Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier: pC2nLJrPc0OWS5JNsJ7m5v7v1WzUNCOm80BefBWYzQk=
Subject key identifier: 7E:E2:C3:24:D3:C7:0B:60:A9:74:4A:D0:3D:54:B6:B1:33:AE:3D:13
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 0199269FFABC44D04A649D588DE649D4F48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number: 1674
Signing time: Mon 08 Sep 2025 00:00:42 +0000
Manifest this update: Mon 08 Sep 2025 00:00:42 +0000
Manifest next update: Tue 09 Sep 2025 00:00:42 +0000
Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: DSmFeEjbE9PkkYy7FbtGxu14fUgYBkatxNin3iX0Vxk=)
2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:9f:fa:bc:44:d0:4a:64:9d:58:8d:e6:49:d4:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Sep 8 00:00:42 2025 GMT
Not After : Sep 9 00:00:42 2025 GMT
Subject: CN=7ee2c324d3c70b60a9744ad03d54b6b133ae3d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:fd:8c:96:04:e7:b1:07:f2:e0:47:43:5c:
a1:83:79:fa:6e:0d:d9:f1:aa:f4:80:a2:ae:72:a6:
97:44:a6:36:b2:53:ae:be:4f:1e:36:3d:69:3f:80:
a0:8a:df:2c:31:28:fa:f1:e6:2e:01:bc:08:cb:50:
48:62:be:a6:0c:17:b7:a4:d0:73:80:6a:0c:5c:d7:
12:13:73:28:17:2f:0d:dd:dd:1e:ed:8c:0d:2e:76:
51:3a:94:c2:2f:81:ed:40:94:a1:55:03:6e:84:9c:
78:7b:7c:9c:b5:73:8e:e2:0e:8a:7a:8c:b2:39:c8:
39:43:01:b1:be:3e:b0:32:9f:43:85:5c:0e:18:73:
8e:97:65:72:7e:0d:77:62:a7:d0:7a:e3:65:ad:57:
03:99:93:90:e5:d2:2c:a8:46:1d:c2:e3:04:65:49:
f4:e9:3c:3e:68:7b:4d:25:62:1f:1f:fd:4f:4b:3c:
d3:73:56:94:71:d4:5f:08:4e:e0:63:c3:c4:76:4a:
96:6b:a0:96:2e:be:cf:96:d8:1a:7a:f4:a4:4a:c7:
be:bc:a9:dc:ba:4f:2b:ca:fa:46:05:1c:1b:35:7d:
d7:6a:1b:d1:fc:a8:fa:67:8e:2b:bf:7c:d4:3c:04:
97:1a:e8:49:54:04:9d:8d:5e:de:12:8c:39:ff:29:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E2:C3:24:D3:C7:0B:60:A9:74:4A:D0:3D:54:B6:B1:33:AE:3D:13
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:f8:7f:be:f3:6d:a7:af:e7:86:c3:4d:4f:18:04:a7:f7:
fd:21:ae:69:c3:3f:11:94:34:2d:c4:a8:63:55:38:e3:dc:d3:
30:63:2c:1b:52:8f:54:fe:5c:59:9e:98:3f:df:53:21:8e:c2:
2b:26:ed:46:57:ad:39:ce:3c:0a:68:1d:d3:2a:18:3e:59:f1:
bf:ef:43:38:4a:2e:a1:9a:5d:c5:ff:6e:d6:d9:de:2a:2f:bf:
2f:fe:52:1d:b1:65:da:14:17:ea:0b:b6:ec:c7:30:05:d2:5f:
00:e9:75:89:bb:22:17:20:7d:28:8f:7c:8f:15:fd:0a:2d:6d:
e7:bf:3b:36:68:16:98:dd:c9:bf:d7:28:b4:5e:53:87:61:a4:
c5:f3:71:5e:1f:0a:5d:62:b4:90:20:62:3b:06:60:51:a8:bc:
3e:89:71:ef:6b:9c:8d:d5:70:50:6c:db:f1:92:50:21:d5:66:
9e:1d:d7:0e:67:4b:00:ba:d4:85:17:61:58:29:69:fc:eb:8a:
0e:01:cf:b3:00:05:57:6a:15:7a:9e:00:55:be:c6:56:cf:7e:
5d:a8:0c:34:ae:83:1b:5d:a3:8a:4c:f3:c0:2f:ce:c4:e2:45:
5b:7a:23:df:f4:20:93:08:20:84:02:37:a7:94:9e:5d:33:ce:
4a:d5:10:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:45 2025 by rpki-client