Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: pjSAMGmkznQshoF9Ew5BtWflheLr9VJj2LBuVQuS1Ac=
Subject key identifier: 18:9D:A0:C4:00:50:E2:4E:A9:26:68:51:4F:BD:76:3F:83:50:46:A8
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 0198D6CD03925C9276D662BEC48EC6BE0203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 100F
Signing time: Sat 23 Aug 2025 12:00:16 +0000
Manifest this update: Sat 23 Aug 2025 12:00:16 +0000
Manifest next update: Sun 24 Aug 2025 12:00:16 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: tbqK9Do95mvvWRXJHMcEvQ9patLXyDWFfyRH2kdBVJk=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:03:92:5c:92:76:d6:62:be:c4:8e:c6:be:02:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Aug 23 12:00:16 2025 GMT
Not After : Aug 24 12:00:16 2025 GMT
Subject: CN=189da0c40050e24ea92668514fbd763f835046a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:db:0a:99:68:02:9d:09:38:7a:2f:bf:84:
d3:e9:ca:84:e2:1b:6e:87:36:b8:1c:8d:88:b9:90:
17:b5:9e:dc:27:44:2b:6c:aa:aa:c3:d0:5a:ec:26:
80:31:34:53:70:5c:39:df:2a:ba:c8:d9:c3:b1:7e:
35:44:bd:2d:69:f4:06:15:cb:21:40:19:f7:91:33:
6e:c5:84:a5:21:d1:37:ba:59:36:c5:d0:dd:ec:90:
df:59:21:03:9f:c0:30:44:00:ec:25:92:64:47:c9:
14:ac:16:b7:ed:78:04:74:b1:3e:69:48:0f:26:cf:
5c:9a:30:ca:cf:53:de:39:11:bf:1f:97:4e:87:45:
16:0e:52:40:7e:72:83:72:e3:5f:81:d7:53:ff:e2:
a6:c9:2b:e4:96:37:bd:fb:79:1d:b0:8c:6f:f8:87:
e3:5b:0d:be:b5:37:bf:35:f8:d0:aa:94:cf:31:f9:
cd:bf:24:1c:9a:b8:82:09:e7:9f:21:de:7e:7c:cb:
3f:c7:13:14:97:55:44:38:68:02:71:23:27:21:f9:
1c:1c:b1:4f:9e:50:65:e5:2b:3a:aa:f8:e7:a9:12:
e2:cf:6d:fb:69:14:38:bf:f3:1d:8a:14:81:bf:d8:
41:c3:30:7a:28:d0:8e:52:6c:af:a0:99:d7:53:a0:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9D:A0:C4:00:50:E2:4E:A9:26:68:51:4F:BD:76:3F:83:50:46:A8
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ac:2f:79:47:eb:b5:f5:1f:ae:fe:d9:9f:1f:4f:18:e7:d1:
e2:f8:f3:5c:a3:c1:a6:d2:87:88:6f:9d:5b:7c:b7:dc:dd:c7:
63:fb:15:df:af:75:75:8b:ec:85:47:a8:6a:dd:3a:71:f4:9d:
1d:bf:40:cb:1a:23:ff:ef:12:8d:13:0b:da:74:41:d9:77:6a:
83:29:4d:76:11:36:08:18:3f:ba:9e:34:8c:d3:0d:79:0a:74:
78:1a:ae:62:da:b0:49:6e:ad:3a:90:e8:15:b7:5e:b7:57:bd:
1b:a3:9b:5e:41:b3:20:c0:06:fe:73:5d:bf:cc:2d:8d:56:09:
fe:c0:15:d9:49:ae:89:9d:f2:29:fc:32:21:73:c5:86:cb:7a:
95:65:8a:f8:43:99:54:20:7f:11:fc:a7:8e:f8:9c:21:70:70:
86:59:e2:42:ee:77:e3:5e:1b:c4:31:4e:46:f9:9a:d0:d0:0f:
3b:8e:a1:23:e9:c4:4b:cb:7d:16:02:e6:20:33:dd:08:fe:40:
a4:75:02:b5:91:ad:80:e9:60:f5:68:f7:4b:d2:06:1d:71:fc:
76:7d:74:12:ec:1c:73:ce:7a:da:0b:fe:1d:74:d5:ac:b7:02:
45:f5:b2:fb:c7:a6:ac:99:7f:b4:a9:5a:4c:93:74:c1:8b:11:
b2:c4:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:47:16 2025 by rpki-client