Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json)
Hash identifier: pRKf/qCPiAgk2nWqIiPxpdmf9+qIZZgk/8NWFe7J/3Q=
Subject key identifier: FF:6F:31:4C:FE:A3:34:8F:42:CC:68:19:BD:76:89:3A:BA:4E:76:67
Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c
Certificate serial: 01993011357E0F7BA3C3AF9BFF71C9160C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
Manifest number: 11
Signing time: Tue 09 Sep 2025 20:00:58 +0000
Manifest this update: Tue 09 Sep 2025 20:00:58 +0000
Manifest next update: Wed 10 Sep 2025 20:00:58 +0000
Files and hashes: 1: 4qVlaSTsE1gXSumcFtIoCSI6_Ds.roa (hash: gxiJkMzAgslpclu4FVxFkwBMuCJhHIk77n6WLMjRt50=)
2: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: pJ28gxCBURSPVcET4dLg+zLVaSzJeiC0IVevVvWqUlc=)
3: JPM4YH3p4W-kOC7R4fma0DgmIZQ.roa (hash: 1rs/yihW/LgAGtoac03H1xBXx8dUEUTLq50/L4CH5AA=)
4: kqgGhTxJAHOFMUNL3EFp83GA7Xo.roa (hash: YbWtoAqUQYcbJzxbPZ7TL2mv+/kqmj3HAGafEmcOApM=)
5: zWLkf9J7tc5E8tsLSE-YhUD6XZY.roa (hash: +Totm03QQJ2SJRLIDXG7rNkdSX+/Y9DffvcFrN9L3w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:35:7e:0f:7b:a3:c3:af:9b:ff:71:c9:16:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c
Validity
Not Before: Sep 9 20:00:58 2025 GMT
Not After : Sep 10 20:00:58 2025 GMT
Subject: CN=ff6f314cfea3348f42cc6819bd76893aba4e7667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8c:cf:a2:a8:1b:69:61:47:ca:92:a2:85:75:
c0:02:b5:85:8b:68:df:09:16:67:81:90:a4:25:69:
8a:47:1b:b3:a1:db:92:fa:c0:2c:46:c6:e6:09:eb:
ab:bc:94:bf:0f:f6:bb:b1:30:6c:74:ce:15:57:c1:
c2:f5:32:2c:6f:2d:ca:60:7f:a1:7a:13:b3:7f:a3:
0f:c4:be:ae:83:67:df:f2:76:30:9b:d6:bf:75:53:
20:67:8d:14:11:e8:ea:de:6b:61:36:1b:df:2a:ea:
5a:0f:82:19:82:e6:20:35:82:73:6c:ed:7b:dd:95:
f8:1c:2c:3e:0e:15:44:a8:80:86:04:89:55:89:ce:
72:6c:a3:a7:2d:2c:55:6e:40:8d:04:d5:40:d1:0d:
3e:18:0b:e0:9e:b9:07:78:4c:14:7a:7e:8a:f2:d4:
4b:a0:b0:34:41:e9:1d:f9:82:30:74:4a:cd:91:70:
2d:35:6e:a9:ef:ce:01:b9:4c:73:57:07:a0:25:81:
f4:a7:20:b4:63:ea:fc:00:49:e9:81:f7:62:f8:50:
06:86:8d:fc:c0:65:ae:1a:3c:d2:63:fb:bd:28:4b:
66:27:02:93:ba:f3:91:26:04:07:85:5a:ff:21:71:
6e:cf:88:b7:c9:44:c8:2d:e2:61:78:eb:05:d9:5e:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6F:31:4C:FE:A3:34:8F:42:CC:68:19:BD:76:89:3A:BA:4E:76:67
X509v3 Authority Key Identifier:
keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:51:80:1d:66:75:20:0a:f5:b9:71:49:bb:09:2f:cc:0c:
48:bc:dc:9d:0e:d2:71:cb:93:98:84:bd:7a:38:4e:c3:41:56:
6e:6a:fa:ca:17:b4:c6:91:b0:06:e2:65:f4:e2:4f:51:73:ad:
fb:9b:b0:b5:11:1b:49:7c:58:ee:90:c3:7c:80:df:a4:4b:2f:
d2:47:75:20:20:08:b8:a1:01:75:bc:12:71:38:14:ec:ee:db:
f2:bc:31:da:dc:3d:92:12:5e:35:13:4b:51:bf:3f:db:3e:51:
96:14:fd:f2:ab:8c:99:06:db:dd:6f:d6:30:7d:78:17:52:ee:
83:a9:23:8f:e7:05:b4:38:78:49:04:08:44:e6:ad:09:83:a3:
64:4b:49:ae:cf:f8:f0:dc:4f:e6:c3:8a:17:fe:cb:ed:ac:c5:
8e:26:8b:0b:3b:71:9d:81:9c:6d:bc:d2:76:35:5e:48:3d:7e:
23:b2:08:00:d8:06:ba:fb:70:c3:00:7d:b4:c8:88:99:96:9b:
e4:6a:90:47:43:1d:d2:a0:4f:8a:7e:3c:30:37:91:b1:c6:82:
57:25:6b:1a:e7:0a:59:8e:bf:83:38:7b:7d:68:cf:bb:ab:71:
23:52:12:df:48:6d:3e:cf:c6:33:77:c0:35:a6:bc:3e:88:38:
1c:21:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:07:18 2025 by rpki-client