Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: NEaYII1NxO7QJfngghfL1AXUadzsZc1xUnLaa8pmFnc=
Subject key identifier: 3E:BF:64:4C:FB:04:E2:79:BD:96:34:EC:B2:29:EB:29:A6:1D:33:E4
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 0198D77385FB1A3BABDBDB1E14BE84FF7501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 10B0
Signing time: Sat 23 Aug 2025 15:02:09 +0000
Manifest this update: Sat 23 Aug 2025 15:02:09 +0000
Manifest next update: Sun 24 Aug 2025 15:02:09 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: bOeyTtWK6BLAQ0TqxVvpW75fEY4zeDCFlpvOhxNMtg4=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:85:fb:1a:3b:ab:db:db:1e:14:be:84:ff:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Aug 23 15:02:09 2025 GMT
Not After : Aug 24 15:02:09 2025 GMT
Subject: CN=3ebf644cfb04e279bd9634ecb229eb29a61d33e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:b2:6e:10:43:c3:6d:91:c6:2f:98:27:5d:
61:c8:9e:5e:dc:d0:2f:a9:24:77:0b:96:ce:8b:5a:
57:dd:67:23:a8:e9:22:b2:ba:24:c4:52:d0:9d:99:
a4:79:7b:64:5a:e3:e5:73:61:15:b8:10:3b:a5:74:
6c:c4:1c:25:36:8e:a9:58:6d:64:26:c2:ee:6d:3a:
52:e2:f0:0e:a2:85:3d:e0:39:38:d1:18:9b:bb:6e:
d4:67:88:05:4b:9a:00:06:cd:b3:ed:89:ec:68:76:
d5:b3:68:19:a5:38:bc:62:8d:29:79:a9:ad:2b:36:
3f:16:19:2c:fd:0c:6a:47:d1:09:d2:31:a2:df:5b:
3b:b2:fd:8c:71:bb:27:82:a8:49:ae:77:e6:e0:5b:
4e:b5:21:82:a2:fe:55:35:8b:6a:88:da:79:03:68:
d4:e3:7d:c9:d5:84:ed:e6:f2:c5:54:09:d4:cf:4e:
3e:62:40:a7:ff:e1:e3:e8:84:08:8a:da:fa:a7:4e:
c9:9c:0b:ad:a1:14:19:a8:8f:29:ad:f0:d3:95:d0:
bd:6a:b2:94:03:93:4e:c3:6e:27:6d:e2:52:b7:09:
bd:ef:07:37:38:ab:e1:a1:67:e9:83:b6:c5:4a:1b:
03:f4:e1:c1:bc:d9:29:0d:50:9b:67:1b:e0:1f:26:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:64:4C:FB:04:E2:79:BD:96:34:EC:B2:29:EB:29:A6:1D:33:E4
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d3:26:42:63:7e:d5:20:ce:9f:55:90:7f:e0:a0:04:75:33:
1f:ad:26:04:a2:84:93:fd:5a:2a:a2:20:69:ce:eb:8e:cd:fa:
ae:48:73:e4:5e:1a:32:98:d2:4e:56:99:93:9a:20:0b:11:cd:
1a:d0:72:55:bd:a4:d5:a5:7e:52:d2:c5:58:2b:32:63:b8:b0:
f5:bc:64:ba:d2:44:2f:d2:91:b2:8f:c1:39:58:11:74:59:ed:
fc:36:ad:fd:99:db:55:09:d2:34:62:e0:d1:4e:03:61:40:14:
c4:78:b6:f2:a8:a4:45:a3:50:90:01:11:a5:54:a1:fb:3e:a0:
7e:70:95:03:5b:ce:bc:4a:29:0c:c7:4a:b5:aa:ba:47:14:d9:
d1:24:1c:20:96:90:96:de:a6:ce:24:47:ae:a4:d0:74:05:9e:
8a:ab:f9:5e:8e:a9:26:1b:b7:86:77:75:7c:f2:a2:3c:83:49:
01:22:b6:19:7e:c3:85:9d:ea:5d:cd:23:a5:69:ae:da:1a:84:
1a:8f:68:86:ef:ab:9f:2d:75:b8:ce:b9:8d:3b:24:d4:80:03:
f8:ae:da:e6:95:89:ca:70:eb:56:fb:a2:12:80:3d:50:c9:b9:
18:bc:eb:69:60:63:9d:27:b7:83:5a:07:43:6c:49:4e:86:80:
6b:a4:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:08 2025 by rpki-client