Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
File: P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json)
Hash identifier: J/5WF4WZuPO5G+v8hjGjLESm510eNS9Yx+wOMs6YSMU=
Subject key identifier: 86:BF:26:39:D9:BA:09:96:AB:E7:B8:86:DA:49:E7:6A:0C:D8:A3:D3
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial: 0198D660C102D8D763530FAAA1D6C92EA068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
Manifest number: 0362
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: tBNWSMrzCtMOHKAYca+4wNrTl8Ns6Dg7zVoMzfNheSc=)
2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c1:02:d8:d7:63:53:0f:aa:a1:d6:c9:2e:a0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=86bf2639d9ba0996abe7b886da49e76a0cd8a3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:9b:3e:c1:06:03:b6:63:c5:00:38:40:d9:
a7:44:2f:8d:d9:44:e6:e8:fb:b1:0a:c0:96:67:00:
f8:f7:09:39:62:01:23:da:d0:49:89:dd:1c:44:3d:
a3:0d:96:3a:04:74:4f:f9:44:74:69:61:ea:0a:19:
08:6d:85:96:e0:33:0d:e3:95:70:3f:54:39:e6:2a:
1b:9e:e3:25:19:e7:57:c0:dd:08:12:01:58:65:dc:
20:75:48:c4:17:c0:07:c2:b6:42:45:c1:c7:e6:cf:
e0:ac:52:35:a3:0d:8c:17:b8:6e:29:0e:40:02:f8:
aa:1d:df:a8:8a:90:17:e7:1a:d3:69:ad:bf:6f:39:
e4:0b:d1:ec:19:84:82:90:00:60:96:9a:92:f6:1c:
e6:ba:12:eb:f4:61:7d:79:68:b7:3d:b2:57:fd:fb:
bb:84:dc:6f:89:e4:4f:06:85:44:5d:bc:cb:25:dd:
44:34:c9:6f:47:57:50:f1:71:83:b5:9a:95:c0:61:
09:9d:0b:68:63:53:76:4e:b9:60:c5:c0:4a:a3:bb:
20:ac:d8:26:e1:21:48:a1:14:de:7f:b0:f8:c7:ce:
8b:b8:e2:85:e6:ab:22:d7:5a:04:cd:17:99:37:b9:
28:a4:fd:ac:45:26:06:40:a5:20:1d:a2:49:19:f8:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BF:26:39:D9:BA:09:96:AB:E7:B8:86:DA:49:E7:6A:0C:D8:A3:D3
X509v3 Authority Key Identifier:
keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:69:95:2b:77:8b:24:6f:3a:12:ec:32:24:48:20:64:c6:8c:
16:d8:a7:99:31:57:80:1d:93:47:04:dc:9d:0b:50:2c:57:f6:
d0:91:d5:d6:b9:41:1f:26:83:0c:64:f6:89:fa:6d:6a:21:94:
90:54:cf:17:a1:91:19:5a:a5:96:89:01:26:63:73:36:ed:a6:
55:58:50:ab:1b:29:b6:ee:24:37:e5:a9:cc:79:b6:84:3d:d3:
3d:7f:43:6d:df:9b:2c:12:37:6c:6f:63:b0:ed:2b:7d:ae:77:
ba:fb:f4:f7:c5:31:dd:5b:81:39:c4:09:4a:26:ca:ae:9e:0d:
11:43:ad:d7:78:ac:54:e6:d7:c1:3f:37:ca:ed:e3:2f:7d:94:
0e:e4:6e:2d:10:4f:98:8c:e9:84:ab:41:c4:ef:43:99:9c:74:
3a:56:00:ba:f0:53:1b:ff:54:01:9c:c7:0f:0a:31:a1:79:c1:
a6:ee:47:0d:0b:0b:6b:4d:9f:ed:28:e3:23:f3:53:03:7d:9c:
87:51:13:da:f1:b8:64:28:82:f6:57:38:d1:7f:8f:e4:50:5e:
05:11:6d:37:ca:2f:8f:16:68:64:35:3d:88:c0:6b:66:a7:19:
04:28:74:24:d6:0c:7e:87:31:e0:85:92:e6:02:00:8f:8c:ca:
07:d2:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:13 2025 by rpki-client