Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: SmDQT+3FkrVJmL4h/Keo+jVW9Weo/ls2ldj5///FdBs=
Subject key identifier: 86:7D:04:71:90:02:69:D4:90:91:70:83:8F:C0:7D:B8:8B:55:E0:18
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 0198737452CCD54F3223EC63F0EF07B01FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0A96
Signing time: Mon 04 Aug 2025 05:00:59 +0000
Manifest this update: Mon 04 Aug 2025 05:00:59 +0000
Manifest next update: Tue 05 Aug 2025 05:00:59 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: JevFXGVGoAejLP+c1Elwbl2ENa1FsgmvZua0uK1hYKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:52:cc:d5:4f:32:23:ec:63:f0:ef:07:b0:1f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Aug 4 05:00:59 2025 GMT
Not After : Aug 5 05:00:59 2025 GMT
Subject: CN=867d0471900269d4909170838fc07db88b55e018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:39:a4:23:11:b9:35:60:46:ca:a4:f0:33:
18:a4:15:4f:ab:9b:53:ba:ee:e2:6c:9b:09:de:70:
e3:57:a6:d3:bd:88:5a:d0:2e:a0:17:6b:73:1f:17:
86:33:53:6b:29:22:ae:62:e8:3f:2e:b3:65:f7:46:
3b:46:c5:94:32:eb:f9:7f:a9:46:d6:c5:cc:b4:6f:
8d:b0:65:bb:06:5f:f5:4a:f5:43:95:de:7a:dd:9c:
0b:ee:d1:3b:3e:4f:7c:fe:1b:53:f4:b7:64:50:6e:
9c:a0:57:8f:3d:af:e9:12:a1:5f:76:69:08:de:03:
6c:0c:b8:b1:d8:8b:35:e0:95:07:41:9a:8c:27:47:
22:2e:78:2c:83:21:f3:af:ec:f2:60:c1:e0:b1:14:
a5:71:91:8b:bb:a1:dc:28:00:7e:b2:9a:32:d9:14:
57:58:46:a7:c3:04:33:c8:33:b5:bd:bb:a3:98:8d:
7c:db:ef:c9:a6:34:13:11:4c:07:8b:9a:5c:23:4e:
3d:ac:2f:03:b6:2c:72:da:5c:77:47:1a:14:fb:9c:
6f:81:62:b2:97:05:19:d1:d1:1c:e3:1e:c7:96:a9:
ec:57:0f:f5:cc:15:e6:b5:45:aa:25:f4:29:f0:eb:
dd:aa:ec:ee:d6:8f:71:d7:01:19:de:33:ee:5f:98:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7D:04:71:90:02:69:D4:90:91:70:83:8F:C0:7D:B8:8B:55:E0:18
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7f:f9:8f:b0:fd:24:a4:95:62:50:dc:37:c3:af:ab:bb:ce:
2e:dc:c6:a5:84:df:86:20:62:eb:21:8e:88:81:91:8c:cc:fb:
97:b1:0c:bf:56:02:4c:6e:9e:95:45:f9:8b:98:0e:3a:69:a8:
dc:bf:12:c6:2d:7e:f8:8c:7b:67:3b:5c:67:4b:8e:3d:01:65:
d4:3e:b5:9f:ab:11:92:d6:8f:e3:51:52:b5:fd:14:83:da:05:
c2:90:c1:24:eb:b9:4b:c0:e1:2b:2a:0f:a9:ab:de:a5:a6:2e:
3c:ae:f2:bc:d2:25:8f:e4:b1:38:cf:c9:a2:2f:7a:a6:66:08:
b8:f0:16:be:bf:88:65:50:48:50:45:5c:de:e7:61:75:1a:df:
55:50:00:e5:ee:49:cb:b1:b5:ea:f0:7b:93:b7:a3:f8:8e:63:
e2:83:32:97:3d:e4:4b:68:92:15:9d:58:99:f0:0f:4b:84:7e:
0c:b1:13:5e:8d:c1:2c:d7:3d:2a:56:32:62:75:0f:23:2e:b6:
47:2c:ef:ea:e4:90:3c:db:6c:69:41:6d:a1:93:c9:af:da:89:
bc:44:50:d5:a4:4f:5d:d5:d1:ef:25:a6:49:98:e0:bc:1b:87:
b5:96:f0:da:be:20:c8:8d:d7:a8:d2:ad:a6:1c:71:46:65:02:
54:77:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:59 2025 by rpki-client