Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: 32Z3pOOdJsP3yYdWo300AcQxb6M9uFDeIINNIgGydlo=
Subject key identifier: 7B:9C:FE:75:2E:74:9D:A1:3A:13:24:DC:38:D3:78:A3:C8:5E:BF:50
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 0198D58394B69E283A581C82EFB5CEF982DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0F0D
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: Bqnd+sdY5h8S1bJ5tTjHPTEpGVO4QDN3p/S1/zycW34=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa (hash: 4tBHDD8ccamGIZtMNBVAmE3bow4OuhCBji726kCuMPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:94:b6:9e:28:3a:58:1c:82:ef:b5:ce:f9:82:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=7b9cfe752e749da13a1324dc38d378a3c85ebf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:05:ce:f3:a2:09:ef:60:45:7e:4f:95:f8:
63:cb:b1:d9:ed:c3:c4:53:6a:76:0c:15:b5:89:38:
38:b3:55:dd:64:4f:90:dd:38:b3:60:95:9b:7a:66:
1d:94:4c:02:7d:aa:dd:7e:45:53:f8:b6:0b:c4:81:
f8:8c:3c:c5:32:90:d1:c6:ce:a6:e5:00:a3:27:ac:
e0:1f:ff:26:b0:a1:eb:8e:71:9d:47:7c:49:1d:2e:
1c:38:4c:26:20:8b:e2:7e:fb:2b:d1:2b:0b:20:1f:
b3:a9:93:e9:1e:7d:e4:da:dd:c2:c7:bc:83:db:0f:
a6:13:78:f8:c3:36:0b:5d:24:e1:5a:0e:72:65:1e:
3a:db:ed:af:5a:82:3d:7f:b0:76:0f:13:5f:a4:92:
28:b9:85:e8:90:d0:16:cf:2c:e6:03:07:74:09:d4:
9b:ac:35:da:8f:15:5a:51:3d:45:74:b0:fc:15:1e:
9a:2d:37:08:ad:4e:f3:0c:00:bd:1f:04:f6:4d:b3:
aa:e1:0c:4a:5f:2c:fa:46:e2:d6:9d:84:08:88:47:
d1:21:2e:73:8b:25:e1:7e:b9:54:d6:26:89:37:8c:
d4:4a:de:ae:5f:e8:7a:da:6d:79:ad:14:88:65:50:
55:4c:d3:ee:03:53:63:d9:f7:33:2a:c0:b7:24:d5:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9C:FE:75:2E:74:9D:A1:3A:13:24:DC:38:D3:78:A3:C8:5E:BF:50
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:3d:5e:69:47:39:02:fa:65:c2:0f:79:ba:bd:76:82:62:
d5:4f:83:84:c3:7f:3c:15:00:e4:d8:4b:55:79:5d:3e:70:13:
f7:25:7a:a0:9f:3c:18:49:24:b0:5d:ac:13:a7:f0:69:1a:79:
f5:3c:75:e9:e4:79:cc:aa:c6:e6:ff:60:93:96:08:42:15:97:
19:44:bf:8d:57:77:a2:e6:9b:cc:1f:6d:be:38:1d:a5:d4:68:
1d:f1:e3:b6:51:08:c7:6b:ce:ca:e9:10:e9:9b:12:34:79:64:
48:b5:9a:e8:37:b7:b2:ff:1b:47:64:3e:d8:56:8a:44:47:28:
ed:83:70:c6:9e:ad:66:4b:53:a1:ba:07:9f:6f:80:ed:17:25:
34:d6:34:a2:08:11:0c:f4:9a:6c:bb:e4:53:b6:fe:78:f8:25:
3b:b7:16:70:cb:7a:77:30:92:8f:7b:f2:27:61:68:95:c0:92:
13:a8:73:60:5f:76:7c:3d:37:c2:42:49:58:a6:f5:ec:48:97:
b5:f9:1c:06:00:09:cc:b1:41:84:c7:77:fc:5c:f8:56:f8:c8:
ef:12:f2:ba:6d:c1:8a:42:45:98:30:9f:63:98:57:76:c7:9f:
21:bb:fb:9c:c2:d8:63:19:8f:bc:e2:cd:50:53:24:2f:d9:fa:
90:1c:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:05 2025 by rpki-client