Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: 3/NEzQNlZZkxNh6p/s96aDyLYP12cdKc9KKPzTmC8AA=
Subject key identifier: FB:81:F2:EB:E6:70:43:55:75:12:46:78:3B:8B:46:69:86:8B:42:03
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 0199228D24A269BE4FD2F4C0264253A12BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 1298
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: RNNTgvleNH4/d6PyxjUehOzss2zkWgF3IDbyspXeeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:24:a2:69:be:4f:d2:f4:c0:26:42:53:a1:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=fb81f2ebe6704355751246783b8b4669868b4203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:72:df:cd:aa:66:01:42:fc:f6:0f:d9:48:
04:23:8f:c1:59:63:01:96:53:8c:de:3e:a7:6a:5b:
ef:91:01:89:d5:e7:bb:42:ae:f0:dd:9e:f2:36:ab:
52:10:77:d4:8c:dd:1e:30:81:c9:eb:4a:52:a0:f9:
bf:d7:83:75:de:32:3d:33:0a:2e:37:a3:71:d4:b5:
bd:af:cb:0a:6a:dd:d4:6c:ec:79:eb:e5:2d:67:1a:
3b:ae:b0:85:52:36:15:0d:e5:33:21:45:5f:4e:a8:
4c:ca:f8:e2:5f:bb:c0:f3:33:c1:c6:04:91:35:a2:
1f:c6:23:4b:3d:2e:e6:6f:58:fd:d2:d9:b2:7e:6a:
a6:9d:57:4e:24:76:c1:c4:a5:64:1e:b2:4f:38:6e:
6f:df:4e:1f:10:20:88:00:e9:d6:aa:86:fb:f6:04:
af:69:a2:a6:f7:de:99:bf:f0:66:72:8e:20:56:ab:
1b:be:da:f0:04:44:4e:8d:7e:a4:ad:c1:ea:a3:ec:
21:3f:5d:6a:a1:97:06:86:c7:b7:b9:43:af:5f:56:
e2:be:b8:76:b6:61:67:2b:64:17:26:c4:96:9e:32:
4e:7a:6f:9d:a8:52:b5:22:09:c8:b0:e0:fd:35:33:
9f:aa:68:7f:6c:30:bb:be:8b:e2:b1:af:d9:bb:3f:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:81:F2:EB:E6:70:43:55:75:12:46:78:3B:8B:46:69:86:8B:42:03
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:78:e5:dd:93:13:16:16:e1:45:25:ae:38:df:b6:9f:30:
3a:f9:9f:26:7f:b3:75:7a:a5:52:08:7d:69:1c:04:dd:47:aa:
30:fe:fd:d2:81:cf:2c:04:ac:bf:3a:ce:af:e1:be:aa:08:7b:
4b:55:58:0f:11:c5:41:24:d9:84:ce:04:a7:4e:e3:92:fd:fa:
e4:1b:1c:93:20:05:14:5e:69:bb:73:dd:a6:71:d3:d5:d0:f9:
6e:12:fe:83:d6:23:e1:50:2f:4c:25:0d:89:0e:67:4b:6b:d9:
0d:5c:24:6c:e6:8f:80:4f:c6:11:e6:60:73:20:37:eb:cf:2e:
3d:70:64:fd:e7:5c:3d:e0:66:a5:54:85:93:3b:e7:34:8e:75:
35:36:3c:cc:36:4a:20:52:5a:aa:eb:53:ab:97:cb:18:51:c1:
61:16:3e:f5:6c:3d:44:bf:1b:3e:04:fd:78:37:33:1a:fb:80:
51:68:5d:19:37:25:45:51:39:7b:b1:1d:05:ec:3e:e6:94:95:
5d:65:18:6d:fd:f6:f9:4f:a2:fc:1c:e0:85:c3:57:0a:f2:a5:
c7:a5:e5:ec:9d:70:78:64:74:7e:e7:97:00:79:49:49:77:55:
b9:3f:4c:a7:39:a1:45:66:aa:17:c2:a1:47:53:a7:a7:36:61:
df:08:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:22 2025 by rpki-client