Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: +V4+Rwq3cswjv2je7t0b3m3F5qYJbkACuutE3b4Pa40=
Subject key identifier: C2:CA:8A:11:C9:A7:DA:4D:FE:58:AD:A8:0D:4D:A0:A0:F7:72:0A:A2
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 0198D5BB8BAB11C3C589324223881B942AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: uNxcmtFCfVY8Xg8JzRk9rQgx8tPThsu7toWOWpqcCfc=)
2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8b:ab:11:c3:c5:89:32:42:23:88:1b:94:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=c2ca8a11c9a7da4dfe58ada80d4da0a0f7720aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:67:b8:3c:93:dc:0b:7b:90:5c:da:5d:2d:
2e:ff:24:44:ee:45:b4:14:04:1c:24:14:63:9c:e1:
66:f9:bd:26:0f:02:dd:d4:b6:3a:d3:3d:40:76:78:
97:f1:b4:62:4f:ea:61:40:ab:49:ec:b4:de:e1:c1:
1b:ae:f3:20:bd:4f:1d:dd:78:ac:67:b7:d6:bb:77:
d3:43:1c:25:93:7b:6f:e4:74:e8:ef:d3:2c:3c:76:
00:ac:51:8f:e4:a0:62:cb:c8:4b:77:4e:ab:e3:a8:
a4:f5:f1:3e:fe:fb:a3:3c:0a:c4:4a:58:61:d5:77:
11:29:57:c2:9d:be:c0:25:fb:cb:34:27:c3:37:c2:
93:b1:8d:59:b7:a6:b1:67:f7:32:f5:2a:5e:a1:f1:
43:61:2a:3d:db:5b:30:92:6d:b0:1c:7a:5a:5c:8d:
29:da:07:de:df:eb:f7:cf:03:47:5c:a8:eb:32:59:
61:b9:38:37:1b:6a:40:dc:93:d0:81:99:68:4f:e4:
7b:da:ad:29:79:72:19:bd:49:f9:05:79:cb:d6:19:
88:a1:12:cd:70:d5:0e:d1:b4:2c:74:2e:8c:5c:77:
95:30:8e:28:ec:cf:c2:82:01:98:21:1c:bb:5d:fb:
12:8f:4f:8c:dc:c3:ec:ce:ff:d1:90:fd:ab:02:37:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:8A:11:C9:A7:DA:4D:FE:58:AD:A8:0D:4D:A0:A0:F7:72:0A:A2
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b7:d9:24:df:e2:21:9d:27:0a:12:5b:bb:59:18:2b:66:5c:
da:ed:4c:be:03:fc:13:97:f9:1d:a7:b9:41:5d:ba:04:08:84:
b5:43:c5:4a:d1:6f:85:b3:5d:ef:58:e7:ef:83:72:2a:16:51:
74:88:06:0f:3d:aa:03:96:98:7d:cc:7a:5b:ea:fc:90:bc:af:
73:13:64:a1:94:3d:40:99:19:4f:72:d7:64:86:fb:ff:0d:0d:
3b:85:57:16:1a:d1:bf:8b:02:c4:4c:df:82:79:57:e1:3a:94:
46:94:37:b0:ca:6b:14:b0:a9:f6:44:49:36:24:73:b2:61:78:
ea:41:f2:36:3d:dd:a2:69:a7:99:b3:d6:9a:b3:98:0f:10:2f:
aa:3e:85:f8:f1:4b:0b:1b:e2:af:80:f5:f2:75:e8:f1:25:30:
54:e6:c5:e2:24:2a:be:0e:b6:91:8d:b8:df:43:03:5a:1e:ed:
07:9c:f8:64:c0:0b:83:00:05:5a:74:58:31:05:ab:aa:9d:71:
69:12:05:fc:bb:88:50:e9:bd:54:ac:28:08:b0:d1:57:ce:e4:
c9:32:6e:e7:54:e6:39:04:96:50:fe:3b:c0:87:1b:36:a1:ae:
0f:60:fc:36:6d:10:80:d1:aa:41:06:97:03:76:fe:70:0e:f5:
13:f5:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:29 2025 by rpki-client