Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: fOmM5xjYzcPCfkV3quMnCrz5+2Xtty5gODwHABs9qiA=
Subject key identifier: 67:62:57:56:22:7B:AE:6F:D4:9A:A8:F0:7B:23:51:C9:9A:30:F1:E5
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 0198D51635D329A12C4ADF56541196332789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 12BD
Signing time: Sat 23 Aug 2025 04:00:59 +0000
Manifest this update: Sat 23 Aug 2025 04:00:59 +0000
Manifest next update: Sun 24 Aug 2025 04:00:59 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: S/J5ALsRT9mLoIexb5BnfjfgYeywxUb8ZiEcS+NGxWc=)
2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:35:d3:29:a1:2c:4a:df:56:54:11:96:33:27:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Aug 23 04:00:59 2025 GMT
Not After : Aug 24 04:00:59 2025 GMT
Subject: CN=67625756227bae6fd49aa8f07b2351c99a30f1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:39:6c:64:6e:0e:95:d8:30:74:b1:c8:af:f5:
f7:33:6b:fe:09:c7:f2:9b:af:c6:e9:cb:e3:ee:fa:
38:02:83:85:1d:9b:f7:85:7f:b6:4a:cb:d6:c3:81:
63:57:f2:a2:79:1c:a3:2f:7c:51:61:ac:e1:a8:77:
e1:5e:99:1b:2b:2c:68:79:8c:70:7c:66:77:1a:65:
8d:64:d2:e9:66:95:89:a2:e5:3f:82:89:77:db:4f:
6f:9f:7e:30:3f:38:94:28:c0:f2:37:f5:d1:a3:c0:
a7:85:79:52:9b:42:c1:5b:db:35:7d:5f:2e:f0:be:
fc:71:10:cc:4f:65:ff:25:55:17:a8:b4:c1:1b:cc:
1a:6d:26:93:aa:77:87:79:59:11:9f:62:cb:d0:b4:
db:5d:aa:66:f1:0c:ca:4f:db:bb:7f:a0:d7:0a:65:
de:e6:d2:a7:dd:f6:da:a1:70:f4:8b:24:5e:fc:37:
c5:78:89:b6:3c:a1:a5:5d:9f:d5:67:4e:5c:ec:a0:
2a:22:ca:b4:9f:21:d1:37:43:02:3f:a6:7a:3b:45:
fb:bb:a9:32:59:b2:5c:73:da:97:8b:da:91:64:52:
df:54:85:f5:f2:e8:c7:f9:9f:92:87:a1:3e:aa:23:
e1:ee:50:5c:7a:6c:d8:5e:2a:c8:ce:e5:c4:b1:32:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:57:56:22:7B:AE:6F:D4:9A:A8:F0:7B:23:51:C9:9A:30:F1:E5
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ae:e5:3f:6e:c0:b0:7c:72:62:17:69:9d:d3:73:42:d1:db:
81:76:d2:66:99:b5:fb:f7:da:41:ab:3d:ea:b2:58:e5:d8:2c:
fb:0f:8e:5d:f2:34:fc:db:a8:e2:b6:af:bd:87:cc:a3:08:92:
6e:74:a6:01:e7:72:24:9f:e3:67:11:a4:59:6f:05:30:4d:ee:
49:8d:75:dc:f7:7c:52:c7:ca:44:ac:b7:3f:b2:49:0f:7f:66:
ea:6b:79:c1:d9:87:90:2b:eb:4c:f3:09:b9:11:ba:d3:07:f8:
9e:89:ec:4f:8a:bb:36:bc:ae:02:81:13:d3:60:84:68:19:4f:
1f:d1:ce:6e:6f:15:71:2b:a7:0b:de:73:8c:d3:be:24:a9:1d:
d4:02:9b:a7:f1:9f:f9:27:09:ba:55:9d:1e:4a:42:8a:78:14:
2b:73:54:81:09:01:44:ed:01:b4:48:ee:e4:a2:f3:28:f7:bc:
86:9d:ae:73:1e:02:06:34:54:5d:ad:0b:f3:aa:8d:f4:2d:b8:
75:41:8f:9e:b0:6e:64:e0:d9:32:b4:02:24:b5:9d:80:53:4c:
35:a0:09:61:43:92:4b:52:53:7f:fb:c8:c0:22:19:27:c1:2b:
fd:bc:f0:a5:7c:09:01:8d:2c:ac:00:0a:77:a2:99:75:de:40:
b5:1c:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:46 2025 by rpki-client