
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File: rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier: +UmlQlCR5ZRvuBQwbspGfmSDBxFmOGqibV7gDHFUlxo=
Subject key identifier: 84:0D:0C:57:60:5A:CA:0B:0A:7D:46:38:E7:01:43:31:F9:99:64:31
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 01991DD3BB7CC0A6142C9487ADB3C15329FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number: 1630
Signing time: Sat 06 Sep 2025 07:00:39 +0000
Manifest this update: Sat 06 Sep 2025 07:00:39 +0000
Manifest next update: Sun 07 Sep 2025 07:00:39 +0000
Files and hashes: 1: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (hash: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=)
2: DtvFUItZKqyAuC0qVO7xK12HQO0.roa (hash: z+RXHMTUA/r+jPrvwbj//4T8rVTRPjeJiPQfneeOdNs=)
3: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (hash: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=)
4: klr8zXHLn6mli5IxFQr4R9FyMV0.roa (hash: I+JofOB+oo9ML4ISV8ODtPvO84Ef+x27qR0wwlNvvJ8=)
5: q0Eds_oIDCgE88gdpI6r4kp33h8.roa (hash: sqISDzfU6JYm1UcY8Gcz5wDK5BeEeTVU67gC4Pg+KUk=)
6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: /juhPsd6htdBIAqIkDxS1TLmSv+mlvrSrDHo/PBh4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d3:bb:7c:c0:a6:14:2c:94:87:ad:b3:c1:53:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Sep 6 07:00:39 2025 GMT
Not After : Sep 7 07:00:39 2025 GMT
Subject: CN=840d0c57605aca0b0a7d4638e7014331f9996431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:be:b0:29:c6:91:38:69:04:c5:5c:fe:9a:
d7:74:13:2e:61:8b:5e:db:ba:54:6b:dc:91:d2:ff:
c7:e4:c8:7f:89:03:8f:95:2d:7e:f7:c0:1d:83:bd:
91:50:08:e3:bd:d9:76:3d:bb:6d:55:b6:85:fc:85:
34:88:a9:64:ee:09:f5:0d:55:02:21:bd:f3:b1:57:
6c:29:8f:13:ba:55:8e:9e:30:aa:12:42:86:dc:dc:
ef:d5:ad:34:6c:0f:db:e4:66:8d:10:41:95:41:b4:
13:2e:f6:c2:16:47:99:78:ca:6e:29:5c:c0:7b:59:
84:26:6d:00:63:9f:91:ef:77:41:af:13:17:a4:e7:
e0:9e:f4:bd:47:a6:83:fd:a8:c0:8f:ca:1a:80:24:
ad:c4:70:ef:a5:7e:e4:74:cd:70:b6:0c:66:a9:56:
14:16:6f:a4:4f:01:65:17:c9:62:17:91:1b:3e:ec:
b6:53:de:4c:95:11:58:40:35:ae:ed:35:a6:b0:5f:
d3:ff:39:41:29:10:1c:6e:0d:f9:7d:c6:22:a6:c4:
2c:4a:d1:3c:81:a7:97:94:4b:06:0c:3e:cb:66:b3:
99:1c:e1:bd:91:6a:d4:d2:3b:08:00:c9:e2:95:2f:
71:5c:a4:b1:6a:fa:7f:de:d6:26:c4:45:6a:b1:2b:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0D:0C:57:60:5A:CA:0B:0A:7D:46:38:E7:01:43:31:F9:99:64:31
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ae:82:46:28:2a:23:db:e7:c2:96:b0:70:f7:72:a7:74:32:
68:71:b9:ff:72:11:0f:20:87:00:43:57:aa:3c:0a:29:22:e6:
cf:e0:88:c5:fb:3b:ea:87:2f:95:67:ae:5b:7a:e1:2f:82:a7:
48:4e:b9:8f:66:dc:bf:31:12:b5:66:f2:95:98:d2:e6:a9:f8:
e3:b1:b7:99:e0:b3:c2:ef:bc:bb:5d:2b:2c:00:37:18:31:e1:
ea:42:bf:f4:91:4d:b3:5c:c8:8b:e5:f3:ce:a1:45:2b:ac:d9:
81:48:78:83:52:ca:ef:a6:61:42:18:aa:cb:30:6c:a3:bc:39:
26:ea:c8:a1:38:2c:0f:48:ec:80:9f:d9:41:d1:85:a2:84:2f:
6d:6b:58:7c:56:1c:ed:60:16:6c:2e:6b:86:2c:0e:a2:6f:d0:
68:4b:7a:05:95:16:29:c8:39:da:ba:3c:51:80:0d:96:07:b6:
ad:ff:86:fd:1e:38:c0:4e:8f:e9:67:50:29:f3:ec:a2:5f:8d:
f9:81:31:de:39:2a:85:27:ee:15:f8:26:1b:64:31:c8:39:f7:
1c:fd:1a:bb:6d:1e:57:6a:d4:2d:e4:bb:53:5b:12:f9:16:74:
cb:96:ad:24:2a:3a:be:81:f3:06:f5:78:40:a8:3b:e4:b0:bb:
4e:aa:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:08:14 2025 by rpki-client