Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: MCYyKpwbqxfIxeqaGWzR/8P4P6JTyGhZoeUMrTxsYBQ=
Subject key identifier: 1B:01:AE:FF:D6:80:E2:20:FC:7C:08:1A:1F:75:D9:2B:F6:74:AB:81
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019895C8DE72BA73C2D19B99BE4340E9378D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 018B
Signing time: Sun 10 Aug 2025 21:00:25 +0000
Manifest this update: Sun 10 Aug 2025 21:00:25 +0000
Manifest next update: Mon 11 Aug 2025 21:00:25 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: 25mAbr0zdT8dXp+IioIv3OlDNUufriO+d7vfccNVSgQ=)
2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c8:de:72:ba:73:c2:d1:9b:99:be:43:40:e9:37:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Aug 10 21:00:25 2025 GMT
Not After : Aug 11 21:00:25 2025 GMT
Subject: CN=1b01aeffd680e220fc7c081a1f75d92bf674ab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:53:95:f7:3c:85:30:01:ac:90:3f:69:75:
5c:f2:62:b2:f4:ce:b0:00:5b:0f:ad:2d:a9:ab:82:
c5:07:d2:d3:17:2b:29:c5:84:13:5e:78:e4:7a:ce:
98:1f:a7:60:53:8d:90:3e:46:34:aa:6b:0f:7f:f1:
80:d9:c3:e5:c6:a8:3d:49:ef:2e:54:bb:a0:6f:07:
8f:93:c0:80:24:f3:21:2b:5f:89:da:2d:0e:9f:5b:
63:68:56:53:3a:34:76:d4:0d:41:ea:fe:21:b1:39:
6a:e0:e2:06:e3:63:03:4f:0b:1d:31:f7:aa:3d:00:
97:7f:a8:d9:37:7c:94:1b:7e:60:9e:49:98:25:3b:
91:9d:ed:f6:1a:93:04:ba:c9:10:ef:d5:70:ba:f9:
73:da:c4:04:86:4c:a4:27:5c:a1:f5:54:9a:1c:64:
c4:bd:47:6a:5b:20:2d:26:44:72:60:54:50:c9:ac:
4a:b0:12:5c:65:4e:59:f2:5b:67:63:01:74:05:79:
db:72:32:01:d1:52:61:2e:56:b4:e2:16:87:5f:e5:
f1:07:17:00:a7:3d:d4:21:4f:ff:bc:68:b7:03:93:
e6:0c:eb:59:6a:1e:14:38:be:5d:df:93:1b:82:91:
42:c0:0a:7a:09:b4:ff:1d:2c:1d:27:75:fa:33:a7:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:AE:FF:D6:80:E2:20:FC:7C:08:1A:1F:75:D9:2B:F6:74:AB:81
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e6:40:07:6a:32:3f:a1:79:b5:d5:50:08:eb:87:9f:9c:d3:
fc:c3:cf:16:23:8a:3d:22:06:0d:99:be:ab:78:72:a1:da:05:
0e:80:97:dc:bf:71:ed:c3:65:59:f5:56:a7:cb:55:05:cf:f6:
0b:c8:7b:71:ca:c1:7a:71:18:0b:7b:a2:b9:38:d7:df:05:04:
56:70:08:80:d4:f7:6b:c2:aa:9a:71:45:38:6e:d2:db:2d:43:
aa:20:54:e0:6a:97:a1:84:18:71:0e:7e:08:bc:6c:d3:bf:eb:
f4:2c:88:e3:f8:c2:d4:78:9c:07:45:20:fc:98:aa:58:14:92:
43:41:1b:86:6a:2e:d6:cc:4d:8b:2a:e1:b4:c2:fe:0b:70:e7:
cc:e8:26:3d:ab:c8:04:79:fe:f6:3f:e1:7a:0b:74:58:4c:5a:
3f:4f:af:42:f3:00:f6:e6:91:e8:f9:61:5b:46:af:62:75:66:
ed:0f:4e:3e:b0:fe:3c:95:e8:8a:eb:7c:78:1f:1d:61:e3:bf:
2e:63:95:64:6e:a8:1d:f7:30:6a:99:00:d4:43:7f:b0:a8:63:
c4:ac:4c:c8:9c:3b:c9:ca:59:b0:64:9c:5f:6b:22:f2:d2:fb:
aa:01:37:45:e6:03:13:2c:ee:5c:9b:96:dc:70:1b:f8:df:ac:
86:e9:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:57 2025 by rpki-client