Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: IbO+wFYKz0uz/iIrfZzz7JHMe+tpfOqW/ZAnrHwITr8=
Subject key identifier: 87:25:28:AE:D2:72:5E:77:DA:E9:0D:02:96:31:C3:85:06:23:62:BC
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 0199221ECD4A402E786896F647E38B59FB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 0131
Signing time: Sun 07 Sep 2025 03:01:07 +0000
Manifest this update: Sun 07 Sep 2025 03:01:07 +0000
Manifest next update: Mon 08 Sep 2025 03:01:07 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: sPdTqmQIdPEm5vHkgE5m0HsOVOEAxT146z/aJZan/lY=)
2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:cd:4a:40:2e:78:68:96:f6:47:e3:8b:59:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Sep 7 03:01:07 2025 GMT
Not After : Sep 8 03:01:07 2025 GMT
Subject: CN=872528aed2725e77dae90d029631c385062362bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:00:3d:b8:c4:bc:37:62:39:70:51:e5:d1:
1f:1f:af:d6:53:29:e7:1d:1e:92:67:f8:9e:7e:35:
e5:a7:cd:98:90:92:7a:59:9e:fb:c0:c1:01:b9:1d:
bd:bd:95:d5:a1:46:7a:37:fd:0a:da:d8:b3:d8:86:
de:f9:0c:38:cb:b5:9c:65:3a:ae:bd:aa:ad:26:90:
bf:b0:b6:3a:6e:60:0d:23:e9:09:90:f9:28:6b:ca:
ea:02:13:ab:bf:65:4c:07:6b:a4:12:0a:60:96:a6:
65:72:45:a5:51:db:bc:ef:ed:c2:50:4d:ee:1c:45:
1e:fb:a4:11:d9:2f:39:3a:7f:c1:ba:e8:3e:d5:53:
44:b4:74:dc:c4:98:61:5c:e3:04:2d:f4:dd:3c:bf:
45:ba:f4:35:e8:2c:cf:3e:8a:5b:23:fa:68:be:df:
9c:62:48:e7:cf:aa:a2:36:07:49:35:e3:68:ff:f7:
dd:a9:dd:4b:ee:e0:05:80:13:41:0f:05:53:ba:6b:
6f:a9:58:bb:d0:a9:31:77:c3:e1:a5:38:79:64:1a:
76:af:bb:4b:69:2b:c6:81:8c:b0:36:9c:c4:37:59:
cc:6c:fe:e4:02:64:12:c0:7e:6f:19:18:43:f2:55:
e0:0e:22:08:4f:ff:be:86:84:da:3b:dc:f1:82:7f:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:28:AE:D2:72:5E:77:DA:E9:0D:02:96:31:C3:85:06:23:62:BC
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:86:3a:90:77:15:36:ed:f6:ee:7f:27:a1:06:7c:91:0f:3d:
8b:63:bf:4b:ae:2e:08:3e:66:2b:dc:2e:72:28:61:4e:a2:5b:
3b:4b:2d:8e:98:07:66:68:77:c8:cd:3e:bf:29:94:96:b6:9e:
18:df:08:0a:ba:91:28:f3:6b:f0:60:ae:dd:f8:58:6e:78:6b:
37:74:80:ef:42:dd:72:54:81:ef:de:b6:fa:0a:31:b9:8c:ff:
e3:4a:df:8e:b9:af:51:79:54:1e:c5:bf:cf:92:28:c9:d4:67:
61:d4:21:8a:61:d9:cd:4e:fe:5d:b8:69:d3:d8:2b:d7:3e:6b:
46:d7:bc:fe:62:87:73:9c:d5:10:02:b3:57:c2:f2:b6:15:7c:
41:46:41:24:e3:9d:0b:35:c6:aa:16:66:4d:fe:58:e0:5a:b2:
6e:00:1a:5f:c1:ed:f2:7e:3b:9a:38:dd:6b:36:3f:be:00:56:
d2:38:ea:f6:ad:79:41:7e:1d:1b:f5:45:f2:70:13:a5:12:09:
11:a8:96:a7:ad:0b:41:ae:a5:4b:37:51:fc:f4:19:15:e4:f8:
55:57:5a:5a:19:a8:24:d4:f3:b4:d9:4d:2c:df:52:d0:71:14:
24:5c:48:52:2d:ed:89:1c:65:5b:2b:a7:59:d3:33:0b:87:47:
ac:3a:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:04 2025 by rpki-client