Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
File: 8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json)
Hash identifier: BEeciDXIgF/0iesX+jU6vBSBxTi4p9Tagt4HpvOXSw4=
Subject key identifier: 26:B9:A6:3C:BF:13:20:30:CD:21:78:1C:97:03:13:57:C9:36:28:BA
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Certificate issuer: /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial: 0199228CD8F8BA90F31C62170871BECC712B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
Manifest number: 3E
Signing time: Sun 07 Sep 2025 05:01:19 +0000
Manifest this update: Sun 07 Sep 2025 05:01:19 +0000
Manifest next update: Mon 08 Sep 2025 05:01:19 +0000
Files and hashes: 1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: nFOV5IJ2Cg2BOTV4uoVMaeBcQIPINNbSDkOklCF/OJE=)
2: kfUoGqSXXKSaS-PEIgtGaao6Ro0.roa (hash: LjonqlIQc85Yf1YLDViU9RKSdWSeDZPSWNCbM4dAk5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d8:f8:ba:90:f3:1c:62:17:08:71:be:cc:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
Validity
Not Before: Sep 7 05:01:19 2025 GMT
Not After : Sep 8 05:01:19 2025 GMT
Subject: CN=26b9a63cbf132030cd21781c97031357c93628ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:21:91:b7:0a:11:80:ed:95:26:68:92:38:
03:e1:6a:04:b2:ad:9e:86:f2:7e:73:30:fc:58:4b:
04:5c:f7:e1:d8:6a:27:d3:8b:74:b3:fc:22:58:4b:
e4:7d:e1:3a:ab:32:3d:4d:2b:0a:bd:fe:55:ae:d1:
97:71:79:ae:40:49:27:de:9a:99:f0:92:3a:0f:61:
a8:4d:76:b4:6f:8b:a7:5c:2e:07:4b:98:b2:22:5e:
af:e0:7e:85:87:a0:6b:b8:f2:b6:7f:99:eb:d2:b3:
77:33:be:0a:48:bc:c0:0c:85:6d:68:64:75:38:21:
a1:b9:3e:6e:77:ed:14:7a:ab:33:21:ee:ee:27:78:
91:61:d4:d6:75:51:3a:50:6d:10:82:91:00:72:56:
a4:a1:ad:21:4e:93:94:14:4b:92:61:69:5b:6e:ee:
eb:10:99:da:e3:25:bf:ca:32:f1:4f:b0:0d:95:a2:
95:69:99:60:a9:42:1e:ce:bb:b2:38:b9:91:b1:e4:
a2:c4:7e:08:dc:43:71:b7:00:a0:d5:a3:12:25:a0:
5a:ec:7a:9b:28:c5:58:87:96:1c:5f:0a:80:1f:fa:
3e:a6:c3:01:7a:60:2e:44:ab:9a:79:3c:c0:f3:a1:
6d:d6:26:ad:7d:f0:23:ed:08:92:9d:1c:c4:6d:21:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B9:A6:3C:BF:13:20:30:CD:21:78:1C:97:03:13:57:C9:36:28:BA
X509v3 Authority Key Identifier:
keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:32:86:f8:3c:f6:75:be:96:02:4f:62:34:45:0e:26:c6:e5:
e4:b0:dc:34:76:40:82:c5:c2:65:99:29:51:3b:ea:53:60:ab:
63:83:59:41:9e:19:9c:45:4b:3d:28:34:a5:b0:8d:8e:ec:fc:
16:7d:15:71:e7:15:fd:c3:94:4c:7b:23:98:c1:28:ca:c5:de:
c7:ba:81:9e:ab:ad:7d:e5:d2:76:f2:92:a5:2c:e0:fd:3a:ff:
a0:e4:e5:b1:a1:ad:06:96:0c:a1:3a:e9:1d:76:23:03:97:a3:
fb:a2:69:90:7a:54:ae:ee:66:cd:b6:d5:ae:1f:f3:3b:82:9a:
89:d9:db:f3:ff:98:c2:4a:ea:39:66:5b:6a:cb:45:0d:d1:3c:
48:25:40:56:78:8c:fe:10:b6:16:04:81:e5:e4:9f:a2:0d:a4:
a7:0f:fa:37:36:c9:9a:3d:1b:1a:d4:b9:03:97:ed:aa:51:07:
12:cf:a2:65:1e:16:c1:73:88:4e:77:9a:5e:73:8e:8d:e7:8a:
fb:6d:ca:db:aa:3e:26:44:cb:c7:fc:21:d8:7b:9f:be:e7:9a:
b2:7d:c9:03:18:44:7a:10:81:a5:19:fa:95:66:f8:ad:53:f7:
b6:f5:6a:14:38:a1:16:72:3e:81:35:5d:21:db:1a:f3:1b:7f:
37:d9:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:29 2025 by rpki-client