Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: 3t/MsBYK2xW2ZEtEjLPPRA0PwwM7uiMBu9UNOMMswsw=
Subject key identifier: FF:41:B4:2A:04:10:EC:87:A1:DA:9E:D8:A7:BB:79:AC:BA:BA:E0:00
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 0198D705F5578185CA33A68532907CC31AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:28 +0000
Manifest this update: Sat 23 Aug 2025 13:02:28 +0000
Manifest next update: Sun 24 Aug 2025 13:02:28 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: WNF50h+6Zc5LCaKnSi7tzrLobZZrlwHjNs7FZ9/kdwQ=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f5:57:81:85:ca:33:a6:85:32:90:7c:c3:1a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Aug 23 13:02:28 2025 GMT
Not After : Aug 24 13:02:28 2025 GMT
Subject: CN=ff41b42a0410ec87a1da9ed8a7bb79acbabae000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:db:cc:14:b4:f1:7d:78:f3:6d:6f:bc:1e:
e2:48:6d:28:99:f9:71:6c:67:2f:83:df:37:e1:e9:
36:64:67:94:5b:6a:ed:18:4d:0b:ee:79:43:cc:31:
1a:35:15:a5:bc:52:88:46:a1:5b:62:5d:18:af:9f:
d6:44:4b:b4:ca:3c:eb:49:26:a1:e1:e2:c3:0e:fc:
23:3e:6a:18:b1:9e:08:6f:da:a8:da:55:fb:4b:97:
5f:18:03:df:7d:de:71:a1:91:54:72:ba:e5:1b:53:
45:3e:33:eb:9a:b1:c6:0f:6a:12:c6:11:ce:c3:ec:
aa:98:7c:be:e5:b7:4d:dc:2c:07:66:4a:38:88:7e:
68:8f:bc:0a:49:57:97:77:23:8e:15:15:a9:e7:ea:
51:9a:89:78:c7:9a:2d:9d:d9:e8:fd:56:3f:cb:93:
12:66:01:69:fb:0c:7f:8f:02:42:89:16:29:ab:12:
68:4d:b9:de:ad:d3:85:20:9a:1d:ee:04:b8:c9:97:
53:65:f4:30:a7:0b:c5:e3:14:a7:99:c6:72:14:0c:
57:f3:6e:e1:22:45:5f:61:c3:fd:ec:75:27:53:43:
6f:5b:bb:75:fb:6c:4b:19:c2:03:7d:ef:4e:e2:2e:
ff:6f:45:3b:cd:a7:f2:30:5a:69:ee:56:7f:01:63:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:41:B4:2A:04:10:EC:87:A1:DA:9E:D8:A7:BB:79:AC:BA:BA:E0:00
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:97:4b:94:06:51:d4:0b:59:b1:0b:0b:82:02:09:4a:a2:79:
db:c0:4d:98:e9:93:6e:51:5c:1e:3b:9b:85:c9:62:09:2f:83:
9c:72:41:6d:6e:29:37:b1:e1:06:f4:ed:12:02:b4:8a:bc:65:
72:2b:b4:be:47:2a:f8:c9:60:d2:7c:9b:41:5f:4f:64:23:59:
31:6a:5e:77:70:89:00:c3:06:dc:de:24:15:65:4a:b5:24:4f:
6d:70:3c:d7:de:6b:78:9c:67:ca:98:95:59:c1:26:79:89:cf:
98:7e:ab:ef:17:47:9b:63:73:fa:91:11:da:99:43:3d:70:05:
a1:76:02:68:be:89:29:c4:67:fc:b6:92:d7:d9:0e:31:18:db:
2e:eb:df:a7:2c:76:da:80:02:08:b7:fa:fd:2e:3f:f1:3a:b2:
3e:8f:7b:26:a2:a4:da:5d:1f:28:ff:62:a1:a1:40:7b:1e:40:
15:2d:6b:91:66:bc:67:ff:9f:0e:51:59:62:ba:6d:a9:3d:49:
83:88:15:8e:1d:7d:2e:6c:d2:4d:46:f1:15:12:6e:43:89:64:
2c:66:e7:ce:50:d7:25:77:38:fd:ed:4e:82:f0:a4:84:c2:8b:
84:d2:37:08:b8:5c:05:c6:9c:bb:42:62:35:b1:f6:dc:b1:9d:
53:cc:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:41 2025 by rpki-client