Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: T9GT4m+OIGtcCdVIYLLhWqmtLSs5g4IteYrG+giz6oE=
Subject key identifier: 31:ED:3F:40:1F:80:17:60:65:7F:5D:8A:BB:51:7F:AA:E5:13:12:AC
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 0198D6604D62CF64ABB1AA4A2CB73AA41831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: VB+wPT3ERO8YGD+UNN9rL/c8dS947sKPtB/J2OTnze0=)
2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4d:62:cf:64:ab:b1:aa:4a:2c:b7:3a:a4:18:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=31ed3f401f801760657f5d8abb517faae51312ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:1e:fa:34:10:30:dc:18:2e:db:99:86:fd:
75:7c:ed:5d:4f:de:cb:3f:be:64:0b:62:72:82:81:
de:7b:ae:5e:cb:35:e0:04:4c:34:69:d4:af:e9:a4:
de:4b:b4:c6:3c:77:09:5d:1e:d4:4b:80:94:48:fc:
ff:cf:ff:da:f0:5b:d3:a1:be:da:a5:92:fe:6d:38:
cb:f0:f0:29:50:cc:2b:ca:ab:6b:c7:64:aa:e0:f3:
f6:16:b5:bb:62:e1:f9:bc:a0:30:66:59:86:1f:70:
be:39:75:15:f4:7a:99:eb:99:44:aa:e0:11:3e:36:
3d:1c:c4:07:73:d2:af:2c:a1:84:a8:88:fc:a3:48:
ad:38:7c:7a:6a:44:97:35:80:27:46:e8:a1:8d:a1:
a1:98:c8:6f:80:7d:a4:66:6a:f3:85:ba:07:bf:ba:
8a:03:09:03:bf:c7:70:15:21:4f:69:52:09:85:01:
e4:e1:74:04:ee:a0:6c:93:40:c0:63:44:8d:9e:87:
7a:4e:5c:b3:99:73:10:f0:c5:1a:8a:7e:9a:5d:50:
8e:59:e1:e9:bf:9b:5a:9e:19:02:20:30:40:f0:34:
b5:df:3d:f8:5d:ff:f7:bf:e7:65:31:cd:b9:78:9f:
c6:75:87:67:47:dd:5d:c8:3e:c2:98:af:ca:d6:29:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:ED:3F:40:1F:80:17:60:65:7F:5D:8A:BB:51:7F:AA:E5:13:12:AC
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f7:c0:ba:af:1f:7b:a8:a3:96:e1:d4:d5:d7:d5:87:68:a8:
b5:ce:1f:b5:ba:3b:f1:1a:58:cf:05:55:f9:38:b9:2b:58:28:
b6:74:cd:f9:4e:04:37:47:4e:3a:0b:55:68:06:7e:60:85:ab:
af:88:33:c0:a2:c3:9a:5a:e0:b6:95:3e:02:c0:69:b7:8a:24:
07:7a:a0:70:cf:29:f9:e2:fd:fb:b4:be:1f:d9:72:3a:52:42:
b1:8e:6b:0a:42:15:e0:42:12:f5:1d:43:5a:b7:d0:15:35:ed:
61:fe:09:af:c7:9a:79:f5:d0:82:bd:04:d4:6d:ea:17:b7:00:
96:b2:98:75:a6:3e:7b:c7:49:d2:8c:c9:2c:6f:71:d9:12:7e:
78:e7:49:6b:1c:f6:31:cb:8d:3c:14:a7:04:64:ae:b3:a2:b5:
a0:2a:cf:7f:8b:17:df:4c:2b:40:b2:e5:ff:c6:51:78:3f:16:
57:c2:0b:46:f8:88:d4:d7:78:dc:b5:94:5f:4f:4e:f6:dd:95:
3c:cb:69:88:9b:00:74:24:7e:d8:6c:2c:07:cd:f9:05:2c:ca:
39:fa:60:32:61:f9:7e:49:6a:60:f5:7a:69:dd:d6:2e:76:59:
d3:40:71:cb:3e:59:19:f5:d5:07:a3:c2:72:f8:34:07:03:25:
0d:dc:79:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:33 2025 by rpki-client