57:f2:8f:
93:41:d3:5b:a3:5b:f7:01:ac:cb:b5:c1:f9:2c:10:50:54:3b:
16:8b:74:82:48:37:75:0a:32:4d:fc:9c:5d:db:9b:fa:a0:f2:
f6:ee:8a:76:5c:8e:dd:bd:18:29:f0:ff:f2:a6:90:99:4a:65:
96:75:91:91:1b:e8:98:14:f5:96:4b:e0:71:43:88:0f:0c:80:
b0:98:21:44:d0:2c:39:0c:9a:f6:ea:21:db:c3:56:7d:b4:9c:
ea:28:cb:38:a8:30:01:f7:1e:e6:ce:d3:45:22:bf:73:4e:b9:
7c:4d:6c:e1:22:42:61:a7:82:06:7c:9c:c7:fe:05:74:82:21:
6f:36:8e:56:8a:d4:df:d8:de:37:0c:11:3a:b1:24:fa:7e:a4:
c5:ca:ae:df:ee:55:b3:55:47:1b:f3:f9:61:7e:27:56:eb:6b:
51:f6:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:20:38 2025 by rpki-client