Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: 8jiqJs+OFQhpwWtC+fiGHGXOOLcAXWjy1PMmHXxDnRs=
Subject key identifier: C2:1C:14:77:3E:7F:74:45:CF:D6:D6:AD:3B:E5:90:9C:A3:DB:3F:DA
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 0198D6CCD709CBEAC39EDFAC3B139E277FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 070B
Signing time: Sat 23 Aug 2025 12:00:04 +0000
Manifest this update: Sat 23 Aug 2025 12:00:04 +0000
Manifest next update: Sun 24 Aug 2025 12:00:04 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: KPE1gr8Vk6c6uBkJazig5SPSVWz+GoN3gkFdjq5fxgw=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:d7:09:cb:ea:c3:9e:df:ac:3b:13:9e:27:7f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Aug 23 12:00:04 2025 GMT
Not After : Aug 24 12:00:04 2025 GMT
Subject: CN=c21c14773e7f7445cfd6d6ad3be5909ca3db3fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:29:a8:c4:8b:7e:20:85:9c:0a:19:1b:90:35:
92:79:33:06:d5:e2:2e:0e:ab:5b:57:78:9d:b4:6c:
67:6e:dc:87:d3:7b:46:85:70:46:ac:16:fb:6f:f0:
5e:f1:99:2c:d4:62:8a:89:2b:b0:7b:3d:e7:b3:67:
72:c8:8d:49:d6:e5:a4:5c:1f:0e:1e:8c:7a:57:32:
c3:fd:ae:f5:58:65:75:bc:78:d0:fb:d7:8d:3d:4e:
4f:cf:a6:08:79:51:c9:99:9a:ab:f1:fa:28:49:95:
9e:97:93:cc:f7:93:d2:d2:4e:84:cb:3f:d7:fd:15:
81:dd:0f:38:a3:cc:5c:60:da:08:dc:5e:17:37:75:
3a:a9:d1:ba:ad:09:47:a7:07:8d:7c:ff:57:64:17:
b8:35:ee:fd:cf:b9:33:44:28:73:85:3d:27:ce:d1:
0c:1d:b1:9d:50:80:5b:5b:c9:56:09:0f:a4:84:88:
d8:4e:a0:90:18:7d:37:65:f4:0b:15:58:27:a7:18:
64:7b:24:56:10:55:6d:9a:db:41:2c:d7:29:11:99:
37:9e:e2:50:04:c7:31:d5:bd:6d:45:d8:8f:53:df:
ce:81:4a:82:3a:6a:8b:56:ef:6a:b6:9d:65:10:20:
82:13:8b:3f:6f:06:ce:69:98:64:f3:76:a6:78:bc:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:14:77:3E:7F:74:45:CF:D6:D6:AD:3B:E5:90:9C:A3:DB:3F:DA
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:84:e5:4c:66:fa:b0:d6:66:ae:2c:1b:8d:23:10:38:45:d3:
78:7b:c1:43:0d:54:39:cb:ff:8b:e4:7f:a1:33:31:cb:aa:b1:
61:c4:3a:3d:bd:6d:d8:15:63:bf:69:0b:5a:9a:e0:23:cd:70:
66:49:29:e1:be:c8:93:fd:76:a5:0e:90:0f:2f:3f:08:40:fd:
64:db:04:0e:69:6d:b6:43:6f:b0:dc:c3:a5:4c:c2:17:d7:29:
55:b3:bf:6f:79:d0:6c:27:f8:e4:cf:25:81:b7:1f:0d:c4:76:
d7:23:95:db:6e:40:5f:35:a2:52:0d:67:9f:cb:ec:24:c2:bc:
34:db:92:54:d6:96:38:b1:27:09:85:a6:c2:79:2b:23:93:20:
f7:8e:5b:06:de:1b:2a:6b:b2:f7:bd:02:f3:1c:f4:a1:fa:6e:
4f:9c:46:c5:f8:b0:6b:d6:7c:15:98:4b:44:8e:bc:a3:7d:fc:
47:e4:59:87:11:c0:8f:3f:02:a2:05:f9:29:e9:45:b8:67:24:
4c:d3:5a:fc:e6:f1:fe:ce:d6:83:bf:49:30:b0:6b:dc:d9:8c:
c2:56:c6:83:86:13:a4:de:21:1b:27:c9:67:8b:34:e1:c8:0a:
97:4c:9e:75:6e:31:42:f9:34:44:d4:bc:cb:39:49:43:9f:1f:
56:db:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:40 2025 by rpki-client