Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
File: 8zXtZqwB15F1zk149nKh_kcgN4A.mft (raw, json)
Hash identifier: TmGBm+9KCwEY1CHaX+fMzrH7iVV4takIbl53fhf9D6Y=
Subject key identifier: 18:0F:A8:B1:C3:0C:61:07:A7:C2:C8:B0:F6:33:14:23:BB:F1:42:03
Authority key identifier: F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
Certificate issuer: /CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Certificate serial: 0198C911E159B925387969A3658DB16C47AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
Manifest number: 08
Signing time: Wed 20 Aug 2025 20:00:48 +0000
Manifest this update: Wed 20 Aug 2025 20:00:48 +0000
Manifest next update: Thu 21 Aug 2025 20:00:48 +0000
Files and hashes: 1: 8zXtZqwB15F1zk149nKh_kcgN4A.crl (hash: 4+mvOS0q8Atc8pNJl3WUolfvgJynV/5t8k0BukXoPi4=)
2: Gc7bIWg_002hRPQXdkZu34Nt1hk.roa (hash: rYe2LH24NobxlRDRXW8nW9SeQn4FShUkG8Kt27Qhtsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:11:e1:59:b9:25:38:79:69:a3:65:8d:b1:6c:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Validity
Not Before: Aug 20 20:00:48 2025 GMT
Not After : Aug 21 20:00:48 2025 GMT
Subject: CN=180fa8b1c30c6107a7c2c8b0f6331423bbf14203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:ed:c5:ff:05:21:3b:72:0a:bc:74:24:3a:
54:31:fb:b0:da:47:64:5c:72:df:59:f7:62:05:c6:
3b:7b:11:c7:be:be:fd:c4:81:2f:fb:93:62:3a:fb:
64:d6:3a:80:14:80:40:f6:a1:e8:6f:d0:42:f1:36:
38:4f:26:90:1d:2d:61:e8:37:e6:26:4f:f5:09:55:
e5:01:fd:48:fd:c0:84:7e:fa:6e:77:89:13:8b:c5:
42:1b:a2:7d:94:10:a7:cf:b6:28:ea:75:e2:7a:d9:
4b:d8:38:13:c2:4c:7a:39:f6:2c:db:4a:b6:b8:14:
be:d2:6f:07:2f:35:d9:70:5a:d2:e4:5a:c2:f6:45:
b2:b1:1b:0c:29:b7:38:55:7f:ee:ef:77:7d:3c:81:
14:b0:06:cc:d5:d4:57:51:eb:0e:ce:82:15:e9:02:
f6:f5:2e:96:d4:34:0c:41:18:fe:a4:f0:0c:98:57:
22:1e:b4:09:da:77:6e:1e:05:21:53:3a:d4:a0:a5:
71:37:e3:86:ee:ea:5a:e9:0b:2e:36:31:6d:52:eb:
97:aa:0a:f4:60:26:c2:a9:48:ab:c7:07:10:dd:86:
06:88:1e:06:fa:5c:01:9d:4f:fb:57:c2:b4:08:de:
f9:81:db:8f:fa:83:71:aa:01:f1:ca:cb:27:9a:41:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:A8:B1:C3:0C:61:07:A7:C2:C8:B0:F6:33:14:23:BB:F1:42:03
X509v3 Authority Key Identifier:
keyid:F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:36:6d:07:73:3f:92:e5:fb:14:dc:94:99:83:a9:21:47:
cc:42:83:7d:bf:a4:be:0c:1b:0b:b5:e9:42:bf:aa:28:6f:67:
50:a8:f2:1a:ce:97:44:68:e5:66:f1:72:a7:04:25:eb:6f:d8:
60:21:7b:37:b9:ac:0b:76:0b:b8:4c:01:06:0c:d7:e4:2e:dd:
b0:20:5c:2a:db:e6:ed:2b:1f:cb:0d:a5:09:d0:8f:3d:e6:1f:
dd:f9:bf:b0:c8:60:46:b3:cf:44:61:d1:b6:93:9a:ad:ef:f7:
b1:16:cc:44:61:8a:5e:1f:1f:d9:dc:b6:a3:d1:9f:ba:57:d1:
9f:63:20:0c:34:31:f9:40:27:ab:31:78:7c:4f:0b:8b:9e:09:
42:a5:2b:c3:56:73:f7:83:df:7a:f9:78:d1:b6:f4:3e:ca:e6:
60:02:28:d9:83:ea:65:38:ce:8e:c5:af:f5:8c:2f:5c:2d:d4:
f3:24:96:9c:86:2c:7b:d9:b2:71:89:81:4e:1e:09:61:44:34:
38:05:45:b9:b7:27:74:c2:c8:65:be:df:73:59:89:09:f4:8b:
c8:c9:f1:a2:ee:ef:3d:a7:88:69:22:66:e9:16:0b:ef:da:ef:
e1:c3:4f:f0:74:b2:59:60:d0:3c:47:74:7d:b1:8f:d0:27:d7:
6a:80:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:57:14 2025 by rpki-client