Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: 8yXNCFcYUScVZO8LSg44rf9C4OEVgbyPNn5hu3X/Ihw=
Subject key identifier: F2:70:74:35:D8:96:AC:FF:7A:52:07:0A:D4:FF:03:BD:BE:AA:40:9C
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 01988355FD2CCD0915C71477B6A08F5D275A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 15B0
Signing time: Thu 07 Aug 2025 07:01:47 +0000
Manifest this update: Thu 07 Aug 2025 07:01:47 +0000
Manifest next update: Fri 08 Aug 2025 07:01:47 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: OOOCti8GvRbRBqptuI8bnAJTHozGl6Viy2Br1wR3N/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:fd:2c:cd:09:15:c7:14:77:b6:a0:8f:5d:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Aug 7 07:01:47 2025 GMT
Not After : Aug 8 07:01:47 2025 GMT
Subject: CN=f2707435d896acff7a52070ad4ff03bdbeaa409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:9d:b8:85:05:e3:c2:a2:30:7e:ca:58:3c:
d9:a5:d2:20:20:0d:43:0f:ba:f7:90:11:4e:83:93:
3f:33:66:06:b2:26:ff:3d:0c:ad:fe:a5:7c:34:31:
9c:ad:ac:0d:df:8b:cd:e5:18:bf:5a:bf:ef:a8:82:
eb:e0:0d:7e:b7:81:07:59:e6:38:01:68:25:34:c0:
a0:5a:fa:ef:29:76:cf:24:f2:ef:8d:b7:3d:f4:aa:
21:91:f6:3d:95:c2:4d:8c:e6:b0:d6:70:f2:43:87:
93:87:93:db:03:ec:5c:40:d3:dd:d1:a2:65:2f:16:
7b:b0:41:af:3f:b0:39:6c:ec:39:ca:98:18:61:8a:
01:b8:7b:f8:ba:94:e2:92:eb:16:41:98:79:af:51:
2e:66:13:c9:1c:e0:a6:11:71:3d:09:3e:81:50:44:
b6:68:3f:53:86:0b:33:19:f9:27:94:07:26:91:85:
b0:ae:18:03:8e:7d:a0:df:3d:68:34:fe:ab:e5:ce:
62:d8:70:e0:94:3f:96:2d:3a:03:98:09:7c:97:17:
cf:bd:07:d0:cd:0f:00:79:82:b1:8a:f8:d7:bd:57:
89:51:fc:1b:f5:30:8f:41:3b:73:8e:07:61:7b:04:
1f:20:83:ea:ff:bc:87:91:20:10:df:12:5c:f9:02:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:74:35:D8:96:AC:FF:7A:52:07:0A:D4:FF:03:BD:BE:AA:40:9C
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b9:64:61:1d:15:72:79:2c:53:6f:23:ac:b3:eb:89:7a:5e:
74:fc:e3:a2:ff:61:9b:c4:6a:dc:52:64:69:f4:32:14:01:ea:
93:5d:c4:0d:88:f6:51:7c:a6:52:f4:b5:a6:3c:c0:bf:90:16:
5d:60:30:25:3e:2f:9c:44:8c:05:36:d3:93:5b:0c:03:c2:a9:
54:54:33:35:62:1d:98:49:31:73:aa:15:7a:13:43:c9:2a:0f:
45:ec:d4:69:09:21:2e:08:b0:97:c2:ed:c4:75:04:cc:d1:fb:
37:f9:48:f2:63:36:9d:f8:f3:89:b4:cc:94:ba:e7:62:e7:6c:
16:1c:4c:be:92:19:5d:21:12:56:6a:d5:10:b6:1f:5c:92:1a:
a6:95:1f:c7:66:e7:ec:08:cb:68:31:71:52:d2:8a:73:1a:76:
f1:fa:2d:bf:0d:ab:d6:a2:99:cb:14:15:5d:38:f1:fe:6a:d7:
35:bb:cb:f7:1e:a6:c3:30:f2:47:26:4d:ad:60:f2:6b:2c:3d:
c3:67:ae:e6:3e:1d:08:d4:3e:2e:72:02:dd:68:2d:99:d0:16:
51:10:dd:c6:de:d6:8b:7b:b5:1c:5c:ac:6e:71:dd:bf:20:70:
81:98:ed:b2:01:26:aa:c5:8d:9a:ba:1b:19:13:16:9f:24:93:
4d:62:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:40:30 2025 by rpki-client