Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: gA/oVkfG89kZeCcubnghIooYloe3RiU3rvICbjhrAJs=
Subject key identifier: 92:C2:04:66:7F:42:55:9E:6A:F3:37:D3:16:5A:8F:28:EC:12:7B:CC
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 01993537BC58B775CCABA570E2AB65BEC5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 126D
Signing time: Wed 10 Sep 2025 20:01:08 +0000
Manifest this update: Wed 10 Sep 2025 20:01:08 +0000
Manifest next update: Thu 11 Sep 2025 20:01:08 +0000
Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: jDNVgjvU6cokGGZDNDWEZEFu9aqYl0RYNsmEJ+y68zE=)
2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:bc:58:b7:75:cc:ab:a5:70:e2:ab:65:be:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Sep 10 20:01:08 2025 GMT
Not After : Sep 11 20:01:08 2025 GMT
Subject: CN=92c204667f42559e6af337d3165a8f28ec127bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:20:f8:9a:41:11:63:bd:54:61:bc:90:ab:
11:a6:40:f2:50:cf:b9:c4:4c:2d:b7:a8:28:d3:86:
9c:24:97:48:a9:c5:b0:aa:69:db:ba:d7:57:5e:25:
58:77:a7:14:81:b9:d9:63:b0:ec:81:85:ec:2a:92:
4b:70:e3:0b:ac:df:4d:66:8d:1c:f8:28:f1:be:e4:
3f:cd:63:48:f7:24:ad:cc:28:97:a5:16:0a:49:3a:
e9:be:25:33:63:1b:57:8f:87:67:a6:68:e4:b1:c8:
13:cd:94:98:47:d0:11:24:c2:76:74:9d:07:8f:c1:
e8:29:a8:47:a6:8c:d2:2b:00:aa:81:5f:b0:33:a8:
f5:d1:03:41:b5:e1:52:b9:5d:5c:aa:6c:2e:f0:2f:
ec:a5:9d:36:8f:03:a2:d3:db:b9:d7:5a:e5:9b:4f:
86:06:23:a6:b7:2e:e4:d4:21:0e:51:42:15:42:9e:
e3:55:31:3a:d8:20:d6:48:02:8d:1e:76:35:c0:04:
07:0b:1a:35:be:c5:0b:10:12:29:60:bc:97:14:05:
e3:fc:3d:3c:ea:39:3e:ae:b0:d2:7e:77:4e:62:2d:
14:52:59:9e:91:43:2e:94:0c:55:07:dc:fd:30:0a:
9b:de:67:6c:52:63:ec:dd:ee:b9:86:42:04:b8:28:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:04:66:7F:42:55:9E:6A:F3:37:D3:16:5A:8F:28:EC:12:7B:CC
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c4:42:2a:7e:33:a5:f7:7f:3b:ae:4e:c5:65:c4:e9:5f:c3:
64:1d:26:77:8a:f7:54:4a:75:87:f4:52:53:1c:6d:d3:13:2a:
51:fc:fb:50:a4:d5:5c:44:5f:3c:05:85:eb:f6:e3:1c:e1:7d:
9f:60:56:51:ce:a3:27:20:fa:7b:59:2e:e7:b4:d8:05:ad:aa:
28:0a:e4:48:3c:42:95:cb:38:bd:97:57:a8:42:5d:83:9e:41:
52:d5:c0:5f:ad:5a:ca:d5:3e:ba:b0:8b:03:74:a1:fc:92:fe:
d9:63:3e:4e:61:ca:75:13:66:46:e5:89:e5:b9:49:e3:32:52:
99:4d:10:9a:71:21:06:86:76:1e:f9:45:3d:48:0e:19:67:87:
b5:45:79:68:16:a3:fa:26:9b:80:11:7f:80:83:74:8d:c9:bd:
90:14:66:9b:17:5e:aa:f0:09:2c:99:21:12:38:2c:65:ca:2e:
d6:0d:e1:e2:1f:39:e0:4c:f5:1f:3f:ce:95:3d:0b:b2:19:38:
f4:ef:4f:7d:72:82:6b:14:e5:53:bf:42:44:68:2f:2d:7c:6e:
2c:f9:1f:54:55:1c:4b:5e:47:e4:54:4e:94:20:78:4f:bb:3b:
ea:41:4d:7a:a3:d0:9b:b7:3a:8c:e5:b3:9a:7b:db:c1:74:ce:
b2:39:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:18:44 2025 by rpki-client