Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: M3qmPhAXchjt6ThjurcLOWeYyTVutm0uUFbnRIfloQc=
Subject key identifier: 39:CF:DC:A5:5D:57:73:61:36:D6:AE:16:96:90:22:9E:F5:2F:F0:7B
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 019916F6A34B42867515236BC552FD2F19CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 04E4
Signing time: Thu 04 Sep 2025 23:01:26 +0000
Manifest this update: Thu 04 Sep 2025 23:01:26 +0000
Manifest next update: Fri 05 Sep 2025 23:01:26 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: 5pvbWZdZloP3zgqeOXQJZoGqBQvtqMrsZK5os353TiE=)
2: QxzsJBZ0KnjdWggXNkiPE3mxTiE.roa (hash: wp71B9vMq7Np21xWaUokwt4Wn7Ga2Zz2FhWmCQz4Lj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:a3:4b:42:86:75:15:23:6b:c5:52:fd:2f:19:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: Sep 4 23:01:26 2025 GMT
Not After : Sep 5 23:01:26 2025 GMT
Subject: CN=39cfdca55d57736136d6ae169690229ef52ff07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:5f:9b:da:b9:1e:5a:8a:fa:39:2b:bf:d2:
a0:a3:82:f5:44:80:c1:92:26:d5:b6:f9:67:a0:ee:
94:35:ff:38:03:b6:9d:32:5c:ab:31:d2:99:de:bb:
a8:57:46:b3:73:78:42:17:7c:e7:84:6a:b2:f2:a2:
23:3e:6e:5d:c3:66:93:30:6f:0e:83:04:49:9c:d6:
de:0d:90:51:37:32:b0:4b:6e:11:bd:15:30:28:8d:
3a:ea:6c:3d:a7:0a:9f:e5:5a:7b:fe:78:e1:17:c8:
28:58:36:47:f4:c6:54:38:f3:ea:cf:e2:86:0a:23:
71:3e:e0:12:f8:4c:b0:fe:1f:d0:4c:98:e1:24:10:
f1:dc:aa:20:1f:f9:91:cf:e8:97:4f:7a:d6:13:f0:
d6:b7:0e:14:10:7d:e5:50:f4:a5:f3:af:69:c4:c0:
54:61:1a:b8:98:47:57:cb:d0:60:c5:c2:3b:61:08:
08:f3:5d:d4:a5:10:43:3a:96:ca:dc:9c:f4:99:b6:
ac:47:6c:1b:b0:8f:50:d5:36:c9:72:ed:5b:c7:2e:
1f:3b:ed:fe:ee:34:a0:bc:df:54:be:83:56:b3:19:
1a:95:04:2a:9c:b9:d8:a0:d5:68:67:db:37:ec:5d:
89:14:fd:c2:48:62:26:47:4a:dd:71:5a:aa:6a:d2:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CF:DC:A5:5D:57:73:61:36:D6:AE:16:96:90:22:9E:F5:2F:F0:7B
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b1:b9:00:a4:25:9c:eb:44:bf:0c:79:1b:e6:84:6c:b4:5b:
6b:f8:cb:30:55:f0:ef:8a:d4:95:e4:c4:5c:88:e0:31:b9:49:
88:92:b5:a0:d7:51:10:5a:7b:10:de:ec:ee:47:3f:2d:df:eb:
9b:a4:1a:55:c1:a2:fa:f9:e9:b5:84:33:f5:1c:e5:5d:ee:30:
4d:4d:cf:17:71:f0:ac:de:d3:bb:ef:32:b7:21:47:0f:98:d2:
7b:a8:57:e3:4c:d5:b4:94:f0:9b:63:bc:c1:57:da:3b:26:50:
07:2d:7f:fa:bf:0d:be:6e:7f:3e:e3:48:04:cd:b9:6e:04:32:
7d:d5:bf:aa:3c:bb:c5:93:7e:94:3f:88:c2:6c:6c:12:f3:4b:
06:d5:aa:35:39:68:3a:b5:73:ae:a3:7d:18:5b:0a:c1:a3:59:
cb:4f:2b:8f:b9:8b:49:8e:90:1d:81:a5:28:da:6d:f7:fd:b4:
b3:de:2a:ee:0a:67:31:da:80:83:63:0f:e4:58:a3:5c:d8:ad:
ab:fa:b5:11:a3:2c:aa:89:41:4d:34:7c:6a:9c:77:5b:a1:03:
d7:37:fd:5d:13:3a:f5:88:3e:38:b5:fe:72:59:60:e1:4f:2e:
39:ad:1d:b3:d3:33:8a:29:70:06:8d:ee:28:d4:4e:0e:08:e5:
0b:1f:05:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:34 2025 by rpki-client