Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: QO7Nm/cwVjrMNVtYVEMABC2v6q8yTW1/2WMb74hpVEw=
Subject key identifier: 86:61:71:D7:F0:71:D0:2E:C8:B2:3C:1A:BE:BE:6D:1F:92:14:80:9B
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 0198D5F153352F133939AC712D4B9BFDA445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 09DB
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: eG2Sz-NBLwpAqaii4LbUZ-cWycY.roa (hash: uPzFHNSnB/27/j7jzNn6SSjG0qijsqzpue+Zsmabwu4=)
2: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: dSgNgoJiZXTeJfOcAtWxGJGfEM3dc/1Y6b8CRo1MfFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:53:35:2f:13:39:39:ac:71:2d:4b:9b:fd:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=866171d7f071d02ec8b23c1abebe6d1f9214809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:9c:24:eb:ab:22:e4:5d:9c:cc:9e:93:ef:
11:08:af:1e:b6:76:cb:2b:f1:bf:30:f2:35:9f:38:
ec:ee:7b:f0:00:6c:8b:55:d3:7a:e0:db:6a:99:f2:
a0:03:37:f8:f5:61:71:d7:eb:3e:d1:cc:47:97:75:
21:7b:15:00:07:ac:4d:d9:23:37:22:e3:c5:2d:81:
1e:85:05:f7:67:89:ab:7a:51:c9:c8:8f:83:9e:5f:
09:09:ca:4f:d0:78:37:9b:27:61:f2:c0:b5:02:62:
46:23:af:ef:b4:4b:b9:bc:02:2a:bf:9d:0f:9b:d8:
c6:f7:27:c9:a3:59:27:5b:f1:4d:ef:57:ac:58:86:
ea:fc:9f:04:43:12:20:a5:b1:d7:8b:a3:ff:16:c4:
1d:3f:f6:3f:64:ee:d3:a5:69:d7:d5:3b:2f:61:9c:
e8:af:82:b0:82:31:4a:d4:d5:91:f6:d7:6b:e4:f8:
cc:f8:d0:b3:f1:05:ac:79:b8:72:84:4a:62:37:71:
87:59:d6:23:38:12:a9:27:d4:37:83:04:a1:c7:14:
a1:f4:12:fa:fc:90:1b:34:be:29:4c:52:af:99:b2:
9f:7d:ba:22:6c:d7:ed:10:0a:f9:c4:78:cb:d9:35:
12:4e:0c:12:ec:83:59:c9:1b:2e:fa:4f:bf:70:c7:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:61:71:D7:F0:71:D0:2E:C8:B2:3C:1A:BE:BE:6D:1F:92:14:80:9B
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:90:6e:a7:2a:ea:fe:3b:67:00:ef:f9:96:43:d0:5d:b2:c2:
b0:24:0e:19:dd:3e:7f:46:aa:a5:b4:5c:73:21:d0:4a:f3:b5:
0e:f0:75:cd:c4:79:14:db:92:4a:62:d3:c0:7f:70:fa:6d:93:
54:1c:a3:34:cb:5b:70:1b:09:3f:03:bb:01:10:4d:41:68:6b:
73:67:75:64:13:83:4d:d9:6c:c4:e9:78:d3:77:bc:26:6d:fb:
0c:2d:06:b1:07:c6:42:b4:f7:d9:75:62:3e:ef:3a:14:c1:6a:
1f:44:71:73:54:67:4f:71:12:dd:0a:12:d3:b4:15:c5:06:6e:
fd:fe:58:76:22:60:c5:16:88:d4:5e:29:04:38:6f:0a:8f:15:
f8:9e:64:43:b5:f9:95:91:f2:bf:66:7d:49:17:b4:df:b1:e8:
84:3e:75:75:e5:53:97:68:72:a2:57:85:c5:27:b5:c2:ba:f9:
27:c6:47:3f:84:d1:91:88:6e:3b:ee:04:8a:e4:30:31:9e:0a:
41:e1:7b:dd:79:e7:c5:f3:f1:1f:39:e5:56:a8:03:bb:73:b6:
fb:b0:7b:22:34:ae:64:de:5c:17:f0:12:28:57:95:39:2e:67:
f9:8a:8b:dc:ec:d1:fa:7e:7e:a0:6a:cd:f9:c4:aa:1e:12:02:
16:9a:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:00:56 2025 by rpki-client