Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: q7DN6DR4HR3RnCdcNtDKwVn5PWWPVwuuebk0yA/zm8I=
Subject key identifier: BD:F3:E4:41:7A:66:CF:00:F3:3D:4A:22:0C:E1:15:19:72:97:9A:9B
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 0198D9609E92C836BDFB85FC277F9D0718B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 164D
Signing time: Sun 24 Aug 2025 00:00:44 +0000
Manifest this update: Sun 24 Aug 2025 00:00:44 +0000
Manifest next update: Mon 25 Aug 2025 00:00:44 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: C2tZLHaGuRQ4b2/odu9qrfs06AH6zjyacSgz7YjzwaY=)
2: G6K_DWhWU68de4ypb82fcRNbq1c.roa (hash: Gtd0kHs/yyYgjTN6WOR+S2KJ5GiQ71eqM+ooEqk1CdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:9e:92:c8:36:bd:fb:85:fc:27:7f:9d:07:18:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Aug 24 00:00:44 2025 GMT
Not After : Aug 25 00:00:44 2025 GMT
Subject: CN=bdf3e4417a66cf00f33d4a220ce1151972979a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:8a:48:0c:5c:52:ad:5d:b2:4e:8b:f9:53:
ab:7f:61:fd:a9:3e:98:55:f1:4d:cb:d3:1c:b2:e8:
6a:45:bd:a0:33:aa:89:b8:42:d1:b2:bb:df:3e:25:
df:a8:8d:73:01:d2:ef:7a:b1:65:93:52:91:6a:73:
9a:45:cd:12:b1:a3:a2:a5:4b:3d:65:68:11:a3:6b:
33:15:8f:7f:ee:a1:4a:e7:cc:7c:f2:c2:30:5d:19:
28:7c:8e:af:3c:5d:a2:84:ca:79:ff:ea:bf:10:a0:
b1:0b:9f:78:e8:8f:ce:2f:cd:d4:41:b6:09:25:40:
de:9c:d3:30:52:f1:e4:04:2d:6b:a6:56:5d:c2:1f:
12:3b:ed:40:68:2d:fd:f2:e2:00:74:87:e8:20:fd:
f3:bf:1e:82:1b:98:0d:7b:99:04:4c:8e:c3:0e:89:
35:39:f1:10:ad:d0:f3:7e:ce:27:a6:f5:ea:93:42:
79:64:ae:59:38:e4:3b:a0:a5:80:53:82:75:1b:2d:
2b:ab:40:b5:96:75:6a:4d:22:9e:52:17:79:b1:1c:
17:83:51:be:01:2d:54:39:4b:14:84:b0:d2:d4:24:
3b:e6:b4:b9:88:51:34:53:0c:09:68:98:63:ea:e6:
93:35:4b:25:90:1a:d0:81:f7:a8:53:49:37:31:49:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:E4:41:7A:66:CF:00:F3:3D:4A:22:0C:E1:15:19:72:97:9A:9B
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:de:e3:51:fa:d3:38:45:2d:70:90:80:dd:2d:71:f4:3d:1b:
f5:ac:c7:a9:6c:e1:0e:11:ed:ed:3e:ba:bf:77:1e:3f:c7:07:
4c:c0:92:52:ba:f9:4f:e9:42:09:9d:19:07:de:98:95:80:5a:
a9:47:13:d7:ec:ed:27:0f:88:bb:9a:3a:00:01:34:b5:a2:8d:
69:42:6a:dc:7f:7b:6f:aa:7a:69:61:b6:c7:ed:77:53:c2:c4:
8a:af:56:32:9b:87:77:06:cb:c1:9f:49:3b:0f:99:38:1c:a6:
1c:72:52:aa:9d:94:4d:5b:cb:a1:8f:46:72:76:25:26:6c:f8:
fc:82:d2:22:88:bb:db:0b:c7:19:9d:a0:32:4f:32:d3:f5:7b:
fa:9b:01:e4:bb:13:23:2a:c9:73:56:e5:15:51:56:c8:ea:62:
10:9f:d5:96:d1:7c:29:8f:90:db:c3:3d:ef:9f:dc:56:35:c1:
d6:93:f3:64:a5:7a:a3:ab:c4:9e:98:80:6f:8a:38:0a:64:4f:
1e:0c:d3:6b:63:5f:3e:24:96:d6:b8:ab:70:db:73:90:a8:51:
8d:19:3e:f9:53:eb:ea:00:04:33:02:76:6f:cf:4b:a5:b6:90:
ed:1e:52:93:43:c3:3f:e7:26:44:9f:c4:6e:58:0f:06:0e:21:
e7:cc:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:50:33 2025 by rpki-client