Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier: MI6tnMYgI4awA0oej0YZYn2UNfoC63Zt4k6c0KFIUrU=
Subject key identifier: BF:A1:0F:94:D5:B6:51:F0:93:E3:07:A1:E0:76:65:6E:12:8E:CC:FC
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial: 019937944FC30FE7F4AD362CC1FDF3201645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 07:01:30 +0000
Manifest this update: Thu 11 Sep 2025 07:01:30 +0000
Manifest next update: Fri 12 Sep 2025 07:01:30 +0000
Files and hashes: 1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: 5gxcVx9i5TLIEuaxHITEp51LTCvjW4mdyg4QQX6iwsM=)
2: HCmwt2WAK-H7WYTy1icgaTefv78.roa (hash: +bS4/m9dhw+Ug0oj+WLZYyQxSyPJBlp+QZfTQscGHe8=)
3: Haz2dutrUVMMKz8DWDpTMKU7v-M.roa (hash: UYJn16zkfgLSDIIDhGPHhj8L2SfoMr/Jiya6AdzxVHU=)
4: lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa (hash: bq6a+K+pPXFxcaKzeiruinFGWe/rm0xE/5P0J11lvFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:4f:c3:0f:e7:f4:ad:36:2c:c1:fd:f3:20:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Validity
Not Before: Sep 11 07:01:30 2025 GMT
Not After : Sep 12 07:01:30 2025 GMT
Subject: CN=bfa10f94d5b651f093e307a1e076656e128eccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2e:78:8a:65:0e:5e:71:44:1c:c0:b6:40:86:
38:d8:0e:23:18:66:b4:ff:9e:11:ca:fb:c6:86:6e:
53:c7:98:3e:eb:e1:31:a4:c0:50:6b:3a:41:2e:87:
1a:e0:f6:ba:6a:46:55:ed:93:22:06:05:49:53:54:
85:e5:27:e5:ff:dd:ab:bf:85:02:2e:7d:60:28:34:
95:d9:f5:d1:65:1a:a8:02:ca:2a:04:95:ca:50:88:
d6:8b:15:df:40:1d:f1:d3:0f:bf:eb:cb:32:f2:13:
d1:24:15:51:66:96:f1:4a:ae:42:91:6d:16:02:a3:
21:cc:3b:d2:b2:63:7e:ea:5c:b6:04:d1:28:99:8e:
6b:76:06:5a:41:d5:f8:93:ea:f2:d6:b4:21:67:9e:
b2:31:65:44:28:f3:64:09:2f:ca:90:03:59:1c:93:
95:b4:90:4f:48:84:3d:d2:de:cf:3a:9d:51:c3:e8:
7a:62:7e:88:ed:d0:ff:d1:e8:4a:c5:40:53:b3:75:
36:38:4f:e2:f1:c8:56:98:5e:81:ae:a9:cf:dc:29:
f4:d2:d3:ac:76:24:53:42:f5:f6:bd:c4:25:4f:16:
75:0a:81:11:55:fc:e3:75:51:48:2e:1e:fe:bc:be:
d4:6a:94:8d:1c:b4:3e:98:be:ee:6c:b2:c3:d0:09:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:0F:94:D5:B6:51:F0:93:E3:07:A1:E0:76:65:6E:12:8E:CC:FC
X509v3 Authority Key Identifier:
keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:7a:eb:7b:a1:df:95:bb:e2:f7:b1:3c:1d:a8:5d:0c:2f:
02:02:1d:2c:52:c9:51:67:46:9a:b9:85:cd:47:c1:6e:7d:c5:
3f:26:98:82:b0:71:98:1a:0c:f7:39:4a:96:d5:f6:6f:ad:04:
d7:ac:17:33:ec:18:da:1a:fd:2e:2b:d7:3d:b7:15:8b:61:fa:
f7:38:b8:b3:dc:4d:7b:4b:b2:32:89:c2:ff:e3:45:36:a4:b0:
9b:a9:b2:ee:ac:5a:72:07:ca:3d:5a:d7:6e:61:80:88:de:94:
9c:5e:c5:07:09:77:c8:ef:af:83:6d:05:bf:81:0e:95:54:c4:
73:85:71:30:40:ed:a8:dc:2d:80:47:3a:5c:ce:5b:82:5e:5e:
ba:d2:04:ba:04:0e:5f:2f:59:e9:c4:e9:69:41:37:43:21:53:
e6:f3:03:c2:09:c4:26:01:7a:eb:2f:77:8e:0d:05:00:9f:4f:
0e:51:2c:41:7d:79:0f:e8:d0:ee:c4:24:15:b2:2d:a4:d4:5c:
22:6a:bb:25:0f:8f:16:c5:b5:c6:da:4a:9e:fa:3f:0c:72:8b:
5e:52:06:8f:10:86:74:13:d3:f2:04:20:9a:9e:ea:2b:3c:a8:
e2:c7:0a:44:bf:e2:3f:81:77:1e:09:63:e1:fb:fe:7b:9b:e8:
33:a2:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:42:11 2025 by rpki-client