Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: QK1Gqpl4XnnIEqlGwO1F6D9YGPViwpsyQHfTIPMJdiU=
Subject key identifier: 08:CC:6F:E3:FA:08:84:7D:BC:C4:58:F2:C6:85:34:CB:46:2F:EF:7A
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 0198D5BBD2E3B2F45EEA159E344D07223822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0BF8
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: 2HsIGyT4rIJuu6UrqRcR2fc9b3I.roa (hash: hUQqgn+fKEmkw/9ErWQL/8TgPXVZMyjAW7UPwj4OttA=)
2: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: ASaVdduAE9PaYcKl+OxTsf//lWhiQsxhHS8prdv8TL0=)
3: dz5PrO-ksQipuN7JJpM04omvh6c.roa (hash: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d2:e3:b2:f4:5e:ea:15:9e:34:4d:07:22:38:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=08cc6fe3fa08847dbcc458f2c68534cb462fef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:5a:0e:08:ea:84:0e:4a:b3:55:60:4e:21:
b6:b4:a4:91:61:fc:b8:4b:9b:ae:05:7c:c0:a2:27:
93:7f:56:8d:d9:99:05:dc:4a:0b:34:ec:4b:60:ec:
ac:4e:18:42:a4:c0:df:75:05:16:21:82:cb:f0:85:
85:5d:fe:ad:99:bb:96:d7:b3:02:14:41:ed:ca:1b:
ee:bf:88:87:1a:ac:7f:54:a5:95:06:dd:05:ff:88:
98:17:42:05:b8:f9:c7:7d:e0:66:67:c0:61:34:35:
79:56:77:2f:18:84:ac:0f:ef:3d:e9:07:29:71:11:
f6:4a:8c:74:26:e3:0d:a4:06:c0:5e:44:e2:d2:16:
24:eb:bb:41:8f:b9:12:6d:81:d6:3c:99:7e:52:8b:
30:dc:57:fe:15:b5:a1:6a:03:7a:55:a7:1c:c5:22:
72:5d:06:d2:2b:d6:5e:11:13:25:bd:97:ca:cb:33:
ef:81:e2:16:fa:8e:7b:df:c2:9b:84:8c:5e:7a:3e:
7b:03:30:53:64:c9:04:c1:a2:ec:6b:f2:11:0c:ba:
da:65:f0:15:41:3c:9b:1a:ff:ec:67:4c:4e:e3:ab:
26:db:91:14:47:58:0a:77:72:ba:cb:ab:27:83:a1:
14:ab:29:c5:49:15:6d:00:16:8a:6a:d2:20:fe:48:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CC:6F:E3:FA:08:84:7D:BC:C4:58:F2:C6:85:34:CB:46:2F:EF:7A
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:14:04:b1:8b:b9:93:6c:16:58:f5:5c:dd:c1:ff:57:6e:
f3:f7:ff:da:ae:61:99:bb:31:81:47:59:e2:c6:1f:cc:27:d1:
d1:e4:82:9a:b8:a1:55:5f:24:f3:a2:39:05:5a:fc:be:31:d7:
24:0a:c9:12:d8:d5:ce:6b:c2:44:73:53:5a:64:ad:e2:a9:58:
cf:8e:44:c3:5e:4b:fd:bf:21:e5:19:71:eb:1d:93:15:58:87:
63:d0:80:d3:15:5e:99:50:25:e4:e5:cd:85:cf:26:a1:ff:8d:
cb:ad:8b:09:df:47:25:72:ca:f0:ae:1f:7d:6b:36:70:73:56:
d9:ee:50:d1:8a:31:ac:2e:8a:68:21:2e:dd:87:71:d7:39:ca:
d2:5d:f8:91:8b:a0:8e:c5:9a:7f:83:f9:ec:4f:29:ad:67:ca:
ff:b4:34:76:7b:86:86:b2:a6:d9:dd:f3:e9:20:da:cc:7f:c1:
14:c9:3f:2e:7a:18:f6:b8:e8:60:d4:35:57:d1:1d:78:38:c1:
30:2c:7f:90:86:3c:c0:84:36:2b:1c:f1:89:d1:49:e4:78:86:
73:55:dd:28:d0:65:39:19:d8:9f:8a:11:61:21:fd:c4:d7:44:
3c:b9:65:fd:25:9a:28:df:af:22:cd:ef:99:f3:4d:98:a3:cd:
0b:c7:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:10 2025 by rpki-client