Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: n8rbYAQ6UpsIahKpG5v7e5/ov4fM5AZbgkpL/u7qy6w=
Subject key identifier: FB:C0:02:0D:7C:7F:DA:AD:30:98:DF:FA:1A:97:47:18:B6:CF:B3:CC
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019874F5297202C8E6C4E69D51891C1AEF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 15AB
Signing time: Mon 04 Aug 2025 12:01:20 +0000
Manifest this update: Mon 04 Aug 2025 12:01:20 +0000
Manifest next update: Tue 05 Aug 2025 12:01:20 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: Y4orL2FDw9kLy417pIhmqOTtkdt7JD2d3XbfZ2j8+04=)
2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:29:72:02:c8:e6:c4:e6:9d:51:89:1c:1a:ef:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Aug 4 12:01:20 2025 GMT
Not After : Aug 5 12:01:20 2025 GMT
Subject: CN=fbc0020d7c7fdaad3098dffa1a974718b6cfb3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:d5:86:58:af:ac:2a:94:d5:a7:79:e0:90:
5d:8b:5d:f6:eb:ca:81:48:76:00:ec:38:03:39:a2:
d0:ae:8c:57:ff:28:23:3f:90:75:40:51:df:04:42:
c5:9e:bb:a5:49:ee:9e:69:d2:4b:07:b3:84:78:04:
29:c0:1a:f0:37:fb:59:c8:93:6a:e4:2a:78:7d:00:
f7:ac:b7:41:92:a6:a0:c6:1e:2b:8e:bb:3c:56:7c:
81:1a:6a:0f:ce:32:0f:da:d3:95:c6:5f:9e:6e:40:
b1:89:58:22:9e:55:c7:7c:bf:f8:57:ab:37:01:1d:
99:b7:3b:f5:cb:10:3e:ad:b7:f7:8f:b7:83:df:bf:
1f:f5:a4:0b:08:82:bd:bc:7f:8d:5b:ca:6e:11:65:
16:dd:c9:82:a9:e5:15:c1:17:d2:86:e5:0d:44:69:
dd:28:67:d2:da:09:85:8e:59:85:81:b0:08:9b:10:
5f:4f:bc:d9:fb:63:88:9b:b8:1e:d5:96:08:c3:23:
10:17:52:4d:54:15:3c:47:90:a2:5d:2e:bd:24:43:
eb:d6:cb:60:c6:b3:1a:3b:f9:bb:ec:85:9c:56:8a:
72:5e:91:a6:3d:67:27:fb:87:56:a3:e0:99:1c:d4:
c4:57:03:db:69:56:7f:c3:4e:5c:ed:b7:99:48:f8:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C0:02:0D:7C:7F:DA:AD:30:98:DF:FA:1A:97:47:18:B6:CF:B3:CC
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:30:8c:31:54:5e:93:96:7d:76:3c:2a:ab:25:c9:86:e1:a7:
a7:ac:39:d3:35:30:a0:13:00:83:fd:c6:af:6b:49:32:d6:d7:
b0:f7:52:c2:e7:9f:de:1a:4e:c4:43:d8:35:2a:e0:93:51:46:
e9:ba:7b:c8:0a:07:9c:97:c9:0b:b0:0c:f9:c9:15:46:1e:b5:
8c:4b:f1:df:db:a4:a8:b4:1c:14:83:5f:27:75:4a:dd:6f:b9:
c3:8e:d1:3e:46:3b:dc:48:2a:78:b8:6c:3a:da:ec:df:cd:14:
30:b0:25:ed:24:84:b4:35:33:bf:02:bb:c5:5d:38:91:fd:96:
1a:f9:36:42:d3:a9:ad:a6:0b:c1:a8:02:4c:46:05:b7:b3:66:
b2:65:6f:36:40:20:71:92:1e:a8:b0:31:3d:d7:a5:cc:27:aa:
f5:4a:47:45:f4:09:2f:35:9f:86:46:71:87:ae:a8:3b:43:4a:
8f:98:df:02:36:38:ce:e6:58:23:81:26:07:7f:ba:a0:57:fe:
95:9e:7b:6d:21:bc:95:81:31:6c:38:c5:91:6a:ba:52:90:cf:
ed:cd:7f:ba:1a:1c:54:f4:11:7c:56:78:2e:ae:a6:68:52:03:
81:49:ea:7c:85:d6:50:b4:a0:80:33:9c:af:d9:17:85:83:47:
c5:de:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:22 2025 by rpki-client