Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: 7avkOaI3CPxOZxWSx9EU6lA77/sThO8pqWxEl6VPNK0=
Subject key identifier: 1F:B0:63:B2:29:6C:8D:F8:88:EE:63:03:DF:6B:83:43:FF:99:DB:0D
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 019922C3B845D8182E80ECD60AA5BBF9C8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:01:15 +0000
Manifest this update: Sun 07 Sep 2025 06:01:15 +0000
Manifest next update: Mon 08 Sep 2025 06:01:15 +0000
Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: z2xKtGkEa1qmEUjwhjruEqRnXD19vaacgxWvjyZNDDw=)
2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:b8:45:d8:18:2e:80:ec:d6:0a:a5:bb:f9:c8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Sep 7 06:01:15 2025 GMT
Not After : Sep 8 06:01:15 2025 GMT
Subject: CN=1fb063b2296c8df888ee6303df6b8343ff99db0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:08:3e:92:53:52:8c:69:c8:1c:ea:8f:db:
85:79:ea:8f:8e:7a:84:50:10:07:1f:93:1b:22:e3:
cb:2b:eb:70:a5:92:f9:cd:81:bf:ba:c9:00:3d:9d:
96:e4:01:85:9b:f8:96:e8:d3:85:db:28:41:43:05:
11:b6:ec:1d:2a:6b:6c:2e:0e:9a:7f:49:cc:12:ee:
bf:07:65:c7:12:51:53:82:c7:9c:69:b7:b9:9c:a4:
a5:0d:b9:5b:ff:57:f0:c7:18:a4:cf:69:45:91:22:
27:84:aa:f9:c0:37:f2:83:f4:aa:c1:fe:dd:8a:b4:
f7:f6:7f:e8:6d:99:f4:c3:cf:bb:b8:71:27:81:a9:
da:2d:82:44:25:81:5a:a4:c5:c1:91:0a:d4:3e:d1:
e1:1c:ec:4a:f1:21:15:d2:85:35:6b:6b:f5:c4:5c:
65:e7:84:9a:69:7a:1e:d4:f7:8d:25:52:6e:d2:ed:
01:44:82:1c:9f:45:5b:4e:58:c9:ad:9b:07:61:21:
e1:af:65:4c:b4:44:59:7d:75:44:b0:12:64:bf:df:
74:e1:fb:d6:94:d1:6e:83:42:a5:80:37:4f:bc:66:
37:59:54:be:a6:7b:7e:cc:d5:ff:81:e6:3d:69:b7:
bc:df:d2:c5:d4:54:14:a5:17:b1:e2:f1:0f:96:4b:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B0:63:B2:29:6C:8D:F8:88:EE:63:03:DF:6B:83:43:FF:99:DB:0D
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9d:04:f1:f7:61:9d:04:9f:e4:a2:26:bb:34:90:83:9e:79:
46:99:c1:3d:e7:4b:d6:5b:80:59:1a:5b:c2:e8:f2:bd:44:1e:
75:c9:f5:a5:78:46:ae:12:f3:12:35:d3:f4:30:7c:00:f6:ea:
44:da:e9:7c:c3:72:fd:3e:12:2a:d9:9a:3d:56:c8:7c:9e:5c:
72:e3:8f:0b:bd:ec:c5:0c:76:8d:09:eb:a3:58:44:bb:3f:6b:
b2:d9:dd:b0:58:a1:db:3e:fb:80:d0:78:ad:59:a0:06:a0:ae:
6c:23:b1:8e:b1:e7:6f:c5:db:25:37:a1:0f:69:45:fe:3f:b4:
59:c5:bf:ff:27:3f:1e:57:38:46:fe:ed:b8:9f:be:50:23:6d:
62:94:91:df:ca:9b:4c:cb:30:03:1d:2b:e2:65:6f:80:e5:f6:
b5:9c:40:59:9b:d5:18:a7:de:0e:a9:73:02:71:04:73:45:a2:
da:3a:0f:99:01:04:5d:9e:25:eb:cf:bd:fc:4b:bb:75:f9:d0:
07:11:2c:f8:9a:44:87:43:5b:4d:cf:b1:aa:f8:d2:6f:40:0c:
07:96:7c:99:c7:1c:79:f4:c7:5a:61:70:f6:4c:85:b3:1b:68:
84:77:80:68:fd:ea:3d:6c:82:77:f1:80:03:14:40:b3:cf:ae:
6f:39:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:17 2025 by rpki-client