
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: Abs0r9qxFV5j/Xy/JhXm22EplBAyRBGQh0Vo8KT5OBU=
Subject key identifier: D6:BB:D5:C3:DA:E8:0B:86:9B:EA:D1:08:9F:90:29:16:95:A0:4B:CB
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 0198D7E1998D4D772EF33BE8DF7F82DCD56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 105B
Signing time: Sat 23 Aug 2025 17:02:22 +0000
Manifest this update: Sat 23 Aug 2025 17:02:22 +0000
Manifest next update: Sun 24 Aug 2025 17:02:22 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: nsS64OxRKvoMupyNh0GN3g1rWeguS5I7ZEod8jWqhAU=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:99:8d:4d:77:2e:f3:3b:e8:df:7f:82:dc:d5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Aug 23 17:02:22 2025 GMT
Not After : Aug 24 17:02:22 2025 GMT
Subject: CN=d6bbd5c3dae80b869bead1089f90291695a04bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:d0:2e:60:c9:14:9d:7e:9b:6b:db:9b:ed:
9e:35:82:9c:44:ab:46:76:b0:ad:15:dd:8c:17:73:
47:42:05:81:4d:77:66:b8:25:53:1b:7c:62:dc:95:
25:53:d7:0f:80:56:e2:87:be:40:14:3b:16:ee:79:
9a:c9:9d:c8:df:22:25:ea:08:75:f2:3c:31:87:c3:
86:8b:5a:b2:40:4d:54:4e:9d:cf:1e:73:fc:cf:37:
bc:58:c8:cc:4f:08:9b:bd:c8:a4:a2:b9:d2:4e:ad:
92:6a:12:df:c1:c4:cc:e2:4e:42:0c:e8:db:f0:5f:
00:19:65:0e:3e:c4:2a:c0:14:64:74:49:8c:7b:fc:
23:db:a8:45:ac:e3:2a:c7:ae:5e:83:4e:20:8b:20:
28:5c:eb:f1:2b:ed:9d:a4:d5:97:88:e4:a1:42:a3:
cd:c7:0b:f7:4f:1c:a7:52:e8:b5:47:c7:e9:69:b2:
3c:54:fb:bb:fa:1f:ee:4b:eb:7f:33:a3:22:a1:02:
44:ce:ba:89:47:49:64:c1:2d:09:26:b8:a3:af:56:
6e:7e:c2:8e:d5:52:f8:93:05:84:e1:a1:c5:fa:1a:
e6:fd:c3:0c:9a:f3:bb:8d:e7:9e:0a:75:b6:0c:69:
43:d1:e9:83:4d:7c:42:dd:88:17:a9:93:06:58:e3:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:D5:C3:DA:E8:0B:86:9B:EA:D1:08:9F:90:29:16:95:A0:4B:CB
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:4f:34:5e:bb:e1:b3:1e:c5:69:83:ab:36:2c:26:64:a2:
e8:db:c7:19:38:f1:60:05:2a:09:24:b8:5b:af:0d:41:4d:46:
a0:c1:8e:af:31:c4:3b:71:d5:5d:48:ed:9a:d2:af:75:a1:06:
64:3b:c0:38:17:26:5c:09:49:fe:37:85:bb:07:ac:92:d5:29:
fc:4e:18:ae:4a:9d:73:60:f2:63:6e:29:84:17:b2:cd:6e:75:
9d:c0:05:a4:0a:36:3d:8c:8b:00:eb:6c:2f:72:bf:2a:4d:a1:
f1:51:fd:aa:85:ed:56:22:a9:62:b6:c8:47:48:92:38:cd:a1:
88:05:07:16:51:87:69:25:56:36:32:85:09:56:81:9f:7a:3e:
ef:49:54:0e:64:7e:05:ac:dd:45:b0:97:86:03:93:65:e9:66:
85:3f:37:41:67:fd:64:01:92:ff:1f:e3:1c:a8:99:31:c2:31:
11:a7:49:85:ab:73:6d:53:11:40:4d:43:c6:b2:8e:fc:cc:d8:
1d:4f:2d:88:38:41:83:c9:4d:4a:10:28:c6:a7:1d:c6:e4:5e:
8f:e4:e8:ed:7a:39:cd:eb:02:66:4f:68:5a:f6:fd:99:ba:cf:
b5:5c:91:07:e0:03:73:05:7f:1c:52:9a:3c:97:00:bb:e4:e4:
97:a2:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:17 2025 by rpki-client