Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: nxTga8wIY/SAU2QrE4Hi4B6cwTLgItC6CSy49gYTiqc=
Subject key identifier: 73:B8:E4:04:58:2E:7B:07:1B:21:99:5C:29:03:F8:B1:01:18:20:5D
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 0198D5F1216CCCD7252933B33204B89F4A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0AC1
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: DLehiSpzYAKAvfLKm/ePClIoLDn6feqwfKkcrngaOMU=)
2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:21:6c:cc:d7:25:29:33:b3:32:04:b8:9f:4a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=73b8e404582e7b071b21995c2903f8b10118205d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:6d:4a:f6:d2:4b:36:31:b4:a1:fb:16:75:
65:be:12:ff:fe:3a:c1:9f:60:78:c4:48:b8:68:07:
24:c9:f7:b2:ab:cd:f3:35:ba:0d:7b:f2:85:23:4e:
2f:5a:a9:8a:8d:12:2d:e8:f7:0a:ec:3d:c9:c1:d3:
dc:3e:c5:ad:cf:98:5b:76:be:a6:88:dd:2c:97:93:
2f:69:e9:da:66:94:39:fa:de:67:25:8f:84:6c:e4:
84:64:99:26:b1:75:b3:b1:12:3d:1c:d1:6f:05:29:
5c:41:9e:d4:9f:86:d6:31:c1:e5:42:a7:0d:81:30:
45:fd:32:bc:6f:3d:4d:c2:ad:eb:58:f7:8d:bc:81:
8d:ee:bb:16:4f:54:6f:d4:dd:69:5e:f5:d3:58:b5:
ab:04:af:1c:9e:1a:3f:93:2c:08:2c:cb:78:b8:c1:
f5:e0:49:e7:f5:ca:68:55:33:4b:79:b1:f4:b2:b2:
52:0c:e2:50:0e:30:f2:f4:d7:91:c2:cb:94:77:4c:
cf:8c:30:f8:dd:77:69:ca:8e:ca:59:3e:62:45:92:
45:a3:fa:0e:d6:7c:90:ee:25:18:a7:dd:67:16:d8:
0b:68:7b:cb:dc:61:db:bc:fa:f7:89:d9:07:76:4f:
00:92:f2:6a:49:af:7a:e4:52:a8:99:9c:06:43:08:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:E4:04:58:2E:7B:07:1B:21:99:5C:29:03:F8:B1:01:18:20:5D
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:17:96:a3:f0:06:a4:02:c4:3a:1f:d3:0f:b3:fa:fb:96:d7:
d8:f6:5a:2e:3f:48:49:c8:15:04:fb:7c:49:75:07:c6:a2:a7:
b8:99:48:14:a9:b8:d2:01:3f:9e:10:37:6d:ec:60:0a:52:eb:
94:d4:bc:60:a7:87:f2:a0:80:d4:87:64:0e:78:d6:11:46:cb:
fe:f1:ba:25:14:e5:b5:d7:f2:fd:27:9a:fe:87:8f:51:ce:14:
37:01:a3:47:45:74:e1:ec:31:b9:ac:5e:81:0c:27:34:c5:86:
8a:11:4c:ac:60:fb:b9:b4:ce:5e:cd:2e:23:53:7b:4f:c2:fc:
6e:f8:11:1b:a1:73:84:40:9e:a9:ff:14:86:bd:a6:1e:c6:ab:
ab:91:c1:11:6c:f1:d4:68:7d:50:f2:83:4b:b2:5a:a6:22:ac:
9a:49:68:eb:1c:e6:61:d5:e6:5b:13:4a:32:36:1c:e4:71:39:
06:60:13:28:57:0a:4e:ef:3a:75:83:c2:f2:2a:30:f5:0d:f6:
46:0e:da:ec:11:7c:20:71:64:b0:91:4f:fd:b2:be:5f:39:e7:
09:d2:d5:f4:e9:44:07:04:66:1f:b3:ee:b7:07:31:c0:e8:96:
a3:ae:a4:44:8c:4b:28:8c:27:5b:79:96:83:6e:5c:cf:da:42:
36:64:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:13 2025 by rpki-client