Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: 2aXFxbmdJ4ceEJKinBEwDfmkynZzF270jjMDnEb5704=
Subject key identifier: BD:09:A4:14:AB:CE:6B:FF:5D:DD:47:88:E3:76:3D:D1:24:AE:FD:80
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 019928FC2CB32E1B18C29ED81F1E4FEA954A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 1607
Signing time: Mon 08 Sep 2025 11:00:39 +0000
Manifest this update: Mon 08 Sep 2025 11:00:39 +0000
Manifest next update: Tue 09 Sep 2025 11:00:39 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: 9FG6bRkV2bMM7pFqudaZBo1yJfxZWzhZVOnmaQ3CxfY=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:fc:2c:b3:2e:1b:18:c2:9e:d8:1f:1e:4f:ea:95:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Sep 8 11:00:39 2025 GMT
Not After : Sep 9 11:00:39 2025 GMT
Subject: CN=bd09a414abce6bff5ddd4788e3763dd124aefd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:de:a8:7c:1d:1a:96:da:de:a0:98:b2:da:
4b:80:41:08:aa:79:67:d5:2c:0a:c9:cb:bc:12:20:
2d:61:da:49:f9:3c:76:a5:f5:06:bc:a9:46:ce:e6:
7a:90:eb:8b:e7:f9:a6:5e:6d:67:62:68:86:ab:96:
9a:3c:ac:d4:6e:c5:92:7c:13:55:6b:ef:2b:2e:70:
3d:64:a5:5d:90:62:0c:14:5f:4f:69:fd:e6:a4:4a:
40:19:48:e4:05:c9:fe:b4:54:50:9b:6f:1c:7d:83:
4a:14:8c:9d:19:2c:5e:b3:63:f5:e4:29:e5:69:6f:
72:7c:71:0b:c1:13:09:a5:06:2d:d0:0b:ad:f2:99:
27:c5:55:e0:12:e2:c4:47:bd:56:b7:0d:fe:35:bb:
ce:a9:3b:4d:36:47:ff:a3:17:39:92:82:29:76:e4:
29:db:d3:cf:10:b0:85:5a:36:76:33:e6:c9:66:56:
e8:fb:c3:34:77:1e:d0:f0:48:b8:75:5a:ff:f8:a1:
4f:c9:b9:b4:d7:6d:dd:b6:cb:28:45:32:cc:ca:4c:
b0:18:b2:a7:7e:36:b7:20:75:52:8d:01:17:65:44:
24:e6:af:00:99:68:9d:17:5d:7b:70:10:2b:82:1a:
e1:1c:55:66:b0:db:51:3d:fb:fc:b6:54:e8:6e:b2:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:A4:14:AB:CE:6B:FF:5D:DD:47:88:E3:76:3D:D1:24:AE:FD:80
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:3a:13:ce:41:6e:85:16:07:40:fb:e7:3c:ec:2e:2f:6d:
aa:d1:c1:38:c0:aa:59:76:69:8c:07:a2:4b:d8:d6:8e:63:13:
f5:52:2a:1f:2c:3d:c3:58:ee:a8:8e:7e:6a:d0:ac:3d:0a:f5:
2d:d6:db:24:74:3b:3f:4f:f8:cb:17:24:8e:ce:46:4e:02:f9:
68:b8:8c:f8:5b:54:36:2b:ce:6c:37:07:b4:e1:a4:47:30:c9:
08:4a:3e:91:86:89:fb:c8:56:60:5f:fa:0f:0d:a5:8b:30:4f:
c2:a7:6a:ef:db:ad:cd:eb:20:75:f4:ac:24:5c:d0:de:57:cd:
8f:52:59:c5:d7:05:4d:7d:3d:c5:76:fe:da:6d:1a:dd:c3:4c:
67:80:e2:bb:8e:83:71:63:16:c7:46:12:c9:47:89:05:d2:08:
fb:3f:53:fd:e2:b8:32:8e:cb:7a:22:6c:ea:83:29:d3:12:32:
5a:33:7a:eb:84:c1:ab:c5:5f:4e:8d:ff:03:a7:98:c0:2b:69:
58:4c:fa:32:d4:13:0f:a3:65:83:77:63:5f:c4:18:09:63:6f:
75:f8:25:68:cf:b9:09:43:a4:34:b1:33:6a:b6:fe:e4:61:32:
06:c8:65:04:7e:39:fe:f4:08:61:b2:6e:5b:1b:b0:52:f7:23:
2a:11:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:14:08 2025 by rpki-client