Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: 6Mjr//q7utaK8KzAXCeBRskhCcoFRDKRmKL1VH28i5c=
Subject key identifier: F3:EB:0E:33:80:05:A4:5A:E4:CD:50:77:37:68:26:5F:27:C5:FF:FD
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 0198D5F18B13B57B480E2678113B011C22CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 1317
Signing time: Sat 23 Aug 2025 08:00:33 +0000
Manifest this update: Sat 23 Aug 2025 08:00:33 +0000
Manifest next update: Sun 24 Aug 2025 08:00:33 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: yUcTbussrxYf/y2Aw05VPNysUkrQZedHOnNbwxuBbbE=)
2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8b:13:b5:7b:48:0e:26:78:11:3b:01:1c:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Aug 23 08:00:33 2025 GMT
Not After : Aug 24 08:00:33 2025 GMT
Subject: CN=f3eb0e338005a45ae4cd50773768265f27c5fffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:6e:bc:9b:80:6f:66:d4:85:a7:21:3e:df:
60:08:2f:1d:05:28:7a:44:ce:f1:c7:91:cd:b4:0e:
e5:0b:71:34:fe:6f:56:f4:81:4c:29:ad:6e:d3:4c:
27:19:42:97:ff:2e:d9:5b:29:c3:94:a0:ad:71:37:
17:10:4e:1c:fd:0b:95:2e:bd:b7:79:3a:1c:ef:32:
10:90:e3:bb:ae:5f:23:72:98:34:cb:84:5d:96:65:
73:6c:70:ed:92:30:2b:64:34:de:f1:b8:3c:9f:55:
de:a2:bc:c7:69:d3:cf:29:f1:d0:84:9d:e0:8b:12:
c6:27:13:89:9a:d7:59:30:d0:71:5c:88:38:5d:1a:
f2:1a:b7:b2:78:0a:ec:8a:4f:a5:06:ab:64:e2:cf:
92:d3:63:63:31:96:04:3c:c4:93:c2:15:15:6d:78:
35:8b:4f:9d:53:62:60:2f:35:38:56:3f:f3:0c:33:
ab:57:b8:f0:85:59:d9:93:f5:8f:34:69:09:b7:92:
63:0b:f8:81:dd:36:60:79:34:de:aa:c6:3f:6a:4d:
c9:44:d0:62:48:1f:e5:e7:1a:05:e1:99:40:e3:b7:
40:f3:b5:2c:1a:1a:90:be:e1:6c:81:ee:fa:35:2a:
86:ce:e6:45:49:43:77:4f:a6:b0:36:f5:40:d0:f2:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:0E:33:80:05:A4:5A:E4:CD:50:77:37:68:26:5F:27:C5:FF:FD
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:db:5a:28:9e:7b:28:ff:3c:98:80:63:92:79:bf:8d:45:6d:
db:cc:57:76:17:ed:2f:65:31:b6:13:4c:4c:fb:fa:ee:c9:62:
15:fc:5b:48:90:2b:c8:5e:0b:69:2f:66:a4:53:64:d6:ae:70:
95:d6:5b:ed:6b:91:26:69:fe:58:10:db:e2:f6:0b:0c:87:96:
ea:17:e0:47:26:21:5b:2c:a6:d2:ab:7f:10:26:03:ef:59:f7:
00:3c:b8:63:d7:26:ee:59:07:22:84:ba:cb:ac:33:82:8b:06:
4d:da:d0:f2:de:a5:e3:f1:d9:21:11:4e:aa:68:48:7e:2b:8f:
6b:db:a5:35:db:64:95:2b:97:ff:db:71:40:b0:86:67:e1:e0:
5f:9e:e5:84:3d:5d:17:1a:c0:d0:2e:08:3a:ba:f2:7f:e1:0e:
d5:cd:9e:50:27:f3:d6:96:14:47:da:33:ee:a6:0d:87:08:98:
aa:25:66:ee:81:13:af:81:36:17:91:c0:06:ba:b3:5d:4b:09:
0e:d4:2a:fa:42:e3:9a:b7:56:1e:0d:b5:6b:53:22:83:76:10:
38:b0:0a:b8:19:ce:c6:1d:64:54:8a:9e:72:fc:22:9d:1a:3f:
83:aa:e6:fb:71:81:57:9c:3b:9f:12:55:5a:5f:cd:47:ad:bb:
a7:6e:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:49 2025 by rpki-client