Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: 06qvevzeHvt8T/NvHAzaXG1r/i7i8hnmg+auwGlwymU=
Subject key identifier: 28:D9:DF:98:61:E9:36:85:A5:DF:42:E7:DA:EE:8A:F9:E2:0C:8A:87
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 0198D7735FC8AC39AB130FEDFD9DAA5614DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 15:01:59 +0000
Manifest this update: Sat 23 Aug 2025 15:01:59 +0000
Manifest next update: Sun 24 Aug 2025 15:01:59 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: HHEcakRg6g6V4TH+5sCM0xyrg/QoA0omKcqg0YX8fTo=)
2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:5f:c8:ac:39:ab:13:0f:ed:fd:9d:aa:56:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Aug 23 15:01:59 2025 GMT
Not After : Aug 24 15:01:59 2025 GMT
Subject: CN=28d9df9861e93685a5df42e7daee8af9e20c8a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:9a:ac:53:f8:8e:cb:37:a1:73:ea:2a:c4:
c9:96:a2:fd:c2:4a:9c:65:28:9c:ac:ca:12:d7:b0:
c5:17:17:44:d0:fb:53:75:b1:b3:ce:8d:08:56:68:
b2:65:76:ed:2f:b6:aa:48:ca:68:bf:74:a7:c9:a9:
0d:e5:81:c1:40:b8:32:be:88:c3:ef:bf:79:0e:b8:
ee:18:48:69:76:c3:3f:ed:71:f0:fa:4f:b4:7a:f8:
33:46:8f:49:74:f9:c0:a1:15:a5:a1:e1:f0:20:2b:
43:26:d2:1f:bc:4e:71:81:f0:7d:9f:ae:31:d3:7b:
0f:6c:84:82:94:e1:dc:2f:bf:2e:20:fd:8b:9b:32:
15:64:c7:a7:2f:4e:f2:41:8a:1b:62:67:6f:2a:40:
00:e2:ce:8d:83:12:96:3c:3c:50:78:d4:42:63:05:
34:d2:8b:a0:30:18:6e:0f:b9:43:78:86:ae:17:6c:
30:5c:05:1e:4f:61:07:f9:67:7d:a6:76:cb:ad:1d:
dc:c6:15:65:15:d8:c7:d6:28:03:6c:d5:0f:d5:fc:
ba:a4:35:77:72:87:2a:c7:10:b7:bf:25:ac:e8:50:
b0:5d:d5:6f:e4:a9:e5:7d:f2:58:cc:a2:08:ca:25:
55:49:22:8c:91:57:e1:b5:19:26:65:b7:9f:a2:5f:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:DF:98:61:E9:36:85:A5:DF:42:E7:DA:EE:8A:F9:E2:0C:8A:87
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:94:97:52:ed:98:16:31:f0:d5:a7:82:d4:dc:c4:89:5b:f2:
64:1b:3e:90:2e:73:ce:d0:77:d9:bb:53:79:ea:58:5d:da:c7:
1f:10:e9:0f:ed:30:0a:1c:4e:b4:8c:ed:1f:90:e7:f1:44:8a:
68:48:fa:90:27:33:ee:ae:ec:70:54:05:1e:b7:b4:65:74:6b:
46:d4:3f:7e:74:18:f3:0a:0e:e9:03:00:1f:ef:38:5b:86:07:
33:db:9c:0f:d8:71:4d:9a:d7:31:9c:7c:44:12:01:62:1d:38:
c2:91:1a:fb:41:6d:99:69:5a:4c:50:3a:1f:8f:b3:fd:43:3a:
71:63:d1:73:41:57:a2:7c:e7:43:7c:1b:4a:5d:a8:5f:11:d5:
28:1c:8f:ac:54:02:4e:1d:ca:3a:53:91:72:ad:ad:7c:ba:55:
8a:eb:4c:b9:e8:9f:fb:52:68:12:a2:6b:20:44:d8:6e:7d:b0:
2e:98:54:78:88:e4:c3:b6:67:82:42:5a:5f:a4:bb:ce:3b:86:
6a:9d:b6:0a:e9:2c:d7:bd:f7:12:1b:b7:54:77:10:7c:fe:59:
8a:2c:ef:30:7f:a1:dc:d5:ce:58:e5:45:0a:cd:73:e7:7f:73:
75:4e:87:00:72:17:68:4d:fe:ef:3e:85:19:31:13:ec:ba:f0:
73:63:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:35 2025 by rpki-client