Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: MMHfTzviOY6Ro4Q7zyjSi2ca1nRNhoESfdJdiqq5onA=
Subject key identifier: 77:2B:CE:D1:FC:5B:02:8D:60:D1:4D:A4:09:8B:CE:C9:10:67:EB:A7
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 019922FA4343E3F120FBDA9462AAEB785DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 010E
Signing time: Sun 07 Sep 2025 07:00:50 +0000
Manifest this update: Sun 07 Sep 2025 07:00:50 +0000
Manifest next update: Mon 08 Sep 2025 07:00:50 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: lW1Q3bWLbIWZBaCoo2Ke2Qa8rj+WuWNoBgtIPuuz3ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:43:43:e3:f1:20:fb:da:94:62:aa:eb:78:5d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Sep 7 07:00:50 2025 GMT
Not After : Sep 8 07:00:50 2025 GMT
Subject: CN=772bced1fc5b028d60d14da4098bcec91067eba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:f9:d8:69:65:06:b9:ed:9f:bf:b7:25:1d:
b0:d7:15:7c:55:0b:c4:66:ef:7f:49:b1:95:5d:9a:
fb:33:a4:4a:e3:83:72:6e:7b:0d:4e:29:8e:47:ac:
c7:5e:1e:0c:5b:cd:6d:24:4a:92:b8:ea:b0:a9:77:
74:26:0a:9c:a0:fb:91:52:53:63:66:b4:9e:f0:34:
98:48:16:26:03:30:14:c6:2c:22:dc:cf:41:a8:85:
cd:dd:cb:66:49:6f:39:f7:63:93:ad:38:6f:b2:f4:
df:3c:df:2b:b3:37:53:8d:e0:dd:34:4a:5d:15:a6:
36:3b:39:5d:98:da:5f:8a:ef:a4:fd:8a:4e:de:c8:
a9:8f:15:01:81:a4:7f:cb:22:d8:fc:88:aa:80:e8:
11:9e:07:a6:ab:e6:5d:de:24:f2:f4:8d:03:6b:49:
50:1b:e0:c7:a1:3d:db:c1:3c:3e:b4:32:77:5c:86:
2a:8f:fd:e3:d4:65:b7:63:5d:36:32:e7:27:d7:3f:
e6:0a:49:d4:a0:f6:ce:74:36:b4:e0:ec:2f:04:86:
ee:c1:cc:2b:db:7e:47:85:32:84:82:68:4a:a1:9e:
4a:09:22:ae:ba:ec:5f:8b:5a:5e:53:7c:55:a8:16:
cb:c7:d9:53:93:16:d4:c2:ae:2b:18:1b:87:d6:8e:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:CE:D1:FC:5B:02:8D:60:D1:4D:A4:09:8B:CE:C9:10:67:EB:A7
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ce:45:de:03:3d:c8:5b:66:80:94:f4:fe:49:d8:5d:19:80:
f5:ce:6b:5c:23:43:5e:44:1b:32:db:26:45:27:74:f1:f1:8a:
26:c4:d6:d0:40:24:09:c6:83:3d:58:c8:8f:c0:d8:3d:d9:bb:
9d:36:e1:9b:1e:87:b0:31:a5:12:55:17:52:9e:0d:90:8b:42:
e9:fc:ba:0c:58:0f:c1:35:2d:48:67:6f:50:75:c4:85:5d:1c:
bc:ea:fb:48:23:38:96:8d:db:25:28:9a:59:0d:56:fc:4a:30:
ce:e5:b4:d1:14:ca:35:7e:54:7a:f0:24:bc:78:25:7e:44:62:
b1:4f:55:ed:e0:c6:dc:3a:05:ef:5c:21:1d:7b:2a:7d:f4:23:
4b:9d:d1:6b:ba:a3:ef:79:d1:0b:02:db:74:2c:92:c9:cd:16:
b5:ca:e9:60:16:a0:1b:68:91:62:8a:70:87:a9:60:b3:1b:4b:
27:3d:ee:4e:97:ad:04:6d:78:b2:ba:d1:3f:e1:d3:c4:c5:00:
74:57:af:e7:a3:f8:4c:5f:60:b5:44:e8:86:ed:75:b2:e6:1e:
4f:5f:d5:ec:f8:d1:27:6e:0d:a0:12:91:68:8a:27:f8:09:bd:
d4:ac:e9:39:20:dd:4a:6b:2c:93:f9:40:ee:c2:db:ee:ed:73:
1a:71:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:39 2025 by rpki-client