Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: 846osNlxF9EKHColoK1LEx0A9cPG5hys5E6Rz0skUm0=
Subject key identifier: D4:F6:36:7B:A8:48:C8:27:7E:9B:21:0D:27:F6:71:E8:1B:F4:FB:F7
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019922C34DF72C4E8B99E9912AE1E060B704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0DFF
Signing time: Sun 07 Sep 2025 06:00:48 +0000
Manifest this update: Sun 07 Sep 2025 06:00:48 +0000
Manifest next update: Mon 08 Sep 2025 06:00:48 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: 70w2/xHtl5/HQ3r1yJGNDszhPt+gKlmJ8xXfaJW4pkg=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:4d:f7:2c:4e:8b:99:e9:91:2a:e1:e0:60:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Sep 7 06:00:48 2025 GMT
Not After : Sep 8 06:00:48 2025 GMT
Subject: CN=d4f6367ba848c8277e9b210d27f671e81bf4fbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:d2:50:d2:86:e6:d8:6f:dc:a5:6c:93:4c:
e0:30:ff:67:87:bb:c2:7d:44:12:12:cc:ef:d3:93:
ec:80:75:7f:7a:43:96:fd:b3:db:88:a6:b8:93:3b:
a7:02:d7:2a:36:55:89:36:c2:e3:2a:d3:89:17:a6:
35:8c:09:fc:ed:49:61:8e:f3:27:a9:13:bc:7f:70:
9e:96:44:9b:6d:1f:b3:ed:2b:f9:00:a1:82:36:b6:
00:e4:ae:9d:4a:7c:5e:bd:da:20:b7:d0:34:19:f7:
23:40:55:61:b7:25:e1:fb:cc:d6:59:27:fd:20:6a:
68:c1:5c:e3:60:d3:94:11:c1:1d:0d:25:e9:96:21:
70:59:72:8c:45:cc:cd:76:9a:e1:f1:eb:02:09:98:
7b:5e:d6:41:92:ab:10:7c:13:12:2c:94:ad:27:b1:
1f:78:3d:01:b3:0b:8e:82:36:40:14:b8:c4:f8:96:
cc:da:83:a7:bf:25:09:af:a4:99:07:3a:a0:b4:b9:
34:80:03:1a:13:17:1a:4a:71:f9:b5:29:ad:d1:15:
d5:d3:67:07:08:64:05:85:fc:59:ec:8d:b7:f2:18:
8a:77:4f:e0:f6:95:f4:5c:41:e8:78:03:76:52:af:
0e:38:ab:dd:c9:12:93:1c:0f:22:e3:9b:48:82:1b:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F6:36:7B:A8:48:C8:27:7E:9B:21:0D:27:F6:71:E8:1B:F4:FB:F7
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:37:bc:fb:ac:45:a0:91:05:c4:93:16:7b:cf:98:00:ca:
8f:1c:5c:89:86:f6:75:46:c1:1e:97:67:4e:b2:01:5b:88:02:
d7:be:99:05:7f:da:3f:cb:84:39:75:fe:85:68:0e:56:b5:30:
13:38:de:d3:b7:dc:12:d0:2c:6c:a0:2e:90:f0:82:0a:32:9d:
c2:2a:fd:d6:48:f2:a6:2c:00:72:89:d9:06:64:a7:97:e4:e5:
a7:8d:64:66:cb:39:cb:32:4a:f1:2e:73:f1:2a:7f:28:3d:19:
81:c6:ba:cc:d4:ec:11:66:36:a8:fa:6b:e9:08:52:06:81:61:
64:e5:02:0a:0e:8e:9a:bf:34:84:e6:21:ac:3d:1b:b5:94:cf:
e5:8b:50:b6:0d:7b:73:36:a2:f5:cd:75:23:7b:ab:ac:f4:b3:
e2:8e:9a:51:c7:d1:bc:c0:92:aa:41:ae:23:77:55:0d:9d:6e:
45:f4:88:96:f8:45:2c:be:f6:42:40:27:d5:7a:3c:1f:53:4e:
2a:5f:32:bd:83:00:37:01:fb:a6:73:44:3e:63:9d:30:b4:ad:
5d:39:54:70:43:24:10:27:0e:ee:48:09:c4:54:b4:eb:31:c7:
df:5e:19:48:42:6a:22:11:a7:e1:0f:03:59:5f:1b:09:c6:56:
3c:f1:eb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:13 2025 by rpki-client