Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: m+KYQtSRIoxS0+LNCs/Nsh/0uFPlmtFGtE6wC//Vt3k=
Subject key identifier: 32:C3:45:22:CF:A5:14:07:A2:65:42:54:1F:9A:04:F4:C7:08:5C:DA
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 0198D515F2E3D3BC6BA5A774646C44B0D1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 064E
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: EVmf58C/tWynVkks39hnhmTUnGuhXxC9H2aB/LICVyg=)
2: Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa (hash: 0Bf0l0DWLnoKx593QVoGlu2x+BD1lYWYH448tSVbn0U=)
3: Tb-8GP8qcCsPrA2Xrleo-iet2HM.roa (hash: yyhoDt89y5+7nL9lVvf4sdS/dAeJY+OT1BrhoMFwMME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f2:e3:d3:bc:6b:a5:a7:74:64:6c:44:b0:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=32c34522cfa51407a26542541f9a04f4c7085cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:80:da:9a:60:b3:41:f6:fd:e9:5a:83:96:
68:ed:da:35:e7:51:b2:2f:a3:74:9d:7d:1a:8a:0f:
79:c7:8a:01:6a:58:9c:3c:93:e3:8c:22:de:74:3b:
c7:4b:ed:2c:cf:9c:4d:53:89:43:59:22:ac:3b:f0:
dd:a7:63:a7:8a:7a:b6:63:13:ea:5c:b2:14:b8:5a:
f7:a4:75:00:04:13:eb:84:d7:23:75:df:d6:f5:86:
72:cc:43:0a:2c:a5:84:ab:b5:ba:f6:15:ba:e6:c1:
d6:20:64:1d:a2:73:8c:cf:7b:ef:d2:62:63:d6:28:
2a:86:b4:c3:c8:89:cb:e1:f8:ed:05:e9:45:a0:73:
32:7b:4b:c8:95:06:7e:45:e3:76:54:fd:fc:e5:f8:
80:ab:75:34:3a:67:bc:8e:7f:62:3f:40:25:f4:d1:
92:d8:e9:23:14:f6:c4:5c:4a:ba:9e:40:18:c6:e7:
18:c8:9a:34:f1:31:aa:0f:51:d0:86:03:30:40:6e:
5c:1d:68:f8:0c:0f:f2:52:b5:72:42:98:f4:92:e5:
93:06:d7:b7:23:97:ca:38:54:4c:6a:f3:72:cd:b5:
e4:be:8c:1f:9d:89:98:da:e4:cd:99:a5:46:b5:4c:
c2:d9:bd:a9:1f:e5:d7:d6:a7:15:ae:5d:d5:02:66:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C3:45:22:CF:A5:14:07:A2:65:42:54:1F:9A:04:F4:C7:08:5C:DA
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:48:78:b0:4f:12:26:05:8b:3a:eb:9d:a6:d1:89:46:ae:a5:
86:12:90:c1:cc:c2:30:57:ad:fc:de:cd:d3:f1:81:64:2b:69:
72:ff:4d:1b:0f:e2:28:62:e2:d1:d8:5b:8b:8e:1a:06:c0:43:
97:7e:79:c1:bd:4e:f5:a4:4a:ae:fb:57:52:63:69:19:26:ec:
f8:64:04:de:09:fa:19:da:b4:ad:19:2f:14:10:25:f6:99:34:
4e:a1:69:34:c4:fb:21:da:ef:11:7c:7f:bc:74:21:97:85:4d:
43:55:a4:45:5b:7f:27:56:d6:f6:d8:16:3c:84:28:32:5a:72:
ed:27:70:75:77:fb:1b:cc:3a:f0:2d:2b:85:d1:c5:ff:e0:26:
5c:51:66:53:3c:79:5f:8f:10:8d:90:b0:ee:ad:26:50:a4:3e:
5e:66:5d:1f:e7:3b:48:73:c2:1e:e5:2c:c5:79:34:f4:44:d3:
71:83:01:ac:c0:4e:ca:71:d6:68:13:fc:ff:6a:fd:43:c3:25:
a7:4a:04:c6:2a:13:71:84:2b:2f:86:10:bb:c0:36:6f:40:b3:
90:5d:5e:3c:bf:ce:ef:a9:1f:60:6a:cb:d9:3e:d4:5f:8a:38:
c4:f1:14:61:a2:76:5f:ae:e2:ce:fb:8b:16:fa:8a:82:da:3e:
e9:a3:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:56 2025 by rpki-client