Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier: WsW6+itCXR+/945tentN3rsHfoaIF+ka78YI5KAUf9Q=
Subject key identifier: E0:01:F6:3E:58:21:BE:67:F5:D0:5F:8B:4C:2F:B2:EC:DC:25:3A:08
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 019921B0A3C2263791AA92809A26E209C2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:00:48 +0000
Manifest this update: Sun 07 Sep 2025 01:00:48 +0000
Manifest next update: Mon 08 Sep 2025 01:00:48 +0000
Files and hashes: 1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=)
2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: gCyczQjBgodu/QIYyNJQZH9muFdqr9u4JcZnjr20T9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:a3:c2:26:37:91:aa:92:80:9a:26:e2:09:c2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: Sep 7 01:00:48 2025 GMT
Not After : Sep 8 01:00:48 2025 GMT
Subject: CN=e001f63e5821be67f5d05f8b4c2fb2ecdc253a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:12:bd:95:9b:28:bc:4b:27:ba:3a:94:e2:
8a:44:de:88:36:d9:3a:e4:21:56:b9:04:25:8c:7c:
aa:ef:b2:6d:5e:e5:60:7a:31:1b:55:c0:17:c8:0d:
06:a1:db:23:3a:51:ab:5a:f4:b5:79:98:88:99:01:
90:ac:4e:1f:88:35:4c:ff:f7:b9:9e:f1:67:74:3d:
6c:3b:a5:45:2e:27:7e:75:8b:87:b5:da:b1:de:05:
4c:0f:3c:4f:24:b3:27:eb:d1:2a:e4:e0:63:85:b1:
87:e6:b8:e1:71:5b:39:77:2c:53:05:9b:90:2c:3b:
eb:ce:d3:56:f1:af:f0:7f:14:89:23:0a:d5:26:1a:
6f:2e:f3:83:d9:27:a1:bf:e5:8c:36:58:40:ae:28:
f9:3b:87:f0:b6:2f:d0:80:cd:64:77:7b:89:16:dc:
4d:42:22:9a:fe:d6:d5:ba:9a:55:f0:f5:ba:f7:46:
a4:80:6f:56:22:18:7a:b3:d3:5d:44:9c:b8:6b:60:
16:d8:e2:a3:f3:49:ea:3f:86:6e:79:b2:f1:a7:8a:
5f:65:dd:90:f8:a3:e6:72:1e:98:ae:43:55:19:f5:
22:55:bc:d0:a1:4c:18:7f:0b:c7:58:f1:67:91:7f:
f2:6d:ec:87:40:bd:51:7f:32:03:a7:a5:49:94:e1:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:01:F6:3E:58:21:BE:67:F5:D0:5F:8B:4C:2F:B2:EC:DC:25:3A:08
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c5:8c:25:2d:44:9e:89:ff:24:d2:4a:24:92:de:c9:c2:7d:
2d:fb:23:ac:ab:8b:e5:45:5c:69:1d:fc:4a:48:cf:8f:3e:04:
2f:94:32:fd:28:3f:69:1b:0f:82:44:19:2e:de:b4:4f:5b:56:
f3:7c:8c:a2:0d:fc:45:2e:76:1c:83:24:9f:9e:57:ff:4c:cd:
45:c3:61:aa:6e:f9:1a:80:8c:f0:0c:f1:0a:7d:b5:1c:9d:be:
c4:2b:a6:02:f4:4d:f0:ea:74:6a:98:9f:ea:94:43:f0:85:66:
dd:87:2f:4c:21:af:93:a8:e9:ad:a0:07:31:a3:4f:ba:25:af:
c1:64:41:d0:69:bf:55:6e:e7:7d:8f:5a:10:9b:f2:b4:2e:f4:
2c:17:d9:02:e4:6d:5c:13:50:5d:aa:a7:ed:90:53:cd:ba:c3:
9d:2c:83:2d:49:a7:ba:c0:36:ed:3d:bf:1e:45:dc:9d:92:1d:
e6:b2:6a:39:dc:3c:ab:63:cf:46:d0:e0:ed:7b:41:1d:89:b2:
e8:fc:45:f4:9f:54:88:92:35:c2:60:2d:c6:39:cd:f9:fd:25:
4f:a8:46:74:66:6a:61:9c:77:f9:b1:70:18:3f:d3:f0:2b:22:
46:2c:ab:d7:91:dd:2a:09:44:ad:87:be:32:26:7f:4e:cc:1b:
21:02:f1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:16 2025 by rpki-client