Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
File: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft (raw, json)
Hash identifier: 4Q//5NQdKUkHlOPnxW4pUy3jaq7gPN6RC2Mnbvt4U+E=
Subject key identifier: 98:7E:56:FF:42:A8:62:4E:92:93:67:83:94:19:70:73:38:79:90:6C
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 019922C35EF5B212328B7D5B46B843C582AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
Manifest number: 14E5
Signing time: Sun 07 Sep 2025 06:00:53 +0000
Manifest this update: Sun 07 Sep 2025 06:00:53 +0000
Manifest next update: Mon 08 Sep 2025 06:00:53 +0000
Files and hashes: 1: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl (hash: 3K1nwKK3LY+ytESG6EI2A6X8isq6Dxqo0+sVFr7nafk=)
2: IhBK0ciO53Ec1EbuRK46uaRKreQ.roa (hash: 4ZKr5RNFkrNbbNrdBlZagiUZ6klyQ2uoBXn/MMtAeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5e:f5:b2:12:32:8b:7d:5b:46:b8:43:c5:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Sep 7 06:00:53 2025 GMT
Not After : Sep 8 06:00:53 2025 GMT
Subject: CN=987e56ff42a8624e92936783941970733879906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:6d:db:3c:84:1b:c9:9a:e5:a7:d8:de:e8:
b8:21:de:a5:8b:f1:48:f0:d0:32:0f:3e:1e:46:69:
20:e7:6c:46:53:68:65:c2:aa:1b:48:d1:2f:5b:ee:
79:2b:43:17:ab:5d:cb:89:70:f9:ef:95:99:ac:2b:
8e:63:b6:19:55:9e:35:d1:f0:99:47:02:95:2a:5f:
1e:61:69:4b:37:ce:0f:f1:ab:cb:c7:b7:f9:43:2b:
00:6a:6e:16:07:e2:d1:c9:01:2b:d1:ef:50:1b:4b:
1f:cc:b1:fd:48:19:1b:9d:8b:f2:f9:27:37:bb:76:
6e:9c:67:e5:4f:86:72:5e:0e:fa:06:d2:5a:4d:1d:
c3:83:2a:68:2d:f6:7e:00:70:22:c0:94:dd:7f:c9:
fe:b0:b4:4a:2e:69:59:11:69:c7:80:6e:77:de:90:
f2:8b:9b:b7:09:2b:cc:5a:64:5c:59:2d:03:07:5a:
46:68:45:f2:02:23:95:63:b0:7a:dc:51:f4:bd:bf:
3c:87:99:1b:16:02:0d:7a:08:c6:c8:f0:f5:cd:84:
1a:b8:46:76:e4:62:eb:cf:df:2a:d0:63:75:b2:33:
42:84:dd:21:81:40:3a:00:ec:ad:80:cc:c0:cb:b2:
3d:74:c2:cc:8e:a9:09:5d:9a:61:00:91:6b:40:3d:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:56:FF:42:A8:62:4E:92:93:67:83:94:19:70:73:38:79:90:6C
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:08:51:b0:05:e5:22:0f:c6:3f:f7:33:a3:26:45:3c:9f:46:
16:20:f3:ea:05:3a:ed:db:09:0c:11:a8:dc:10:1f:fa:21:23:
60:75:5c:b7:2b:b1:38:e0:fc:1a:71:d1:30:58:a8:69:8c:6f:
1b:be:ec:11:63:0c:86:13:40:73:20:8a:2c:bc:ad:74:e3:03:
d6:58:b6:fa:1e:2d:e7:3d:cc:67:2d:6f:5a:77:15:a1:13:a5:
61:b8:bc:90:22:70:97:91:92:0b:6f:ed:b3:b0:4c:27:9b:c7:
00:02:8e:3f:6b:f9:ef:c7:a1:6c:67:d6:8c:ee:9d:0d:4d:c8:
d2:ed:b8:01:d1:48:77:ae:3c:d9:74:64:3a:e3:d5:f0:30:65:
4e:56:f8:d0:7f:09:95:79:82:e7:41:27:0f:a7:09:2d:09:e7:
ef:63:6a:47:29:98:85:63:8b:5a:a8:88:68:9c:44:7a:45:0f:
0a:b3:ae:46:23:ed:01:9b:e0:59:d4:53:0d:ca:04:40:82:ec:
3d:c8:0e:4e:9d:29:c5:d2:88:47:35:7d:45:e8:c3:7a:e8:7e:
18:85:9b:4b:95:40:fd:6f:d1:08:b3:56:1a:0f:85:7f:4f:f0:
3b:b3:1c:17:aa:77:c5:9d:0d:08:69:7f:dd:0a:ed:f0:34:65:
25:ad:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:46 2025 by rpki-client