Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: uSQyt9Agshyrn+JCkK4pz92k0KJgCEhGOWptzMkJgsY=
Subject key identifier: E4:03:30:E1:3E:A8:F8:15:AB:D7:3C:9A:1D:5C:1F:BA:9D:8D:05:8D
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 0198D7E129A2787AAE367B800C41DD0265A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 17:01:54 +0000
Manifest this update: Sat 23 Aug 2025 17:01:54 +0000
Manifest next update: Sun 24 Aug 2025 17:01:54 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: 3FQtH81R9/k2kX+yVFIG9ZR+dds2+68wLZJ3JOccDaw=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:29:a2:78:7a:ae:36:7b:80:0c:41:dd:02:65:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Aug 23 17:01:54 2025 GMT
Not After : Aug 24 17:01:54 2025 GMT
Subject: CN=e40330e13ea8f815abd73c9a1d5c1fba9d8d058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:15:58:7c:1e:db:15:43:10:47:33:df:1e:
57:eb:7c:c0:1b:27:f9:d5:05:ce:46:f4:48:37:98:
82:69:dd:ce:80:b8:27:40:f3:ea:06:aa:81:e7:96:
41:71:ff:b3:48:80:50:89:13:3e:dd:ca:62:b7:4c:
8b:b4:fd:a7:b5:9c:45:9d:7a:f5:26:f8:ad:56:6c:
8d:fb:aa:5a:64:c8:91:ce:32:82:79:cf:8c:a2:0f:
fc:18:70:e2:8b:8e:e6:dc:a3:7d:ae:3e:5e:10:ba:
d7:52:c2:5a:22:4e:83:80:bb:92:32:b1:9d:1a:aa:
f3:27:b9:e4:6a:14:5e:07:9d:e9:c8:ca:39:87:ee:
8b:ed:f8:1e:40:d5:58:bb:97:3e:fb:9f:63:3d:3a:
e0:b0:f3:24:c9:01:46:43:8e:10:87:d5:b4:20:c2:
cd:2f:31:d5:7a:c3:78:bc:1b:e2:7b:b6:ba:d9:2e:
9a:a7:43:4c:af:7b:1f:46:b4:1f:55:9e:3f:da:f3:
10:5d:32:53:d7:4d:ff:a7:d8:c5:14:73:db:49:18:
2c:e5:15:1d:57:8e:12:3a:fb:99:a6:68:6b:b0:c6:
80:10:4a:a9:76:f9:29:ec:38:1c:d1:f7:8f:0d:42:
43:c9:0a:01:c3:69:fd:c4:d4:d7:03:5b:17:d1:7c:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:03:30:E1:3E:A8:F8:15:AB:D7:3C:9A:1D:5C:1F:BA:9D:8D:05:8D
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f1:92:54:5f:c6:15:3f:37:25:6e:00:0b:95:7b:03:71:d0:
89:9f:d5:25:1e:07:15:47:55:a4:17:e1:c0:58:b0:19:e7:50:
68:5f:7f:3d:b2:46:e2:49:05:67:a6:7e:27:f3:8d:76:cb:4d:
d6:75:83:f2:f8:8c:fb:6a:79:27:55:71:3d:bc:d9:a2:c5:c3:
49:a6:09:a7:1d:f5:ba:7f:53:66:ec:b1:58:7b:a3:dc:60:08:
3c:cf:02:42:62:62:85:c1:44:4c:f3:da:1b:46:4f:c9:10:bc:
b7:ac:25:c8:5e:d8:b1:04:78:76:dc:00:51:45:21:32:7f:81:
47:d5:02:a7:b9:1b:96:ea:43:7f:78:77:2e:8d:ea:e3:a4:25:
38:25:6c:86:7b:e4:fe:ec:48:5b:e5:06:57:03:a4:54:bf:81:
3d:10:cb:a3:53:4d:f2:f9:a3:3b:e7:1f:7f:ec:76:9d:70:a6:
a1:3a:f8:e6:f8:8e:57:e4:c4:40:ce:a4:76:12:0e:b2:da:93:
96:0c:d8:86:a1:35:d1:31:29:15:5f:a2:c1:5f:b3:8d:9e:c8:
54:22:89:3a:50:0a:17:00:d5:b4:db:90:14:ca:9d:cb:21:1f:
ce:c5:8f:c2:d3:15:45:c5:84:8a:3d:b0:91:0c:ab:d4:3f:40:
3d:6e:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:10 2025 by rpki-client