Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: b9QeJuqiLasF/rFQNJduFiZ2nXIY3/a/ttw2dBiN9Ic=
Subject key identifier: 20:6F:F0:51:6F:09:D9:9A:FE:04:0F:76:BB:5C:A3:F4:67:EE:6D:B0
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 0198D4A7B26E4AE77E1EF7E9696540CA5D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 05F4
Signing time: Sat 23 Aug 2025 02:00:16 +0000
Manifest this update: Sat 23 Aug 2025 02:00:16 +0000
Manifest next update: Sun 24 Aug 2025 02:00:16 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: B7qNXmssarP7oBWSlwPEZitGMzsNs/iiKwdzuL7u8LY=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b2:6e:4a:e7:7e:1e:f7:e9:69:65:40:ca:5d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Aug 23 02:00:16 2025 GMT
Not After : Aug 24 02:00:16 2025 GMT
Subject: CN=206ff0516f09d99afe040f76bb5ca3f467ee6db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:cb:85:82:68:91:5c:61:69:3c:fd:9b:de:
84:67:ce:6b:ad:a4:30:b4:5a:f0:09:91:9a:bc:45:
45:bc:3c:97:da:8f:ad:fd:d5:50:dd:9f:9d:a0:e6:
01:5a:16:95:83:0b:7d:c4:a9:e0:6b:2b:9b:1c:e2:
24:72:8d:87:d7:80:72:c2:93:12:bc:19:6d:e5:db:
3c:8b:e9:67:2d:60:b1:4f:1a:3d:8f:0a:62:f2:b2:
79:22:6d:0b:03:ff:b3:4e:14:7a:eb:eb:39:c4:ea:
39:78:fd:ec:a0:51:ba:20:19:52:ae:53:cb:93:f2:
90:6f:1d:05:d8:c8:8c:fa:4c:bf:3f:d2:b7:0e:b1:
35:38:3f:aa:5c:15:ab:96:16:6c:93:c3:f7:4d:10:
cf:47:ef:60:d1:85:c6:7c:1d:03:b0:dc:90:7c:36:
af:1e:9f:70:0c:c5:58:e4:6a:7b:51:9e:f4:6e:a6:
76:5c:09:ca:28:bb:ac:ae:6e:bf:fe:3c:e1:4a:d1:
60:c8:14:94:67:31:63:98:13:cc:cf:f3:c5:43:99:
99:31:e0:85:11:2e:dd:85:aa:56:7f:f7:bb:d1:04:
f9:ec:fc:8f:ef:46:dc:56:12:8d:35:f9:10:48:15:
ba:72:b4:c9:c0:25:e4:a2:64:34:bb:9e:1e:09:d3:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:F0:51:6F:09:D9:9A:FE:04:0F:76:BB:5C:A3:F4:67:EE:6D:B0
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8f:68:28:ad:43:df:c6:0f:4e:7c:8c:0f:e9:32:37:11:8f:
7d:cf:1a:b4:a5:d5:34:10:a8:22:a7:c2:07:0e:1c:ee:e3:8a:
5a:a5:fe:55:f0:bb:bd:ae:7b:42:ff:a1:d5:2a:30:44:b6:0e:
fd:58:7a:dd:c0:13:4f:26:b9:5b:5b:9f:6e:49:18:8f:b3:bb:
36:ec:9b:ad:1d:d7:02:82:ba:c3:97:63:94:00:6a:24:00:b5:
16:2c:d3:70:35:bc:ad:ed:e2:8e:2f:7b:72:e7:54:69:b2:2f:
bb:0f:f7:aa:4d:ab:e3:55:7d:9b:9d:a0:b0:b8:16:ab:ed:11:
7b:af:b1:f9:1a:1f:93:6c:dd:f4:41:29:4a:e1:29:4b:05:16:
77:89:88:d1:ef:26:e7:81:dd:5b:b4:e6:13:b4:69:ac:aa:0b:
17:c6:5b:9b:62:49:fa:f5:73:20:b8:b1:96:d9:9d:60:7e:85:
04:84:a8:a9:e1:d9:fc:3f:e1:71:89:ca:29:4d:73:d0:69:9c:
c8:aa:7f:52:b8:e4:43:37:a2:7f:2a:77:43:cb:ce:83:73:8f:
26:72:f8:d1:4e:9a:a1:f9:f8:66:b5:39:0a:12:22:a7:1d:89:
54:cc:e5:dd:a7:c8:56:f5:12:0b:2c:0d:2f:e3:28:98:06:ee:
ff:6a:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:05:05 2025 by rpki-client