Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: 2uIHqqlGgWWRQYS1Iq41fSMdObxq+aYFI5eVqW78CYc=
Subject key identifier: 22:D3:6E:95:58:0E:05:87:6A:4D:D3:11:8B:1C:DA:77:EB:89:49:CE
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 0198C86DA4D7D14E5235F4E8446B374AFC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 1053
Signing time: Wed 20 Aug 2025 17:01:25 +0000
Manifest this update: Wed 20 Aug 2025 17:01:25 +0000
Manifest next update: Thu 21 Aug 2025 17:01:25 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: vIOMNfQGxD82hxS7fwbyc5VhzMGOvb0oxK6h6F2LWIc=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:6d:a4:d7:d1:4e:52:35:f4:e8:44:6b:37:4a:fc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Aug 20 17:01:25 2025 GMT
Not After : Aug 21 17:01:25 2025 GMT
Subject: CN=22d36e95580e05876a4dd3118b1cda77eb8949ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:5d:0f:62:0d:30:01:51:0c:d8:2f:88:f7:
6c:1f:94:65:cd:0f:c9:d6:5d:bb:67:78:93:c5:dd:
8d:e5:2d:a6:7a:af:e7:52:52:47:69:05:b0:f0:0c:
35:74:c0:d3:44:b1:b7:40:88:a6:e0:ee:e7:a8:29:
82:66:12:5f:bd:ac:d0:90:67:f8:44:e1:27:71:2d:
35:5a:82:1a:1c:69:30:1c:4b:6f:1e:f1:7d:85:34:
04:0b:74:ff:fa:9e:dd:eb:ef:81:d9:1d:5c:50:9b:
79:53:46:6b:b2:c1:15:2f:e5:e4:4f:16:87:c7:d0:
ee:2a:0f:aa:e6:d1:71:0a:9e:b8:21:27:6c:73:5f:
a3:e9:46:5c:a2:61:fc:58:b3:fe:01:41:fa:84:7c:
b3:67:59:2e:7d:de:f0:1e:55:9e:08:d1:38:af:e1:
0c:7b:47:97:e9:37:24:b9:0e:b7:6e:02:14:4e:f3:
f2:71:b0:78:3f:c7:ec:26:30:7d:81:88:de:75:cd:
b6:63:9d:e3:c3:18:7c:92:15:9c:bf:00:af:6a:d2:
9e:ed:76:9c:16:8a:7a:9d:89:a2:f0:68:68:8e:20:
b8:f3:92:e4:5a:6e:43:1d:33:82:5d:40:a1:b9:19:
ed:d1:0f:d4:6c:de:1e:87:d9:5d:2d:89:e1:4b:22:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D3:6E:95:58:0E:05:87:6A:4D:D3:11:8B:1C:DA:77:EB:89:49:CE
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ca:1c:9b:13:f4:e2:b1:50:46:a0:13:13:de:67:87:33:bf:
07:8e:f5:99:15:62:a5:c6:42:82:71:92:b2:88:00:df:83:c5:
ba:00:d6:c1:e8:02:5a:9d:e3:43:ca:d0:c3:dd:56:04:98:77:
ed:b4:62:7b:db:94:ef:64:6d:fe:91:6b:04:06:4e:4c:66:5a:
bc:5d:26:0a:34:c8:79:a1:39:f3:d7:a9:70:25:95:55:d7:7e:
8a:3a:b7:20:d0:af:30:a4:90:d8:b9:66:d3:64:41:7e:68:3f:
0a:4c:31:e8:56:34:bf:68:fa:4b:6f:c9:b0:e2:26:50:58:70:
bc:a9:e1:d7:bf:b1:81:1f:f1:c2:e2:b1:e0:0e:a9:73:c0:f8:
ec:ca:b0:2a:29:b2:b7:69:48:0f:05:06:f6:21:c2:0c:63:fd:
f0:b9:ec:b3:1b:71:fc:82:65:37:ca:f4:c2:5b:ca:98:d6:21:
a9:e4:5b:3d:08:b9:50:2c:f9:59:fe:ee:ba:14:25:a1:a9:0f:
1f:b0:00:31:bf:64:6a:6f:b6:17:52:e7:f5:0d:f3:04:e0:a1:
8c:20:e7:c2:f6:3f:cb:2e:41:6e:53:7d:9e:8d:1e:1d:df:68:
7c:f0:9e:12:b3:ca:04:5b:9b:03:de:29:09:2a:5a:0e:90:c5:
2f:84:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:20:14 2025 by rpki-client