Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: sv+NpgN0c0qdIef9rdWGQ680jsDcPZZironR9Eiz+dU=
Subject key identifier: 8F:04:ED:F0:00:4C:C4:39:74:C8:84:0C:93:DE:B0:6A:77:1A:57:99
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0198D705805DC87F55280FE72C9D60BDEACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 07F5
Signing time: Sat 23 Aug 2025 13:01:58 +0000
Manifest this update: Sat 23 Aug 2025 13:01:58 +0000
Manifest next update: Sun 24 Aug 2025 13:01:58 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: mIsWb3rVugc0B9h3wIezzsf0bYnaQqFedPF7h7rFPfg=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:80:5d:c8:7f:55:28:0f:e7:2c:9d:60:bd:ea:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Aug 23 13:01:58 2025 GMT
Not After : Aug 24 13:01:58 2025 GMT
Subject: CN=8f04edf0004cc43974c8840c93deb06a771a5799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:ac:7d:87:4f:49:62:ef:b5:55:46:de:7e:
17:50:9c:ab:db:15:d4:ad:ce:df:c1:2a:54:a8:34:
77:dc:aa:72:5e:6e:75:26:79:3a:83:9a:71:14:97:
de:cc:4a:5d:3d:8f:34:1c:60:be:f7:09:7a:09:cd:
f7:2b:f6:9d:7c:68:3a:3c:44:64:d5:40:9d:15:fc:
fa:ae:2b:b0:77:e5:7f:c2:64:3f:e1:e7:99:62:77:
37:f0:b4:02:40:34:33:34:dc:7d:dd:10:5a:65:85:
d2:70:54:3e:58:1e:7b:a7:6d:c8:a6:a9:c5:76:19:
30:eb:84:51:23:2e:29:69:4a:44:82:cd:72:64:71:
fe:6a:7f:85:4c:30:4e:a9:24:34:85:89:23:cc:d0:
4d:be:6d:c1:d8:c9:8d:ff:7c:19:dd:4c:a4:2a:23:
7d:e0:d7:b2:1b:9c:f0:36:85:3d:ab:95:15:a7:98:
a7:f9:58:1a:7d:aa:88:8f:65:4a:4f:81:87:89:71:
7d:c3:97:ad:6b:c1:dc:7c:9d:cb:3b:b7:d6:69:9f:
32:bd:12:e6:43:a4:1e:12:ba:8c:2e:b6:72:64:c7:
0d:fc:e3:8b:a6:1b:99:b1:53:52:c3:a2:bd:22:9f:
9a:4c:a2:8b:ae:aa:b0:37:b9:97:1b:37:3f:9e:35:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:ED:F0:00:4C:C4:39:74:C8:84:0C:93:DE:B0:6A:77:1A:57:99
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a2:21:86:fc:8c:5b:cc:e3:4e:cc:6c:12:6d:cb:73:67:86:
b1:2f:c7:12:55:40:63:d0:4a:36:5b:ee:bb:8a:e2:a8:f9:19:
d6:78:9f:01:15:fd:75:05:f4:02:77:f6:8a:f2:2e:b2:a3:fa:
b5:93:0b:e8:12:8e:de:4a:19:19:ea:5c:f0:a6:15:f8:26:41:
67:33:d3:6b:3d:44:9b:fb:8f:d7:17:84:76:e6:93:7e:0d:c0:
9c:35:c0:fa:cc:f1:06:88:a5:c4:5f:85:b5:42:69:b5:ff:11:
bd:f8:d5:ca:17:1a:8b:8d:9e:3a:9e:5d:24:ee:82:3d:9d:8b:
ed:77:82:c3:bd:e1:48:07:23:ba:62:e3:8b:43:ff:7b:c2:9f:
b3:1e:f6:49:04:58:15:2a:d9:67:17:18:f5:35:0e:53:47:25:
f5:22:54:8e:30:58:f7:ee:58:75:1f:4b:d4:87:de:ee:c6:19:
85:07:d8:fe:3f:cc:7b:a3:00:64:aa:5f:5e:45:80:d3:4d:bd:
52:d1:1e:68:4f:a0:8d:02:b2:08:79:8a:70:21:ee:ab:9c:6e:
15:97:c7:91:a8:89:51:88:4f:42:c0:74:44:cc:55:59:4e:aa:
af:5d:64:7c:85:9a:a7:b2:ae:16:f9:6a:95:97:b9:2b:56:e4:
06:e0:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:25:03 2025 by rpki-client