Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: WU9a48ceMZZbp2XAkL5JIVl2w/j+gBctTmdFyObJ+Kg=
Subject key identifier: 34:88:2A:37:25:48:B8:4D:89:6E:40:39:F3:3D:6E:09:1F:4F:BE:4C
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019933EE80E20C5FEDED062CF0604112461E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 1262
Signing time: Wed 10 Sep 2025 14:01:32 +0000
Manifest this update: Wed 10 Sep 2025 14:01:32 +0000
Manifest next update: Thu 11 Sep 2025 14:01:32 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: v1a0PqXPMLKH1xXgb0aeZ15OgpTGYJPj6p8hNQuBn1M=)
2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
3: 7cGpErFojxZQKCSeJeJ8U-ucjfw.roa (hash: u8HNSCh1+MNiLey93QoDDaHwFmVThoOReQEndhAwPeo=)
4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
5: YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa (hash: J+sfrqDRaIaNCnrB/qidc2XHG3Pcd1LgS59q0souwmY=)
6: lJFoGwOfjYG7bpWJkltu5e79TPY.roa (hash: a/JvmbooIi2RUBJmFiHrsUi1IesqwE85tvSq7Xkrm58=)
7: nAU_2VpM5SccaGQsl0YkIDwDC1w.roa (hash: LkSzGNi0v1t7wdhC/pLyKhtEY4pQXgh7tGdjsi4l0Ig=)
8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:80:e2:0c:5f:ed:ed:06:2c:f0:60:41:12:46:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Sep 10 14:01:32 2025 GMT
Not After : Sep 11 14:01:32 2025 GMT
Subject: CN=34882a372548b84d896e4039f33d6e091f4fbe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:ae:f2:16:91:c4:73:2d:6f:79:7f:3d:c4:
9f:d9:1c:a8:05:2a:2e:d0:75:e5:78:7d:82:14:b1:
10:3f:25:a3:48:06:1b:55:bc:a9:d6:30:88:ab:12:
39:d0:db:1e:44:7e:ff:a0:7b:09:fd:7c:3c:c6:8a:
cc:5c:15:12:c5:bb:8f:46:92:fd:c1:9e:5f:18:a2:
01:51:1d:13:2f:08:66:2a:0e:c9:1f:f8:06:03:0f:
91:99:86:3b:3d:ac:5d:2b:76:13:01:6f:f4:b5:b7:
a1:d8:f5:c4:5a:ab:71:6e:94:82:fd:a1:93:2c:1b:
6f:24:84:a6:65:cc:48:98:3a:a7:22:0e:13:c2:50:
65:1d:22:bf:d7:a4:88:1a:3a:fc:1d:e4:1a:d4:4f:
d3:15:34:ff:48:ce:b6:26:76:ef:00:31:25:af:98:
c2:c2:76:3e:9c:ca:d6:ee:3f:fd:42:c7:57:c7:3e:
47:6e:3c:70:8e:04:85:f6:f7:37:be:70:10:63:fc:
08:d7:cc:ef:f7:d5:58:6a:ed:ab:3d:00:49:1a:20:
01:ed:99:85:7a:b1:4f:fd:5b:43:af:94:c2:55:33:
05:95:a2:f8:43:9c:7e:03:db:89:65:c5:ac:ac:44:
cf:92:43:78:92:1a:e5:29:ae:2e:c8:aa:44:1e:9e:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:2A:37:25:48:B8:4D:89:6E:40:39:F3:3D:6E:09:1F:4F:BE:4C
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:e7:20:41:0c:0e:03:1b:f5:82:6a:6a:a7:de:87:33:d9:
9b:1f:c1:0b:08:0b:44:f6:d2:2c:59:16:1d:5d:a1:f6:a9:d8:
5b:54:99:81:c1:a8:3f:a8:a8:72:eb:29:09:a3:99:c2:91:eb:
81:d4:cf:9c:4a:19:b0:6a:ff:2a:84:41:fe:c5:a8:cd:93:75:
5a:87:1d:87:97:9d:07:44:45:ee:d0:fd:77:b2:cf:39:a1:33:
52:4d:3b:ac:65:51:2b:87:91:20:f8:6d:a0:43:b2:67:6e:54:
c5:9c:6f:be:c4:45:51:47:73:d9:9b:86:38:f1:d5:2d:5c:b3:
7e:5f:c0:1e:f5:3a:d0:6f:76:54:cf:da:a6:e5:4a:a9:2c:a1:
7d:8b:79:8f:81:b7:fc:03:e3:18:ac:e4:1a:38:df:8a:43:aa:
dd:26:9e:22:ff:b7:74:7e:7c:2a:79:39:23:66:c8:b6:25:43:
48:c5:7e:fc:71:fc:8a:05:89:c8:14:39:42:51:17:69:68:7f:
be:73:e2:e3:f3:9d:47:89:4a:4f:7a:26:58:ef:73:36:79:ca:
a3:71:fa:0c:48:fc:4b:4c:3c:68:a0:51:9c:6e:59:cd:a0:70:
85:6d:a3:31:1b:6f:0b:15:fd:04:1c:40:3f:5e:13:c6:b5:ca:
17:8a:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:27:52 2025 by rpki-client