Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: Kh5thkQQerWAXVhFYSnluSTXPz/M4XgAivSCTdqHQFY=
Subject key identifier: 40:FF:8F:A7:2B:D7:2F:86:18:0F:A3:8A:74:53:16:77:32:E5:CE:B3
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 01992F6C5E8412515C721563706B074F3D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 0FDE
Signing time: Tue 09 Sep 2025 17:00:55 +0000
Manifest this update: Tue 09 Sep 2025 17:00:55 +0000
Manifest next update: Wed 10 Sep 2025 17:00:55 +0000
Files and hashes: 1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=)
2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: y1jcUgKYOSbOtFa8JUqJtnFH4kO89hcGYJPlJjROcFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:5e:84:12:51:5c:72:15:63:70:6b:07:4f:3d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Sep 9 17:00:55 2025 GMT
Not After : Sep 10 17:00:55 2025 GMT
Subject: CN=40ff8fa72bd72f86180fa38a7453167732e5ceb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:ea:46:6e:e2:a6:9a:48:40:f8:14:74:fe:
d8:9b:be:4d:bf:36:54:4d:d8:88:fe:52:09:6b:ac:
38:d8:e7:c3:07:49:ef:60:1d:bf:a1:f1:a4:91:46:
29:a1:f1:03:3e:1b:0c:83:7a:26:65:3f:a2:f2:ee:
ac:13:f4:1a:08:0c:2a:c4:41:40:29:d2:21:9a:0b:
2d:43:71:27:33:bb:03:9f:d5:49:30:19:a8:aa:f5:
ed:cb:02:db:f4:fe:e7:79:40:cc:4c:c6:52:d3:61:
51:70:61:81:be:99:4c:a1:20:64:92:2f:08:b2:83:
57:cc:64:96:c6:1e:2c:b8:ca:e4:07:09:3d:b8:eb:
f9:28:80:f5:13:3c:51:b4:6c:01:d0:e7:5b:e8:f0:
db:26:d6:39:82:b4:ec:7f:0a:a1:e7:b9:a6:1a:40:
3a:b8:a3:8e:90:86:30:d3:a2:e3:dd:ef:e8:9a:33:
aa:03:94:39:34:e3:a1:d4:39:e9:1b:95:c8:c7:ef:
c4:92:03:58:54:af:aa:2c:a0:43:fd:73:e1:6d:2c:
5f:86:e6:53:ac:3b:d0:69:ee:00:0a:ae:a2:da:40:
5f:36:1f:1f:53:dc:a8:5e:cf:6f:e9:76:5a:6f:f1:
a7:78:fd:ce:15:f4:19:1c:21:3b:3f:b3:c4:38:cc:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:8F:A7:2B:D7:2F:86:18:0F:A3:8A:74:53:16:77:32:E5:CE:B3
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7d:ab:31:20:07:eb:c1:32:d1:fc:49:a5:4e:1b:08:8e:25:
35:7a:b6:0d:d4:32:97:4a:6d:39:dc:db:23:02:ba:b2:39:6f:
31:ec:23:dc:e0:77:48:7a:55:b4:a7:6c:4f:b7:3b:ae:29:5b:
e2:7a:5c:d8:37:6e:16:34:4d:7f:7b:4f:9f:b9:6b:2a:89:da:
07:a9:14:25:b5:93:05:3b:8b:7b:f8:77:15:bc:d7:5c:b7:2b:
4f:fc:58:16:f2:e7:5c:c1:64:1b:06:8a:e2:8b:32:7c:f2:e3:
12:69:54:be:10:9d:fb:dd:0c:3b:0a:db:ab:5c:e5:9a:94:cb:
42:63:a6:67:f1:a6:d3:0e:4c:85:c9:81:74:e6:a2:8e:6e:d3:
55:5c:0c:0d:5f:e6:50:77:93:42:3b:bc:7f:77:51:33:80:18:
8f:df:a1:c3:9e:75:b0:96:e2:f2:d1:86:66:0a:a5:aa:1b:75:
38:3f:1a:a5:00:f4:fd:39:73:66:d4:7c:d8:4b:94:ef:87:42:
06:93:bc:96:40:d5:c1:6d:07:62:09:1d:ed:dc:88:53:12:1c:
24:fa:c1:21:fa:3e:ca:29:33:c9:2f:00:70:da:a8:7f:4f:cb:
5a:14:60:df:96:a3:6f:77:68:6d:e7:d2:d7:cf:f4:4b:f9:56:
06:c4:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:02:39 2025 by rpki-client