Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: FcWOpT+zOXudO4SdGWX8AlNxmfLTAUwqnuuAIsrRNpE=
Subject key identifier: 18:2F:4B:C7:C7:88:B0:32:44:10:95:66:22:95:E2:65:40:6E:5F:9D
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 0199277CF1DF3D4982D8FFD69B0235BD1CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 1309
Signing time: Mon 08 Sep 2025 04:02:03 +0000
Manifest this update: Mon 08 Sep 2025 04:02:03 +0000
Manifest next update: Tue 09 Sep 2025 04:02:03 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: pjfighgWKAJYgZ4g8KeThFc5yM+Bu/73mhiwQMsgkAo=)
2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7c:f1:df:3d:49:82:d8:ff:d6:9b:02:35:bd:1c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Sep 8 04:02:03 2025 GMT
Not After : Sep 9 04:02:03 2025 GMT
Subject: CN=182f4bc7c788b032441095662295e265406e5f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:a2:df:26:69:8e:28:de:dd:1c:14:32:2c:
d1:18:a8:80:77:cc:a8:de:6f:d5:a0:70:89:73:02:
2e:ca:a9:4f:7e:72:95:56:5b:19:d3:34:cb:9a:08:
6e:8b:f0:06:1e:03:21:fc:93:58:c4:5e:ac:e4:e9:
ac:57:15:4f:93:d2:9e:a9:86:6d:61:bd:a2:ba:f3:
cc:81:c0:24:70:c7:31:b0:78:03:ec:0e:0b:06:ac:
ab:0e:7b:e4:de:00:39:9e:32:49:a5:39:d9:99:96:
99:ac:29:70:7a:38:6a:f7:fe:3b:65:1e:d6:9b:f7:
a0:1a:83:ed:ca:95:d9:c2:88:49:c0:02:cb:91:be:
d2:f5:e4:8d:17:83:f9:00:45:40:08:21:f3:e3:d8:
40:1e:26:41:41:0c:01:44:64:c5:a2:86:ae:cb:08:
54:51:70:5d:96:4a:3a:95:22:cf:8a:73:d4:c3:a1:
5b:25:78:20:a8:aa:75:df:eb:84:60:a7:d8:29:b8:
c8:f4:4b:22:97:41:cf:0a:b7:5c:3c:22:1b:e2:dd:
e8:b6:2c:53:6a:44:c0:15:fe:3d:3b:24:47:a5:4b:
6b:9c:74:93:7b:16:41:55:7a:3c:22:f1:eb:d2:ca:
51:ab:1d:47:c8:b6:65:59:96:83:40:ef:be:a2:0e:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:4B:C7:C7:88:B0:32:44:10:95:66:22:95:E2:65:40:6E:5F:9D
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:72:de:dc:97:2d:56:96:11:25:d0:5b:f3:c7:b1:a0:56:c1:
0c:5c:60:f5:de:b8:ca:3b:da:14:b7:5c:26:2b:7d:46:a2:2d:
63:0a:88:30:71:6f:79:a8:d5:55:d0:7e:e1:1b:7a:90:08:a4:
c6:94:77:8c:ce:6c:d7:a2:43:d1:de:df:2e:ef:59:04:e1:72:
77:b6:1e:44:33:7c:8c:96:57:90:98:a4:14:8e:8f:20:24:d4:
7d:e7:da:ae:f8:a3:ec:ac:06:f9:94:d5:1b:35:a2:81:e7:bf:
ba:c8:cd:99:c8:32:9f:75:27:8a:c3:5b:67:69:cd:83:d9:87:
05:df:aa:77:72:4d:29:d5:da:92:09:97:34:01:7b:7f:4e:72:
c7:9e:00:95:1c:f9:26:f8:21:6c:12:12:0a:a6:ae:b9:79:d5:
e0:93:c0:fd:7b:1b:8d:9a:53:0c:47:16:c9:2c:4c:80:23:7b:
1f:14:41:0c:18:e0:b1:b1:27:dd:7b:4d:4d:64:1b:f3:c9:8d:
f0:a0:d6:d8:89:3a:1c:35:b3:0a:0c:ec:a5:cc:55:9a:28:a9:
33:31:3e:4f:50:f7:e6:01:55:ea:36:be:b2:bb:f8:28:70:89:
66:f2:03:d3:dc:08:1f:54:91:77:49:bc:94:66:70:b0:b0:13:
ea:ec:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:24 2025 by rpki-client