Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: F8sxsEP5e/d57OqkfQa7GEjVLMZ25nskaBGxGpQmA4s=
Subject key identifier: E0:DD:02:EF:A8:0D:60:C3:82:87:D7:47:61:13:0C:86:2C:4A:1B:4B
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 019960FD30B7DEDABBC490463B4655464715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 0A6D
Signing time: Fri 19 Sep 2025 08:00:29 +0000
Manifest this update: Fri 19 Sep 2025 08:00:29 +0000
Manifest next update: Sat 20 Sep 2025 08:00:29 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: 1+FxOlrwyAjQ9pjzGqPGlvI+gD9ziKWy2a/jbqJ01ZA=)
2: mKP-r2WNz-DcN8jHguqt0IynJdI.roa (hash: 64sCq3JbYFHT/xnTN/Iz1j1wV1/No8n++lWEXivZPic=)
3: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (hash: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:fd:30:b7:de:da:bb:c4:90:46:3b:46:55:46:47:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Sep 19 08:00:29 2025 GMT
Not After : Sep 20 08:00:29 2025 GMT
Subject: CN=e0dd02efa80d60c38287d74761130c862c4a1b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7e:a5:e3:04:f7:4e:64:b4:dd:1d:e1:63:0f:
86:1f:ff:e7:0a:a9:45:2a:6d:98:08:67:b0:e7:cb:
67:24:d7:77:35:07:07:76:2d:31:a4:7f:91:a8:51:
a5:40:1e:f9:85:b1:e7:b3:a5:f5:5c:78:f0:86:0d:
51:22:b9:9b:ba:9a:d8:8a:91:8b:e5:b9:a4:7c:7d:
05:7e:82:bd:5b:4a:c2:79:71:d9:c5:72:6d:9c:fa:
60:15:16:83:ce:7d:26:d2:40:a5:b1:70:b1:14:b1:
76:c0:8a:49:55:92:28:9e:8d:55:c6:94:b1:80:c8:
18:ce:dd:f8:d1:9a:9a:dd:58:5b:f3:3b:e4:47:18:
5c:a8:04:71:a3:32:19:6b:52:1a:70:a1:c4:07:9b:
59:cc:8f:b7:d9:3c:d3:ec:dc:06:41:61:28:ee:bf:
09:74:10:5d:bc:25:42:75:27:76:ff:5c:66:a9:fb:
eb:03:cd:72:7d:f5:33:35:38:3c:ea:2a:dc:c1:1d:
af:ed:0b:d5:e9:bc:be:c9:6c:0a:98:ee:ba:b7:fa:
40:ab:1c:80:81:9c:dc:f6:94:bb:36:50:40:04:ba:
b3:c0:5f:38:4d:d4:50:9d:3d:5d:da:e8:bc:33:d5:
fd:14:85:17:5e:70:db:df:ed:61:f6:4a:e8:b7:17:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DD:02:EF:A8:0D:60:C3:82:87:D7:47:61:13:0C:86:2C:4A:1B:4B
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:16:36:72:81:f8:08:0e:45:12:5d:95:ef:9a:18:d7:b9:08:
42:b8:ca:a7:b4:31:40:37:53:59:7f:62:03:2c:63:5e:b5:e3:
a9:4d:0b:0e:2e:30:14:64:c5:fe:03:84:f2:b0:b5:ed:d6:5e:
a0:55:b3:09:37:87:25:ba:7f:25:26:af:9a:b9:73:ad:09:f1:
99:d9:53:d1:b3:d1:3d:81:15:3a:eb:f9:1e:ef:53:97:fd:b0:
75:1b:a8:c4:6a:7b:ee:d6:3c:e2:3a:af:71:cd:18:50:92:b5:
21:67:5d:8e:6b:44:a4:b1:c6:8a:35:a1:1e:12:91:6b:ed:c6:
a8:a2:4a:e0:08:f1:95:e3:00:b5:74:27:f5:09:10:2d:4f:2d:
28:bf:dc:cf:c9:6d:4b:a3:b3:29:dd:8e:c9:62:9e:e7:5b:77:
88:9a:c6:bd:2d:fc:99:03:46:a7:d5:41:6c:5f:0e:c2:6c:3c:
cd:12:48:43:74:a5:65:57:27:25:4b:a1:79:99:5f:ca:fc:a1:
12:8e:af:b6:15:f1:22:6b:28:52:b6:03:70:cd:8d:2d:1b:1c:
23:20:61:d4:b4:59:0e:60:a3:2f:1b:93:d9:79:14:38:b8:65:
16:ec:e6:05:b5:66:55:d6:d4:32:22:3f:2a:ce:7b:d3:e9:cd:
ab:d8:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:04:46 2025 by rpki-client