Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: OS0ywHgyVVwHZMtSEnRgDOANLr/juJxkneiebNYco7s=
Subject key identifier: 73:29:80:9B:F9:4B:61:52:34:73:8E:FE:AC:3D:AB:69:A4:42:50:8C
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 0199228CE4D06B29689B8294142756EBDE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 0A94
Signing time: Sun 07 Sep 2025 05:01:22 +0000
Manifest this update: Sun 07 Sep 2025 05:01:22 +0000
Manifest next update: Mon 08 Sep 2025 05:01:22 +0000
Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: IdpENe92nt7tGqZowZA0IRDVd5TPB+wCmqn6gNIXHAk=)
2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e4:d0:6b:29:68:9b:82:94:14:27:56:eb:de:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Sep 7 05:01:22 2025 GMT
Not After : Sep 8 05:01:22 2025 GMT
Subject: CN=7329809bf94b615234738efeac3dab69a442508c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:c4:80:91:5e:84:79:7b:23:e0:ba:cc:14:
8e:4d:ba:22:e0:34:b3:cf:8e:35:50:9c:2c:6a:e9:
d1:38:55:b2:26:8e:45:17:f4:05:05:57:c8:99:7f:
86:e1:e6:00:e4:78:ed:85:c0:be:8c:73:e9:25:58:
66:40:6e:31:bb:0b:34:5b:2b:48:53:07:37:cc:81:
22:96:43:27:2e:f2:50:60:4f:a6:ac:a0:46:cb:43:
62:2f:fa:7b:18:4e:f6:9d:70:23:f2:e4:0a:d6:95:
be:b9:7e:90:2a:f0:60:bf:09:02:7f:04:e6:b7:fc:
e0:e3:4d:93:48:37:21:82:14:39:3b:8e:b7:1f:d7:
16:0e:40:92:43:1d:e2:ba:c5:6d:23:b5:6d:50:0b:
c1:70:cc:2b:58:3d:dd:b5:06:ad:98:65:dc:92:9a:
47:e4:6f:01:2f:cc:02:8f:37:d2:0f:50:4b:55:79:
82:83:16:aa:64:a2:1d:23:fa:3a:73:61:30:0d:7e:
d3:a7:c2:56:a3:1a:1c:95:8c:54:21:9d:2c:b8:96:
bc:fc:c3:1e:f4:db:22:04:37:ae:26:64:fe:8f:9a:
36:69:61:e7:b8:a8:07:79:c8:89:35:da:91:5e:e4:
00:c0:fb:76:47:d5:32:d2:70:6d:f3:c2:b2:cd:55:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:80:9B:F9:4B:61:52:34:73:8E:FE:AC:3D:AB:69:A4:42:50:8C
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f4:bb:02:1f:c7:f7:3d:a6:de:13:87:0f:36:b2:79:78:c0:
ee:9b:71:fb:60:b9:99:c3:40:4b:6a:4f:bb:36:bd:e0:6f:c3:
a9:5f:73:72:8b:d4:a6:32:91:00:83:e7:ba:a2:4e:12:92:29:
21:3f:1a:92:d3:67:54:d1:b4:a7:5e:94:8d:a0:03:b0:a0:9d:
89:d8:bf:8e:4f:36:78:2b:0f:42:5c:b2:bb:45:dc:78:51:18:
38:7f:ad:07:51:3d:fb:64:f5:3d:04:a1:19:ec:1f:18:f5:8e:
e3:21:c2:27:77:d2:66:f5:43:4d:18:8d:e7:58:86:b6:b2:dc:
51:a2:a9:95:0a:31:db:6a:7f:9b:c0:fe:cb:40:d5:64:1a:2b:
59:7f:4c:c6:9a:51:9a:3c:9f:5b:fe:7c:ed:97:78:39:b2:f5:
7c:af:49:41:90:69:47:67:d2:21:30:e6:bd:cd:89:29:cf:c5:
e2:59:b5:81:48:ae:9e:db:df:54:7b:c6:7e:c6:90:78:3e:b7:
2b:17:35:f2:1a:bc:5f:47:2c:54:ac:24:08:47:1c:43:f8:94:
26:be:de:f3:e8:da:69:e3:e2:b4:b9:39:a8:5c:c2:80:b5:35:
9f:a6:16:31:e6:f4:26:40:3b:9a:bf:f1:57:e9:2a:04:82:f9:
a6:a4:37:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:27 2025 by rpki-client