Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier: YP6HGJLQS971OPS4qlp9WE26tOjIrPgCm1+KRzKonh8=
Subject key identifier: 6F:51:91:5A:B5:CF:0C:70:C9:25:F0:3D:81:A8:A5:A1:E3:C9:07:04
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 0199239FCEFE9E630D6FD4D6CB457C67B8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number: 04D0
Signing time: Sun 07 Sep 2025 10:01:39 +0000
Manifest this update: Sun 07 Sep 2025 10:01:39 +0000
Manifest next update: Mon 08 Sep 2025 10:01:39 +0000
Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: 8Uwb6TGCp52NwClxBULYHV5WgJWR1XlKjL1AnzvIKu8=)
2: v9SdGCEbNFlSuDgWgo1kf6nL3As.roa (hash: qiXG0Rmw4yiW0AhRjg9/OTIgPd0soD+OwXQ8XH+CjYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ce:fe:9e:63:0d:6f:d4:d6:cb:45:7c:67:b8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: Sep 7 10:01:39 2025 GMT
Not After : Sep 8 10:01:39 2025 GMT
Subject: CN=6f51915ab5cf0c70c925f03d81a8a5a1e3c90704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:2b:42:7c:9c:8e:7d:24:d0:29:c2:c1:80:
45:54:54:23:75:c1:1b:bf:86:bc:9e:b3:1a:24:25:
08:ab:81:74:c0:2c:4f:ff:e3:2a:ff:3c:5d:b9:fe:
8b:95:73:9d:15:1b:ba:57:88:3f:66:81:07:4f:f9:
cc:c4:c2:03:6b:37:e6:91:4a:2a:f1:4c:fd:d1:bb:
85:fb:32:4d:2a:2d:9f:d9:fd:70:c2:7f:09:b2:eb:
6c:32:87:c3:78:ca:73:8c:91:08:80:d1:6c:1e:c8:
b3:a6:6e:a4:cc:c1:59:69:d4:f1:5c:34:4a:f5:86:
ce:b9:be:2a:2a:97:46:47:33:ec:3d:3f:be:85:d0:
13:2d:49:01:1f:b6:18:5f:a2:77:f7:15:fa:f1:ff:
e6:38:91:9d:48:42:45:73:03:49:fc:94:34:a2:34:
61:d2:af:5f:d6:f2:af:6d:0d:9d:ba:8c:0e:13:bc:
9e:5d:5e:bf:ce:e8:55:b9:b4:e2:0e:57:6a:c2:ca:
e4:fb:8d:39:ce:3d:ae:ac:6c:64:27:17:7c:4e:c9:
6f:20:58:42:5c:9a:34:e8:10:24:5f:23:3e:8b:2a:
4e:ba:5c:4d:5c:85:a8:e3:1a:ea:db:33:2f:06:8a:
09:18:07:56:55:c7:55:80:92:bd:1a:89:5d:75:18:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:51:91:5A:B5:CF:0C:70:C9:25:F0:3D:81:A8:A5:A1:E3:C9:07:04
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9e:4b:32:9b:de:b3:c4:48:c9:a3:0b:dc:3b:82:25:2a:39:
9c:c5:93:70:08:70:1a:d3:bd:51:84:d1:60:ed:03:9e:a1:f4:
ce:9d:5d:68:92:b7:de:45:9f:8e:b2:95:83:ee:f1:32:77:9e:
1a:00:c7:3d:c9:4b:8a:76:0a:66:6c:66:99:0b:a6:86:c6:95:
96:02:ed:8c:7e:4f:56:2c:a6:3c:32:3a:b5:a3:86:2e:56:70:
8d:f4:cd:6c:fb:01:86:92:c5:af:99:30:61:8e:d9:cb:bf:b1:
6b:e5:b3:d2:cd:f2:3b:e7:1e:05:f9:5f:30:c0:7f:a3:cb:ec:
f7:63:ff:d6:5d:2b:44:02:35:54:7b:3e:63:0e:24:e8:aa:dd:
52:cb:53:d9:a1:d8:9b:a6:3e:e3:3c:0e:d8:f6:cc:87:ad:3d:
6e:85:f7:66:fa:73:41:a8:8e:00:a0:62:f0:0a:77:29:40:d4:
d2:94:0c:53:c2:3f:35:01:bf:f0:ee:92:9d:b8:7c:b1:9c:9c:
28:3a:21:7b:7a:b5:47:04:4b:74:91:16:64:ac:e1:86:8b:7f:
68:22:80:25:d8:ba:e9:82:b5:69:7c:89:88:cb:3d:a1:c9:bf:
d4:a5:f9:a3:df:63:4b:f3:c9:ff:95:ec:1a:f2:3a:b2:0f:e9:
33:f8:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:57 2025 by rpki-client