Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: 3XfqcSNd6i1Ah6EgiizglOwFPd7NFE2G20LrWIbGsxw=
Subject key identifier: AF:9C:E2:ED:A7:08:AC:E1:F5:B6:65:2A:44:69:E0:D5:63:1E:80:EC
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 01988A3310FDAA37B4849D95795438D7827C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 0F84
Signing time: Fri 08 Aug 2025 15:00:59 +0000
Manifest this update: Fri 08 Aug 2025 15:00:59 +0000
Manifest next update: Sat 09 Aug 2025 15:00:59 +0000
Files and hashes: 1: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: z7lI7gHxdnp4MtUUewNLeHc3vVrkIaghHWI5MaYRenY=)
2: g8aVgQMBCBvrswyPJiarAr7VpUM.roa (hash: 5HrRjfLYW0OBZJTQk2MmBVB6mxhIUJtfwo5zMV6ZrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:10:fd:aa:37:b4:84:9d:95:79:54:38:d7:82:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Aug 8 15:00:59 2025 GMT
Not After : Aug 9 15:00:59 2025 GMT
Subject: CN=af9ce2eda708ace1f5b6652a4469e0d5631e80ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:12:fb:2b:f8:2a:4d:f9:84:00:f3:6b:43:a1:
21:3a:44:c9:a3:d7:b6:d5:fc:13:e6:49:f1:62:60:
98:db:06:7b:92:eb:04:3b:3b:16:66:7b:b5:be:c2:
45:2e:f2:8c:b8:3b:ff:90:6a:bb:63:ee:a4:ff:51:
ed:b8:40:2f:1a:af:6f:6c:2b:d2:56:06:0c:93:7c:
6d:fe:fe:a0:84:26:4c:48:64:31:24:ef:f1:c9:aa:
5b:30:59:02:1e:2c:dd:3d:d0:b1:d6:6b:ee:f5:3d:
61:71:8e:32:fc:75:a7:31:4d:4e:dd:22:17:4b:62:
71:39:17:ac:e4:be:60:5b:9c:1d:69:21:1e:88:ba:
6b:50:05:84:cb:ec:e8:b2:a5:d5:03:4f:f6:18:95:
9b:91:6a:3f:73:c1:b4:fe:78:0a:6c:82:f8:65:30:
7c:c1:80:20:51:da:97:a4:ec:2a:01:f0:53:cc:52:
56:a0:fc:a7:76:24:ee:f4:e3:be:74:a1:be:2f:ed:
7f:b7:c3:41:55:08:a1:a7:ec:8d:86:a0:88:28:e3:
1a:fa:4f:d4:ab:a2:a3:43:32:dd:27:18:2b:a3:95:
c9:62:01:b6:3c:28:61:d9:5e:e6:bc:ce:c9:ff:b6:
03:20:ee:64:16:5f:fc:20:0e:cd:ca:7c:b1:0d:c9:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9C:E2:ED:A7:08:AC:E1:F5:B6:65:2A:44:69:E0:D5:63:1E:80:EC
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2f:f3:f1:2c:a7:4b:a2:03:7f:41:86:f6:cf:1f:37:7e:12:
d0:1c:47:4c:2b:17:d7:e8:ec:9d:ac:c2:51:b2:76:46:3a:e7:
cc:66:30:aa:53:32:9d:3c:9f:90:82:0c:69:cf:99:da:03:12:
76:a7:99:a6:6f:31:20:f4:4b:41:a1:e0:65:88:9c:64:ae:1e:
81:b9:03:07:1c:0e:a2:9a:a9:95:ef:0a:79:2c:61:1e:26:1f:
43:ee:88:8a:d1:82:2c:3c:ca:41:1d:62:8e:18:ef:c9:d8:4d:
5f:69:d2:70:ba:29:fe:6f:9d:0a:11:53:6c:c9:64:8f:5d:89:
fe:a6:25:04:02:e9:7f:83:fa:54:98:60:2a:ad:be:19:66:0e:
60:45:01:61:f2:40:c2:2d:7f:f8:9b:a9:9c:ac:10:57:8d:af:
5f:f0:d9:54:3d:b3:41:c2:f5:95:39:45:73:6c:0b:bb:09:82:
2c:02:38:32:d0:07:4b:be:88:d0:89:90:56:db:9b:89:e3:72:
62:11:02:76:c9:49:34:0c:2a:c6:aa:f2:e7:1f:f7:95:6c:8b:
47:b2:23:79:9c:eb:7c:cd:c7:db:12:d1:51:fb:bf:52:a8:78:
d3:42:80:37:b7:68:06:13:31:1a:34:8e:0a:44:60:32:08:9e:
5a:f7:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:36 2025 by rpki-client