Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: GBo3dbd1q49VNUzWqetn2SzrHoBVOi3l/c6PUjzNjeM=
Subject key identifier: 1F:28:5B:E3:C4:49:C5:55:C5:99:A6:9E:0C:54:1F:F0:F6:E1:F5:1C
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019921B073530456BD3E8566A07DAFBF47FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:00:35 +0000
Manifest this update: Sun 07 Sep 2025 01:00:35 +0000
Manifest next update: Mon 08 Sep 2025 01:00:35 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: up12g2fC4aiczwby7M4aW4Vk/dEAVNfAldwjEFxIJkU=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:73:53:04:56:bd:3e:85:66:a0:7d:af:bf:47:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Sep 7 01:00:35 2025 GMT
Not After : Sep 8 01:00:35 2025 GMT
Subject: CN=1f285be3c449c555c599a69e0c541ff0f6e1f51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:6d:3c:9d:d4:04:33:e1:24:c8:0e:5a:90:
e4:e8:f9:ec:cb:96:bc:06:8d:b4:43:53:9d:c5:6a:
fd:aa:11:89:2f:30:68:c7:5d:c2:83:23:66:22:2d:
c9:7e:19:77:a1:3f:22:77:01:34:06:95:d6:ae:dc:
be:0d:9a:ce:3d:69:28:31:56:e7:c3:1a:02:83:79:
10:14:c4:6c:88:b5:f0:e2:66:9c:17:7d:7a:17:74:
4b:3e:35:d4:75:5b:5c:82:8f:60:55:a2:d0:15:95:
62:52:b7:5e:51:c7:e8:ab:62:57:31:b3:a3:03:69:
8c:13:f4:a2:0e:51:18:d3:1c:db:1c:e5:b0:15:5e:
15:a0:e3:19:cd:6c:e7:7b:5e:87:a9:ee:21:f2:10:
15:77:21:a8:23:94:ee:1a:a4:4a:37:63:95:59:3f:
3b:6e:1e:0a:1d:5f:33:bf:fb:2f:b2:56:a7:bf:b7:
71:da:26:3c:53:85:1d:d8:cf:58:dd:ca:25:77:32:
2b:1f:64:0a:66:b4:86:d5:bf:99:78:b1:f1:78:43:
64:e0:2e:ff:51:e7:c0:98:72:68:70:78:12:5e:8b:
a5:1e:6b:63:f3:94:1c:e8:75:3d:ea:ce:b1:b3:43:
74:be:4d:28:d0:d1:14:35:e2:9b:df:01:2e:1a:ed:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:5B:E3:C4:49:C5:55:C5:99:A6:9E:0C:54:1F:F0:F6:E1:F5:1C
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:50:b9:19:ca:1b:9b:4c:1a:d3:48:f7:bf:bc:9c:41:96:
c1:bc:3e:6a:1c:8c:34:14:4c:34:af:55:7a:6d:49:f9:d0:86:
99:9a:c8:e2:92:7d:d2:2b:9a:e9:dd:80:c9:64:9c:7d:6a:5c:
83:f5:11:9f:db:c3:54:7f:33:df:f3:4f:fc:35:2e:94:51:aa:
72:f1:84:5b:42:da:23:93:68:e9:3e:07:c3:5e:3a:f4:70:88:
4d:44:95:bf:39:c6:72:a0:bd:6b:16:f9:92:68:b6:6c:fe:1f:
68:3c:78:1f:63:a4:a6:f5:99:5c:53:c9:c4:b8:5c:83:0d:71:
22:18:e3:cc:e8:dd:22:ce:f2:10:ca:f0:a8:56:bf:20:e6:f4:
df:e5:40:4d:5c:1a:a5:71:27:f6:7f:19:81:a5:6b:85:a7:2b:
2e:d1:8f:42:c6:cf:f1:d6:27:5e:9e:55:9c:a1:43:5d:e4:fb:
fb:af:1f:e8:4a:05:57:d1:c3:19:c2:c2:3d:98:e5:75:53:46:
45:47:d3:33:50:31:f0:0d:da:19:17:9e:52:cc:8c:68:23:0b:
e3:22:73:d0:32:60:5a:b4:42:41:34:ca:b0:ef:81:92:3f:93:
64:ae:ac:b5:ab:3f:6e:e4:bb:78:e1:cd:a8:af:b2:7a:62:12:
c2:31:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:42 2025 by rpki-client