Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: 4v1Ah0xS2TG+fc7gspX0bXUV2CcRFNRwnk5S47tOVTU=
Subject key identifier: AA:9F:24:A8:40:A3:99:0F:03:3B:75:F7:9C:30:A6:E2:BF:0A:68:C0
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 0198D4E035122B4E74703212E98504D4B3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 0109
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: wDLZBqvpq8FBCGFg2axPObJnJmPIyNl9ivEyoZdMKuw=)
2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:35:12:2b:4e:74:70:32:12:e9:85:04:d4:b3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=aa9f24a840a3990f033b75f79c30a6e2bf0a68c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:64:51:a5:bc:8c:81:e8:25:b4:75:73:5f:
16:65:49:6e:c0:bb:39:56:62:31:3f:62:97:29:7b:
08:ac:30:00:90:cb:db:41:1b:8e:a6:fe:da:c3:98:
cc:ed:3b:43:03:eb:f7:21:9f:3d:fc:ea:35:12:1c:
b4:4b:f4:f7:94:d7:41:e1:a1:9a:54:ab:de:da:35:
d5:e4:d0:9f:80:a4:cb:93:de:38:57:56:c3:fa:59:
03:68:c3:97:43:0e:36:c8:ce:64:5a:82:e5:45:8e:
20:25:59:54:ea:b5:69:c4:4b:08:70:33:0f:9f:50:
56:c2:a7:3c:59:64:2e:bf:4e:13:5b:24:a4:87:46:
ee:07:6f:fc:16:f0:c1:c4:73:3b:a5:bc:7c:f7:1a:
58:c7:b4:d8:81:b2:56:0f:6e:dc:67:e4:c5:ea:2d:
4f:9a:db:a4:5d:bd:ce:c1:80:59:8e:95:0a:d5:fc:
e1:60:bc:f4:eb:66:06:98:e4:d8:60:7d:73:0e:75:
77:c3:72:87:65:c3:92:37:bc:a2:d9:cf:6d:09:4f:
40:3d:4e:b1:c7:c8:ae:b8:a3:57:2a:52:a8:16:47:
2f:65:dc:73:fb:bf:29:05:8d:19:10:f2:fc:8c:60:
85:9b:71:5c:41:ff:2b:03:ba:30:4c:18:1d:72:ae:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:24:A8:40:A3:99:0F:03:3B:75:F7:9C:30:A6:E2:BF:0A:68:C0
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:57:57:09:80:37:32:25:01:77:4f:2e:92:72:74:45:61:
cd:d8:0e:5e:97:be:e6:77:8e:d3:3c:23:e6:bb:9a:4b:db:36:
49:2d:28:d1:bf:29:25:68:b8:c7:a3:78:26:f3:9e:25:55:63:
b2:25:e0:c1:21:e9:89:21:47:1c:15:7d:e0:a8:02:73:54:40:
c0:64:aa:f2:20:63:29:97:1a:30:5a:6d:b7:3b:95:34:ba:73:
54:da:34:a8:99:e0:e4:bb:06:01:ba:dd:26:58:1b:54:04:93:
9a:af:bd:ba:62:cf:a4:41:fc:df:49:d8:e8:9c:b9:4e:5a:56:
47:d1:11:61:8a:b5:ed:7a:45:ae:2f:ff:dc:a9:5a:7d:f6:05:
e5:b1:8c:c5:5e:66:7d:24:cf:3e:3c:87:05:3e:57:30:09:f5:
82:de:49:19:1d:e4:47:44:f2:fd:63:4c:34:9f:06:36:18:2b:
a6:83:11:33:98:3f:11:51:31:c9:77:49:ea:4e:a1:39:b2:0c:
43:eb:25:c2:e3:c8:44:80:fa:5d:61:99:c7:24:45:ad:5b:2b:
17:83:a5:20:18:28:ba:8e:df:7e:f8:16:dc:d5:d0:d2:4b:1e:
5b:f1:1e:71:43:80:91:79:ce:2f:08:ce:bf:89:19:54:83:61:
be:83:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:56:33 2025 by rpki-client