Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: 46QPpeeewl2/I26nPVjQWOMHdvXpRgVg+DuJx84/irU=
Subject key identifier: 7F:AA:DC:17:EC:C5:7A:3B:1B:0D:40:B6:71:5B:85:78:5E:BE:1A:6A
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 01992BC6D47D644D62F4C25CE8F779C1C6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 1675
Signing time: Tue 09 Sep 2025 00:01:14 +0000
Manifest this update: Tue 09 Sep 2025 00:01:14 +0000
Manifest next update: Wed 10 Sep 2025 00:01:14 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: 4v2pq8ughUW3xjBsdVHBCT+gmLD2OfBAFir7dzYMEj8=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c6:d4:7d:64:4d:62:f4:c2:5c:e8:f7:79:c1:c6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Sep 9 00:01:14 2025 GMT
Not After : Sep 10 00:01:14 2025 GMT
Subject: CN=7faadc17ecc57a3b1b0d40b6715b85785ebe1a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:23:90:b3:88:24:74:11:fe:1f:d9:8b:54:
af:1c:50:08:52:71:51:d9:58:58:25:36:28:53:60:
68:25:8d:31:77:f1:0c:c0:e5:0e:1f:1c:e8:28:0f:
22:80:36:48:76:bb:9a:e5:bc:55:3c:d6:9c:d0:dc:
bc:92:66:22:0a:9b:16:f7:b3:ea:9f:e7:34:d0:23:
04:92:b2:82:81:8e:8d:23:e9:dd:4c:90:a5:8b:e3:
52:50:67:95:98:ab:60:4a:dd:4d:f8:fa:14:84:6b:
80:df:1a:2c:4d:c4:e0:c3:42:a7:ab:97:39:a5:f8:
2a:5a:91:1a:0f:dc:09:8b:20:5f:ac:c9:13:22:f7:
ac:a9:86:bc:5b:6b:5f:eb:cb:af:80:4c:ab:34:a7:
18:b1:5e:a7:1f:26:88:aa:dd:7c:00:7a:c8:50:5c:
66:91:50:64:b5:21:2e:46:e0:43:38:1e:67:c3:f7:
15:1a:7d:d6:5b:b3:c0:12:7d:96:74:af:b6:4a:5b:
cc:a4:5c:6a:0e:53:59:87:2a:64:13:4f:83:8a:ba:
7b:d9:b9:29:8a:9b:55:cb:be:81:22:f4:dd:54:34:
1d:d2:5c:ed:f7:d8:7c:ca:89:f5:73:c2:5a:eb:9d:
10:9b:b7:9a:cb:e9:91:15:66:17:4a:ff:c5:1a:77:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AA:DC:17:EC:C5:7A:3B:1B:0D:40:B6:71:5B:85:78:5E:BE:1A:6A
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:89:68:5c:9b:8c:4d:2a:63:bf:9d:e6:da:c5:c1:60:3b:a2:
5f:b6:4e:b7:42:16:64:22:de:5b:22:44:b0:c6:ad:35:89:9f:
91:3b:1a:fa:23:52:53:e1:d6:54:df:ea:bd:45:f5:ed:35:89:
d6:6a:cf:bf:ea:ff:7c:48:46:6a:c1:34:20:5e:e4:d1:2e:c8:
20:7a:27:53:4e:e4:33:10:b5:51:e8:40:34:05:96:86:9c:66:
04:82:e6:32:80:61:dd:3b:80:37:00:f2:50:a6:5b:2b:eb:1c:
d4:8b:8b:1c:38:23:57:8a:59:d2:8d:34:ed:11:89:e3:78:ed:
ad:9d:c8:7c:62:5b:b7:61:dd:3c:84:b2:36:be:70:a1:35:d2:
d1:00:40:a9:36:06:cb:bb:a3:0f:bf:f4:c8:75:6b:ca:3a:ad:
fd:08:99:37:85:7b:1f:93:09:3f:16:63:64:f8:05:58:c8:b9:
2b:52:dd:d0:4f:f6:b9:28:9b:63:3a:9c:37:76:8c:25:0b:37:
54:86:f8:06:94:ac:c4:16:ba:5f:61:0e:fe:b9:4a:32:9e:94:
04:80:10:60:23:cc:38:f1:3c:f9:ef:68:8d:47:32:38:a8:d4:
23:67:28:33:c1:84:c9:00:1a:33:0e:9b:d8:1c:e8:71:90:9a:
86:71:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:49:22 2025 by rpki-client