Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: 0rBHgt7WhNHoipU/BNtENXRwqsuEd6uvgk0z1EHWY+4=
Subject key identifier: 2A:0E:AE:AD:36:3B:DA:DE:46:A4:95:AD:23:01:1B:55:F0:58:F2:DF
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 0198D54E76DA4B641D3C83307AFBDB88D973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 1231
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: ZJtpRifwx9hk71gRvcBoJfSl5vy306oGqfBDuD1rNz4=)
2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
3: 7cGpErFojxZQKCSeJeJ8U-ucjfw.roa (hash: u8HNSCh1+MNiLey93QoDDaHwFmVThoOReQEndhAwPeo=)
4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
5: YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa (hash: J+sfrqDRaIaNCnrB/qidc2XHG3Pcd1LgS59q0souwmY=)
6: lJFoGwOfjYG7bpWJkltu5e79TPY.roa (hash: a/JvmbooIi2RUBJmFiHrsUi1IesqwE85tvSq7Xkrm58=)
7: nAU_2VpM5SccaGQsl0YkIDwDC1w.roa (hash: LkSzGNi0v1t7wdhC/pLyKhtEY4pQXgh7tGdjsi4l0Ig=)
8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:76:da:4b:64:1d:3c:83:30:7a:fb:db:88:d9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=2a0eaead363bdade46a495ad23011b55f058f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:0c:29:bb:2f:9a:a8:5d:a8:46:33:d8:fd:
54:6b:25:66:97:69:c7:e0:34:8d:d6:22:b0:95:2a:
41:c5:cb:64:54:aa:4c:f9:85:af:3b:60:57:d3:5c:
dc:ac:83:53:2a:73:f5:0a:3c:21:37:39:a8:39:ba:
c2:29:1d:e6:a6:2a:56:b0:3b:93:64:a7:7d:d6:c6:
c1:59:3f:4d:02:95:2c:ba:30:6f:bf:5a:16:cb:8a:
31:1f:47:1d:d0:b2:d5:d5:7a:22:82:f4:f6:1a:2b:
3c:09:76:99:5e:8b:16:9a:0e:16:b4:75:53:cf:2f:
21:91:de:1d:ec:b3:df:d0:97:06:b1:37:ca:41:41:
f8:10:5b:ef:c3:d8:57:d0:1f:62:25:54:29:f8:09:
4a:e8:86:6a:c6:3c:0f:63:8b:67:07:51:c0:dd:ed:
05:40:a6:a6:3b:42:1e:e2:07:66:61:9d:91:3f:b8:
87:c8:5c:2c:d4:09:a4:5d:52:fc:ff:2f:67:90:ad:
27:4e:e5:17:0e:e2:33:c0:37:ca:e1:a9:12:d1:ed:
55:a3:d0:6d:2e:52:88:f2:6a:6b:3a:bd:e4:53:2d:
c2:78:61:7a:75:a1:bd:a2:89:1a:7a:30:13:57:d8:
11:9b:45:af:fa:bd:1d:24:5b:82:1c:55:78:e0:bf:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0E:AE:AD:36:3B:DA:DE:46:A4:95:AD:23:01:1B:55:F0:58:F2:DF
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cb:75:e6:90:7a:4b:09:44:de:98:bc:b8:4e:af:26:5c:5e:
f0:1c:c6:b6:55:ed:d9:5c:61:79:c5:dc:aa:94:62:cd:99:08:
71:92:ad:98:58:25:10:3e:29:1c:8a:6a:9c:b9:eb:b7:7b:ed:
b6:23:9e:73:1b:7a:81:c7:99:b7:2d:7e:50:59:42:ca:d0:d6:
25:5b:03:3e:d5:2c:1a:7c:81:3b:d9:ba:2e:2e:71:de:58:71:
70:e3:14:59:2a:30:36:08:43:e8:ea:67:a5:e9:04:b2:ae:13:
50:e4:cf:09:7a:7d:27:5c:19:39:3a:41:6c:6e:d1:09:df:ce:
00:a4:94:d6:95:cd:15:30:f4:dc:62:17:15:f4:2b:66:11:28:
24:f4:db:34:3c:0e:8d:e8:b6:45:51:3b:ab:34:61:a5:ff:6f:
4f:0e:e3:db:21:03:ad:f4:0c:29:6d:d0:79:f0:21:a2:85:dd:
fb:d4:8d:b8:8a:5f:72:f4:6c:4c:0c:cb:91:06:b6:7c:f4:6e:
cf:44:e3:18:f0:65:bf:f8:cf:39:9c:43:32:43:25:1d:95:9b:
40:24:7c:b4:60:a7:fc:18:08:b2:0f:02:a2:50:29:f9:71:bd:
d8:f4:ba:8f:31:d9:75:72:32:ad:e6:97:e7:80:76:a6:2b:42:
9a:08:6a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:41 2025 by rpki-client