Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: ec4CGNKwL9sVnnnLzBrjqFIbJYwoTg1MK1leI5nyUGM=
Subject key identifier: 2B:2C:9D:5C:86:5E:2F:69:AF:1E:90:29:33:F8:68:A5:D3:5A:D9:E9
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 019922C33F6B6213C17B7718E7138656AFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 06:00:45 +0000
Manifest this update: Sun 07 Sep 2025 06:00:45 +0000
Manifest next update: Mon 08 Sep 2025 06:00:45 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: So6cTj4DJicRblmudrQiPVBBvUcmVeKqmNwSjlYZhqQ=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:3f:6b:62:13:c1:7b:77:18:e7:13:86:56:af:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Sep 7 06:00:45 2025 GMT
Not After : Sep 8 06:00:45 2025 GMT
Subject: CN=2b2c9d5c865e2f69af1e902933f868a5d35ad9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:71:fc:b3:32:4b:c4:66:dd:f4:e9:90:ed:
be:67:9c:d5:83:33:63:1e:e5:e5:aa:9e:ab:9e:3e:
d8:34:ae:d7:79:71:e6:a7:b2:76:c0:e4:a5:75:c2:
fb:26:dc:06:f9:cd:8b:d5:41:c6:68:28:4d:90:95:
f4:b2:df:91:92:52:d5:3d:e2:bc:d8:ab:d0:71:42:
49:61:07:32:19:b6:e7:0e:de:83:53:7c:30:18:52:
1e:31:5a:b8:80:11:bc:6d:a6:c6:19:c0:05:55:56:
6a:ef:d4:51:1d:76:2b:16:ea:76:7d:71:3e:b5:f1:
ab:77:2b:79:67:6e:bb:11:cc:e1:74:bd:a9:ca:69:
1b:a1:7d:da:6e:de:ca:73:22:80:fe:5e:55:af:81:
d3:c1:2f:8f:0d:06:79:44:a9:ea:b8:80:aa:63:ba:
65:c1:d8:a8:64:3a:58:cd:2d:97:f3:fe:5b:31:ea:
15:89:88:38:2b:6b:a6:98:d1:92:e4:da:0d:bc:ed:
89:5c:1b:74:38:96:75:38:54:79:b6:73:37:f0:e1:
6b:ef:cc:b8:69:72:9a:b3:22:f3:89:66:dc:5c:02:
07:36:14:2e:eb:f4:7f:87:03:a8:40:f0:6f:07:30:
b7:49:88:d2:5b:d0:fe:f9:ae:99:e1:5f:4a:fa:42:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2C:9D:5C:86:5E:2F:69:AF:1E:90:29:33:F8:68:A5:D3:5A:D9:E9
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:53:c2:2b:fb:c6:af:ef:ed:e5:d6:3f:c3:ee:9d:ad:18:44:
57:90:b4:2c:20:2b:1e:5d:0a:cb:bd:f0:59:89:3d:06:8e:5f:
13:9b:a8:a4:0d:b7:93:c7:2a:80:00:2f:27:40:3d:09:8c:9c:
90:bc:07:75:88:70:50:2d:c9:0f:dd:5f:aa:46:21:e8:e0:7d:
5b:31:66:55:82:31:19:87:91:cd:d9:e3:44:94:c3:84:01:b2:
10:ec:f1:20:ce:60:0b:fc:5b:fe:8b:db:89:77:d3:06:40:05:
03:85:02:c3:82:cb:ef:d9:6c:2e:02:45:ee:7c:62:c0:2b:88:
67:d1:3f:f7:cd:a7:5e:65:95:b5:21:50:e9:46:8a:6c:9f:9f:
f7:8f:60:b8:53:a2:5a:aa:0c:e0:af:84:25:d2:27:8a:f7:34:
b0:22:37:f7:a1:9a:85:c9:34:f7:02:56:d6:0d:b3:de:29:29:
58:52:31:18:c5:42:60:43:65:2f:09:9b:2c:0c:4d:1b:4f:f4:
f0:24:54:47:c6:57:23:0f:ab:46:b2:e5:e1:f0:ad:03:86:53:
d9:80:80:bd:ad:57:77:3b:d8:a1:ab:a1:d4:e3:26:68:7c:08:
21:8c:83:bb:26:a8:79:b5:18:90:9d:3d:4b:04:13:2a:68:f3:
85:c1:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:40 2025 by rpki-client