Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: 2YstHp03cDoXnxOOw4Vp3WtuolfHOkXHu63AnLqq2uE=
Subject key identifier: 18:B3:E7:24:0F:BD:16:39:7B:BC:B2:DC:22:5E:28:D4:8D:40:81:5F
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 0198D4E0B0755499EBB27A48B7AE2ED08D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 0430
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: +hzpD5SU+5FP66CS4TVknrCIbvVrktisjSMprWuFkwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b0:75:54:99:eb:b2:7a:48:b7:ae:2e:d0:8d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=18b3e7240fbd16397bbcb2dc225e28d48d40815f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:4e:31:8e:3c:94:08:ee:ec:4e:5b:82:44:
f5:e4:cd:6a:24:2c:4e:da:6c:a9:3e:db:c9:51:82:
f5:52:67:5d:77:f8:e1:22:d1:cf:6c:a0:a4:ca:f4:
0e:19:ef:73:69:a7:74:94:17:b7:b4:25:a1:e8:de:
43:58:fe:1a:b5:6d:4a:b9:81:c5:bb:31:00:05:83:
2c:3c:77:06:38:f9:7f:65:47:18:a6:06:d6:24:d7:
32:dd:5e:36:95:43:c2:e7:36:d4:cd:ad:2b:15:99:
cb:77:86:5c:36:ef:28:ad:1c:d5:f3:a1:01:3c:bd:
a5:9f:2f:78:f5:57:e8:05:e6:99:d2:50:8f:30:96:
89:bb:ce:e2:56:64:f2:c4:62:f6:74:21:e9:16:dc:
2e:3d:c1:9f:0a:bc:cb:ec:58:34:ba:be:c1:16:aa:
76:76:e8:d8:7e:9b:82:59:97:8c:ff:df:68:b1:3c:
04:51:ea:5f:7b:7b:f4:79:61:5f:83:62:4a:33:0e:
ff:95:f7:cd:21:29:0d:0a:3d:83:2e:3c:b3:b1:61:
fb:02:c6:ec:0d:e7:0c:09:23:73:26:c3:0d:b7:e3:
72:cb:2f:92:4a:7e:18:13:66:a1:c5:a4:ba:62:59:
2e:08:fa:d6:28:da:e4:51:3d:b1:e0:60:36:c1:e7:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B3:E7:24:0F:BD:16:39:7B:BC:B2:DC:22:5E:28:D4:8D:40:81:5F
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3c:6d:3b:52:f4:f4:fb:cc:66:2a:83:23:aa:8f:2f:94:b2:
15:d8:1c:66:c8:ab:cc:0c:48:86:62:15:47:ae:13:c3:a7:9c:
77:06:db:32:2b:13:a0:4c:c0:73:d7:7a:33:ec:9f:84:ec:de:
bf:00:21:6c:37:c1:5e:87:dd:47:dc:b8:e4:96:c6:9c:84:26:
dd:3b:a9:cf:4e:0a:34:6b:53:dd:9e:88:e4:cc:84:e6:d1:d2:
d2:6a:13:c6:c4:ae:9c:ef:8d:9e:ad:04:3f:57:0d:83:de:ee:
fe:67:c9:8e:34:16:37:b3:03:e6:8f:de:6e:0b:06:6e:4f:22:
43:71:10:f2:1f:41:ab:d4:36:8b:fa:42:bf:2b:e7:54:21:52:
57:e0:7f:16:37:57:3f:76:67:96:33:6d:af:ff:3f:6f:61:42:
90:bc:e3:bb:a4:1b:de:c6:3b:db:34:c0:26:16:90:78:0b:64:
75:1a:ee:4c:bf:f9:1e:31:2a:49:f7:d4:a4:38:92:67:96:65:
1a:48:58:53:4f:d6:d2:7a:92:a7:2d:56:4f:20:ef:12:1a:cd:
a3:f0:2b:dc:fe:42:d7:1f:57:52:f7:ec:97:52:60:fa:26:c3:
69:91:be:c4:45:8d:48:bb:d5:fe:37:f7:e9:61:61:cb:e7:ac:
eb:e9:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:03 2025 by rpki-client