Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: ujVDRIebfqmgoK/3WleEdDDYzhzoj9JYeo7Zhvp1Ahw=
Subject key identifier: 6D:74:2D:AD:B9:12:C8:59:37:F2:31:27:82:98:AF:FB:C4:9A:B8:77
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 0199221E608A10431A4F9B70D59CAAB7083C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 136A
Signing time: Sun 07 Sep 2025 03:00:40 +0000
Manifest this update: Sun 07 Sep 2025 03:00:40 +0000
Manifest next update: Mon 08 Sep 2025 03:00:40 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: FTLJvqu2tBZ6bVJ4lGPMPB4X7NLki/VyQMJH1/ZCkM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:60:8a:10:43:1a:4f:9b:70:d5:9c:aa:b7:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Sep 7 03:00:40 2025 GMT
Not After : Sep 8 03:00:40 2025 GMT
Subject: CN=6d742dadb912c85937f231278298affbc49ab877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:a8:0c:39:94:36:37:95:a7:17:4c:23:2e:
82:67:7d:1a:c1:d4:16:a3:67:d7:36:94:f9:13:32:
00:53:23:b8:ec:40:2c:87:37:3c:45:04:ad:c0:6a:
f8:01:dd:8b:9b:84:7a:f2:cb:0a:35:3f:08:cf:db:
ff:15:a4:6c:3d:41:b4:62:9a:d2:71:db:64:5d:4c:
35:a2:e4:3d:f8:87:b7:52:a3:33:3b:da:b9:1d:32:
20:9f:68:f2:f9:64:3f:35:eb:86:ad:07:23:81:fc:
70:45:d0:8b:f7:eb:dc:68:b6:81:e5:cb:62:f1:90:
d0:26:fe:0d:ca:03:3c:0c:88:a1:2f:bc:66:d9:9b:
4f:65:76:a3:13:01:bd:53:1d:c3:04:8d:0d:f8:8e:
55:96:5b:a7:02:3c:4c:41:75:b0:85:14:99:ab:7e:
b1:57:2a:88:73:c3:95:a8:09:45:d7:8f:9a:6e:00:
e1:82:91:40:af:7d:41:50:01:3e:1b:70:45:a4:07:
8c:48:90:16:d1:30:1a:e5:3f:e7:c0:d3:62:43:41:
8d:01:1c:c8:44:a1:aa:18:bf:fc:a4:20:fa:0a:f1:
42:c8:d0:34:ad:5b:77:30:5b:5c:24:cc:3e:0a:a4:
b1:3f:2f:f6:1e:ea:f0:a0:c0:40:8a:24:5c:a6:db:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:2D:AD:B9:12:C8:59:37:F2:31:27:82:98:AF:FB:C4:9A:B8:77
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7e:1f:bb:93:0b:f6:5b:12:af:e2:1e:a3:3c:7b:59:e1:4c:
fe:46:11:24:b7:f4:e7:63:26:38:e9:e2:c2:49:e0:36:df:85:
2a:df:8f:05:fa:6a:c2:b0:35:6b:2e:d8:59:d1:e9:97:e0:a9:
44:c7:a1:e1:0e:5c:84:a2:56:3d:46:d6:42:82:0e:59:87:34:
2c:13:fb:be:c7:88:b1:19:48:f5:25:6f:04:75:41:e7:22:09:
74:23:f7:fd:fe:8b:65:f5:dd:26:d8:0f:5b:ab:50:64:5e:4b:
6d:6a:eb:10:10:94:75:3c:a9:a5:9c:ae:2f:4f:a6:73:f4:61:
d3:a1:d2:fe:5a:90:0a:dd:b1:1b:c3:47:0f:cb:c4:19:fc:66:
6b:4f:43:d4:76:57:c5:3e:a5:36:3f:97:c8:67:c0:a1:a9:47:
b2:13:49:64:73:24:f3:af:68:58:70:ec:80:fb:4d:5c:ca:5d:
3f:7b:aa:0f:30:da:a4:d7:b3:80:d4:13:d7:c4:8e:b7:2f:6b:
db:a6:3f:29:6b:ae:1f:2e:80:28:2d:7d:12:52:67:e7:fe:51:
cd:ab:01:c5:c8:10:6a:a2:b6:9b:84:ae:38:20:3b:69:23:f9:
a1:5a:29:f1:37:e3:9e:ba:f4:f0:91:85:e1:52:8c:83:83:a5:
82:9e:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:23 2025 by rpki-client