Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: qvpuANYSMkegpxhHT2vU08hI8ZTkvBuAGSAhpU7xhzE=
Subject key identifier: 87:F7:E8:6E:23:DC:D9:EE:C2:23:B9:2B:23:56:0E:7D:DF:49:1E:01
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 0198D7060CE44F357B171C1100F8B98849E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0D2C
Signing time: Sat 23 Aug 2025 13:02:34 +0000
Manifest this update: Sat 23 Aug 2025 13:02:34 +0000
Manifest next update: Sun 24 Aug 2025 13:02:34 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: 2XMVR4VaTaFbqpi3eyXuXxo+Lkdjg7ghvanbW/TbhE8=)
2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0c:e4:4f:35:7b:17:1c:11:00:f8:b9:88:49:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Aug 23 13:02:34 2025 GMT
Not After : Aug 24 13:02:34 2025 GMT
Subject: CN=87f7e86e23dcd9eec223b92b23560e7ddf491e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:ac:a9:58:fc:34:31:91:2b:3c:b6:43:3a:
88:ba:21:d1:87:75:3d:04:f3:db:5d:e2:56:d7:0e:
fb:99:3b:8a:ad:ce:51:b7:dd:69:11:6d:c1:93:0a:
33:73:f7:97:48:d4:b4:12:15:f3:60:d9:39:41:a2:
21:63:ce:76:aa:f2:8f:9b:37:67:d8:06:37:bc:1f:
78:2a:66:64:21:91:6a:d2:ee:74:62:51:d5:98:34:
d7:18:c6:cc:9e:c5:96:83:07:3e:37:e0:9b:12:70:
71:4f:ec:44:e6:bc:5b:87:90:6a:3f:ea:ea:ef:16:
2e:0f:d3:f6:bf:85:d3:11:b2:b8:5b:89:6f:68:0a:
05:05:40:73:b4:d2:68:27:ae:4d:09:0b:ee:17:dc:
b2:fb:05:3a:bd:19:e3:89:1d:26:5f:9f:b6:26:02:
5c:11:8f:9d:e0:77:7c:7e:41:42:8c:31:3b:ed:dc:
0a:0f:6e:00:41:7e:0c:cb:67:3d:29:d6:f5:e8:ab:
a1:60:ad:25:23:f3:f8:30:30:d7:98:f4:42:0d:e8:
7d:37:9f:ac:57:5f:85:1b:a0:53:b3:57:09:1b:49:
e4:87:78:3e:ca:28:c2:cc:28:9c:1c:57:a3:a6:86:
c1:d0:f1:d2:84:41:cb:14:60:1c:4c:24:47:53:15:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F7:E8:6E:23:DC:D9:EE:C2:23:B9:2B:23:56:0E:7D:DF:49:1E:01
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d6:df:1d:aa:c7:79:4a:0f:f6:d9:a4:1c:c0:28:80:ef:ec:
80:16:da:8a:38:a1:9d:92:94:00:d4:f2:c6:b2:07:9a:ad:0c:
3a:c0:84:12:16:9a:6f:b9:e2:85:dd:d8:da:9b:39:2e:f4:67:
a2:ab:fa:06:06:8b:79:57:2a:f6:7c:c5:4f:b3:2d:b1:0d:39:
b7:d1:7c:80:aa:87:55:c0:88:b8:c3:4f:d1:09:dd:db:a6:83:
08:c3:27:1a:b7:0a:19:5b:f9:0c:e7:3d:d7:b9:ec:89:81:33:
4e:ff:43:15:f8:d3:18:c3:91:82:1d:2d:ed:de:fe:13:19:bf:
00:df:a1:e4:da:ee:f7:95:dc:e1:fc:fe:3f:ab:72:49:0f:c3:
d1:86:16:75:ab:c7:7c:74:ec:e0:f6:a8:2b:af:f3:bf:08:37:
08:60:99:51:2f:20:62:29:1f:7b:72:9d:00:a3:38:08:2d:3a:
1f:37:45:87:90:16:bf:1f:b5:71:cf:f4:8a:b0:3b:12:05:f3:
2e:85:e6:51:df:ef:ab:29:28:0f:c8:9b:bb:ca:e5:11:11:9a:
15:e2:a2:85:96:98:4e:f5:28:5d:9e:45:cd:47:5a:a5:a0:49:
ed:ff:e8:ac:18:c6:0a:24:41:66:f9:96:8d:dd:63:2c:bd:89:
0a:cb:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:53 2025 by rpki-client