Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: 9CPXgzMjoTvAfbjSvIYsawM7U/djJbRukN/G9FL6OIc=
Subject key identifier: 3F:E9:FE:50:FA:86:DB:D9:22:0D:3D:3D:79:A4:02:17:7E:9A:A9:CC
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 01988B7D0C63DD1A2D6AC75FA62640DA1BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0721
Signing time: Fri 08 Aug 2025 21:01:24 +0000
Manifest this update: Fri 08 Aug 2025 21:01:24 +0000
Manifest next update: Sat 09 Aug 2025 21:01:24 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: m+sKCUJGgG0vJcFaDPse/CevGI1zwkKuCrGl9JGWYeY=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:0c:63:dd:1a:2d:6a:c7:5f:a6:26:40:da:1b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Aug 8 21:01:24 2025 GMT
Not After : Aug 9 21:01:24 2025 GMT
Subject: CN=3fe9fe50fa86dbd9220d3d3d79a402177e9aa9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:15:38:d5:87:f5:63:07:06:ca:a0:ac:9e:
bf:9c:2f:a8:c8:27:c0:8d:69:b2:67:c8:14:e5:0c:
a5:fa:8a:c6:4a:cb:e6:d7:ac:38:3f:8f:36:eb:2d:
80:3c:74:86:18:ad:44:2b:2e:d6:f6:7c:98:5a:23:
42:0a:f1:ed:1c:aa:71:e9:0b:94:13:4c:72:02:1d:
f3:4a:cc:54:f6:dc:51:c9:37:81:f3:16:60:e0:02:
0b:5e:db:e0:62:ab:22:52:11:33:4c:32:89:8e:04:
ee:80:4f:ee:c7:10:8f:fd:5f:d4:d7:c3:3c:a6:7a:
77:c1:b2:1a:3e:79:73:ad:88:46:99:53:87:1c:32:
ff:01:9d:61:ad:15:48:17:83:74:7a:27:7d:03:f1:
5a:f0:5a:57:d4:55:eb:57:af:db:cc:72:de:03:af:
0f:bf:ee:e8:45:ab:7c:08:2e:13:45:c8:cf:38:9b:
ef:ea:3d:ba:68:6a:f4:22:5d:c8:24:08:87:df:83:
4c:7b:30:55:27:ff:1e:35:53:be:d3:4d:ae:9c:61:
3f:37:84:ae:50:d8:ed:72:58:2b:8c:48:26:3a:1d:
ea:39:2c:05:fd:32:03:de:79:67:a7:c6:7d:7f:ed:
67:38:cb:68:3d:8e:26:e8:43:c3:77:54:8f:0a:83:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E9:FE:50:FA:86:DB:D9:22:0D:3D:3D:79:A4:02:17:7E:9A:A9:CC
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e1:ed:af:51:8b:8d:5d:b6:a3:3e:62:05:14:b6:c8:c4:cc:
c8:cd:c4:98:83:ec:be:4d:7e:ca:a4:92:94:7e:09:d1:c7:ec:
69:88:49:7e:04:27:1b:da:f4:11:60:b5:27:85:d2:98:58:66:
2e:e7:86:5a:cd:dd:d5:d5:c6:58:14:99:7a:48:72:c6:1d:16:
e0:5a:0b:a2:34:81:e4:46:14:b0:58:b2:23:6a:33:5b:95:6a:
cc:58:21:1e:c9:a2:56:89:33:f8:0e:c4:fb:f7:c1:06:72:2d:
00:e0:13:80:80:e8:0c:a7:07:15:23:63:c8:f8:e9:5c:13:10:
bb:df:d3:77:e7:7f:a1:b0:fd:4b:2d:63:15:ea:51:7c:b2:68:
04:0a:fd:10:bb:d9:8f:9d:e7:05:8e:64:f4:39:c2:13:09:73:
80:dc:ff:3a:b4:ee:8d:2c:5d:c2:dc:55:bb:71:bb:36:fd:fb:
08:d9:83:52:89:53:9a:39:bf:69:84:ce:30:73:d5:0d:c9:5f:
f2:77:77:3a:85:1b:9b:9c:04:68:a2:a4:e0:a6:a8:03:62:0d:
81:3d:5c:a2:ee:d7:28:cc:32:37:49:e3:46:96:6a:c7:80:82:
34:77:3f:aa:78:75:90:df:d9:f3:31:cb:f0:29:76:6f:a9:4c:
e4:c2:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:49 2025 by rpki-client