Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: ppxQuOA5TYUKsWhJrYMMZJMv1gcjdxsu9/O4W+zH+Rk=
Subject key identifier: 4B:CA:08:0F:E7:81:6E:F3:48:B2:40:B9:7B:FE:2F:C5:D0:54:DA:66
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 0199326D80E0C50DBBDE4466DAC56A0FBBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 07:01:01 +0000
Manifest this update: Wed 10 Sep 2025 07:01:01 +0000
Manifest next update: Thu 11 Sep 2025 07:01:01 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: ltlJ3WugYFf63Sjcu5bHaFJYwLgZOidpoZ6W0WPq8oY=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:80:e0:c5:0d:bb:de:44:66:da:c5:6a:0f:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Sep 10 07:01:01 2025 GMT
Not After : Sep 11 07:01:01 2025 GMT
Subject: CN=4bca080fe7816ef348b240b97bfe2fc5d054da66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:ad:cd:ed:d0:1a:34:36:22:5d:8a:9c:6d:
8e:26:95:21:2c:05:43:41:0e:74:bb:3b:4d:f1:fb:
b9:58:c2:79:02:6e:12:c0:20:b1:44:02:f2:a0:cc:
98:86:86:2a:7f:7d:a3:32:86:10:5f:48:03:2a:79:
1d:31:71:c6:2c:ab:6e:4f:97:83:61:0b:04:56:ab:
dc:76:1e:30:2b:c0:60:2b:00:48:c2:ee:ef:cd:2b:
6d:57:af:09:92:fb:dc:21:2f:a7:fd:1e:21:6b:1e:
8d:7c:a8:52:ee:3d:f4:9f:9f:71:61:89:04:a7:71:
5d:02:96:38:af:ca:e0:8e:e8:26:d4:5c:45:31:45:
56:7c:de:34:eb:5a:9f:18:cc:91:f2:62:27:f6:ff:
c6:76:d3:57:5d:51:49:f3:f0:25:b5:37:d1:88:93:
46:ea:c6:44:44:cb:95:de:ad:dd:f4:4f:86:92:8f:
b4:99:1c:21:57:18:c0:90:59:e2:66:3f:77:aa:83:
26:d4:61:fb:dd:1b:75:2d:9c:c3:9d:9b:1f:fe:9e:
47:73:ef:4d:6f:2d:43:26:4c:0e:05:29:46:97:e5:
7a:ec:c0:03:8f:3b:f4:db:24:10:f9:44:e0:27:8f:
09:1f:82:7b:c0:24:4f:3e:4d:ea:49:8b:b6:35:17:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:08:0F:E7:81:6E:F3:48:B2:40:B9:7B:FE:2F:C5:D0:54:DA:66
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:50:71:f6:14:1e:8b:75:8d:14:53:ba:62:83:55:b4:07:
3e:98:88:3b:95:d4:bf:25:a0:be:7b:36:04:90:02:2a:5e:bb:
16:44:d1:ae:93:16:95:cf:97:a0:6c:31:d9:d7:39:b6:89:59:
df:91:f1:1e:0e:10:51:fd:86:eb:98:45:43:1d:14:b8:71:66:
c7:3a:a2:e0:9e:77:70:b0:a5:0d:59:74:c5:fe:a6:21:d4:1b:
49:a6:cf:de:29:f1:7a:c1:a3:83:9a:8e:27:78:a5:9e:82:4b:
9f:e9:f0:37:60:32:42:11:b2:49:61:f7:8b:85:85:e5:01:f7:
f9:d4:18:86:f8:8c:7b:ed:34:ed:69:f6:fc:fa:0a:d3:e0:80:
b3:f5:aa:e4:f1:84:5f:d9:14:5c:5e:70:30:89:8a:75:43:5f:
af:14:06:5b:47:98:f1:42:19:ae:f8:ec:51:60:be:8e:d4:10:
5a:e5:a2:f3:83:c8:14:7a:25:f4:ad:fd:56:e6:f6:57:ce:5c:
f8:05:e0:e7:37:2e:08:a8:d4:4c:7e:23:07:52:50:0c:bd:2e:
44:28:f4:c1:07:02:38:58:7c:9b:8b:18:e5:f7:1a:f6:2f:80:
97:a8:aa:59:8c:b4:be:dc:17:e9:10:c4:c2:bf:4e:9a:72:37:
30:c9:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:26:53 2025 by rpki-client