Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: Px6S5NdJSMxCeDhkuKx1T3F0b1y4Vm7Yl8bZMcBuzFk=
Subject key identifier: F8:F3:71:B1:54:42:1A:AE:78:4D:0B:F5:0E:BC:EC:6A:40:01:47:94
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 0198D66067BFBDA461816CD1A163D969890B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: F4
Signing time: Sat 23 Aug 2025 10:01:38 +0000
Manifest this update: Sat 23 Aug 2025 10:01:38 +0000
Manifest next update: Sun 24 Aug 2025 10:01:38 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: 7klZdqvkGlAMH1+93aYNkUryZFZLdiJ7ijVLf6SFdhM=)
2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=)
3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:67:bf:bd:a4:61:81:6c:d1:a1:63:d9:69:89:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Aug 23 10:01:38 2025 GMT
Not After : Aug 24 10:01:38 2025 GMT
Subject: CN=f8f371b154421aae784d0bf50ebcec6a40014794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:b2:27:2d:c5:5f:45:09:5e:9c:a1:02:1e:
4c:55:26:6d:8c:87:81:23:cb:7f:2d:63:11:13:a4:
be:f1:35:0e:cf:81:c7:69:38:0b:8a:08:cf:04:df:
43:61:b5:2a:81:c7:b6:12:c5:be:b1:36:06:9c:f9:
c6:06:d1:00:98:a6:ca:11:b3:43:e3:87:36:0a:97:
9a:f7:98:fc:8c:bf:8f:4c:af:5c:0a:2d:31:6b:0c:
b8:51:0e:a8:92:27:e7:19:2e:c3:ca:9e:ae:3c:b7:
a9:d7:1f:95:3a:b0:71:c5:40:98:05:26:67:b7:bf:
90:14:50:34:e2:b0:60:6f:e3:a6:40:8a:22:36:3e:
74:cc:86:2d:fa:a9:b4:b6:ea:ec:f9:ae:5f:13:f3:
da:ad:da:45:dc:c0:e8:39:4e:5e:41:23:2d:4f:ec:
ce:e5:61:86:1f:2d:82:a5:e5:99:9d:64:07:f0:f7:
be:8d:c0:a6:8b:73:fe:4d:a3:fc:02:ee:2e:e0:18:
c0:c8:6d:ba:59:64:b0:df:1d:5a:26:2f:8a:a0:ec:
2e:aa:ec:5f:d3:12:03:c1:e6:a1:2f:e8:8b:86:cf:
78:9f:37:c9:ab:f3:f6:b5:c6:c5:fe:62:ed:20:11:
eb:b4:65:58:b1:45:60:0c:ff:78:5a:3e:d3:c2:10:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F3:71:B1:54:42:1A:AE:78:4D:0B:F5:0E:BC:EC:6A:40:01:47:94
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a6:af:31:c9:99:95:37:eb:41:15:af:3e:5b:14:77:6c:49:
83:70:81:ff:98:97:c8:37:4a:16:0d:c4:8e:ef:2c:59:10:f2:
47:f8:9d:28:a3:d6:da:30:35:cc:aa:14:b7:d7:6a:c6:29:71:
db:3e:24:a4:15:af:e5:e1:19:0d:22:e6:d0:ab:04:9f:ae:ab:
01:2d:7d:59:8e:48:a4:27:e3:be:2f:9c:0d:29:07:82:ae:f6:
74:85:ef:e4:3d:b7:c5:71:16:bc:a0:d1:97:0e:b1:ed:c7:a9:
fb:ad:98:79:f3:58:e7:4d:0e:07:ae:ee:60:f8:ce:51:92:1d:
a9:1f:c2:32:9e:3e:d7:b5:1f:5e:0b:4f:c6:cb:18:30:47:cb:
8a:48:95:b0:a3:41:51:48:71:19:3c:d2:11:25:3b:95:d8:eb:
07:b3:31:05:b1:0d:b2:2e:b8:b4:51:ac:9d:fa:19:6e:a3:fa:
34:a0:79:00:2c:8d:8a:be:87:6b:06:b6:b6:e1:db:c7:20:48:
11:ce:a5:a3:01:7d:8b:4e:40:0a:71:af:38:a7:13:7b:a1:bc:
b4:6c:1c:3e:10:90:da:36:63:05:61:8c:3a:61:03:f0:fc:ae:
b8:46:98:4f:b6:a4:4a:96:6f:e5:6d:ca:5a:95:87:6f:46:36:
25:89:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:15 2025 by rpki-client