Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: f/APvTDSDXVZxaTvymXBRWwDyV900UY1P9XJ3GxgX7A=
Subject key identifier: 92:01:D2:99:9E:E2:AD:7F:8F:FA:DE:E1:DD:BF:9B:7C:09:66:B9:77
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0198D4047D017C950DF64139832C9B9C5886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 164E
Signing time: Fri 22 Aug 2025 23:02:00 +0000
Manifest this update: Fri 22 Aug 2025 23:02:00 +0000
Manifest next update: Sat 23 Aug 2025 23:02:00 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: LNRbooIwunMW9Lww2XlWoT0Cs1VxpuRqO460QrqNIpk=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7d:01:7c:95:0d:f6:41:39:83:2c:9b:9c:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Aug 22 23:02:00 2025 GMT
Not After : Aug 23 23:02:00 2025 GMT
Subject: CN=9201d2999ee2ad7f8ffadee1ddbf9b7c0966b977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:95:8e:b5:68:ae:7b:4e:1d:eb:ad:a4:42:
9c:8c:66:74:97:8b:d2:a9:30:bd:b9:51:df:62:39:
eb:21:e2:19:9d:66:a7:0c:7f:c4:13:c9:c5:9a:a9:
eb:30:3e:dc:b1:54:33:f3:20:9a:12:aa:2b:69:f7:
6b:8d:d1:c9:65:ab:5c:df:93:3a:da:bf:af:55:f9:
47:e0:75:7e:81:2b:a7:ce:0b:78:fd:f3:bb:65:4a:
4d:4d:98:65:2d:b8:8b:ca:15:93:73:7e:58:b8:36:
a7:bb:d8:62:0d:dc:29:b5:8a:99:10:77:83:22:48:
d7:79:c7:d4:84:10:a5:36:0b:e7:52:fb:15:70:96:
17:d1:53:9c:83:56:57:a7:c3:b8:bf:29:52:c1:04:
8c:39:53:45:e4:b0:f7:29:ff:d0:27:0a:a7:6b:2c:
d5:8a:a4:c8:1a:53:38:d6:6e:96:01:e1:52:f8:ec:
35:1e:5c:34:e7:9d:74:02:32:09:d2:df:37:7e:c2:
7a:44:f0:d3:06:1e:5d:c3:16:29:79:5b:ce:ec:47:
2b:57:50:a6:1b:1d:1d:82:bf:20:a6:20:f0:a7:0e:
76:8d:09:8e:2d:92:df:e2:01:51:c5:e0:56:77:40:
50:29:40:a3:19:12:e6:6c:64:6c:97:8a:3e:b5:91:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:D2:99:9E:E2:AD:7F:8F:FA:DE:E1:DD:BF:9B:7C:09:66:B9:77
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:66:77:f6:55:1c:34:e9:29:98:3b:ae:63:39:a6:2e:23:
c6:3b:2c:b6:53:36:22:96:73:d5:3a:ea:d2:70:90:dd:5c:26:
4c:fb:80:9f:de:91:3e:0c:99:e3:dd:51:46:e4:75:9a:5c:14:
8c:d0:1a:5e:f0:7a:78:af:b6:c7:2b:d4:0e:d0:f6:a2:fa:67:
64:3e:76:f3:e5:7f:0b:39:39:e1:3a:00:e3:c2:d8:f3:0a:53:
91:43:78:64:86:a9:81:4b:e2:02:9d:8b:a5:e4:ea:d5:f0:ce:
d8:96:8b:76:34:f7:fa:fa:7a:77:45:69:16:17:4f:af:af:9b:
de:3b:52:c6:57:73:a0:4f:e9:d3:e1:2a:57:c2:4b:35:8d:7a:
f8:eb:28:69:12:c2:3a:2d:fd:cf:b6:47:a0:28:5e:55:d8:88:
95:93:71:c2:87:77:df:6a:27:fb:5b:80:84:9f:d0:bd:5c:17:
fe:3c:90:c0:93:e9:2d:ac:a1:2d:28:9a:f9:3a:6d:bb:99:81:
e6:17:8c:55:21:6e:ab:b8:65:37:82:60:95:0a:89:c7:00:fd:
d5:7a:67:d2:3b:e7:34:ff:3e:e9:35:85:e1:f0:7a:37:1e:5a:
15:4e:cd:ac:22:1d:b5:1d:5d:50:61:d8:db:45:45:4a:b9:81:
08:a8:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:49 2025 by rpki-client