Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: 3eTjApIaD2VbdRA7ovIYZUiXcCH2mmldWxWOkgaW+78=
Subject key identifier: F5:C2:B4:0C:57:D6:64:F6:74:BD:DF:1E:8B:F8:56:ED:C4:95:66:89
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 01987D8B3B32ACC5EE72502D617713C85E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:02:13 +0000
Manifest this update: Wed 06 Aug 2025 04:02:13 +0000
Manifest next update: Thu 07 Aug 2025 04:02:13 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: CkE46Mj8AW1s6B7Gy8V2Hn+xhvQKsRxKddnDosSXZJc=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:3b:32:ac:c5:ee:72:50:2d:61:77:13:c8:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Aug 6 04:02:13 2025 GMT
Not After : Aug 7 04:02:13 2025 GMT
Subject: CN=f5c2b40c57d664f674bddf1e8bf856edc4956689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:dc:31:e4:c5:bf:c5:fd:d0:8a:aa:84:7b:
05:16:d5:44:8b:ac:a9:d8:85:a2:af:bf:a2:76:46:
f5:d3:90:99:e2:c6:9e:cf:2a:46:12:dd:24:2d:ae:
71:16:6e:a3:16:79:26:b8:a3:dc:37:e6:ac:a8:e5:
64:2f:8a:fd:dc:d8:1d:24:d5:bd:82:e1:a4:e0:c7:
ff:62:1e:ba:ba:17:07:84:a7:6b:7b:df:e7:b5:56:
00:8a:e1:a8:7c:8f:23:11:a6:17:10:40:b1:9a:a5:
70:5c:27:8c:5d:7a:1a:5d:02:5a:28:f1:d9:f0:66:
7f:8f:a8:ec:ec:f3:54:b9:53:36:e7:9e:33:99:00:
19:c3:94:e1:2e:aa:e0:af:8b:a1:ff:2c:53:61:f7:
2d:0e:cb:56:0f:ea:3f:ec:cc:64:be:7f:fa:8e:e3:
78:ab:4a:71:04:6c:cc:b4:a5:31:9b:29:4d:f9:71:
e6:13:a7:d2:3f:b9:b8:f2:1b:a9:eb:59:19:bc:24:
00:c5:be:c5:29:6e:a0:c0:ed:b5:a2:b1:9b:4c:20:
33:14:3b:46:85:19:0d:d8:ee:25:23:cc:76:1c:fc:
b4:97:f1:f2:0c:bb:c7:1d:ee:94:0d:e1:67:9d:75:
45:df:f4:96:5d:75:b7:8d:e5:01:7f:d3:19:d6:c6:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:B4:0C:57:D6:64:F6:74:BD:DF:1E:8B:F8:56:ED:C4:95:66:89
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:7c:b4:9a:46:66:d4:87:a2:d2:dd:dd:69:c3:ac:01:a2:
eb:ad:8c:0a:e1:b5:ca:7a:26:44:c0:72:02:00:03:65:82:c4:
b3:97:55:6e:84:06:3e:0c:7d:d0:08:9d:79:8e:b9:ca:11:b5:
14:d8:88:d1:cf:95:ec:e0:2d:d1:04:fa:68:f2:04:c6:c1:90:
3d:ec:78:8a:57:cf:27:38:07:87:ca:00:e7:09:06:6c:7e:01:
a0:89:91:ff:3b:76:01:ba:22:49:c2:38:12:60:8c:f9:f3:69:
3f:9b:81:c8:1e:dd:59:1c:71:6e:07:04:f0:b5:d9:c1:2e:5e:
26:ff:a6:fa:9c:9f:23:5b:94:8f:11:80:35:e1:84:1a:c6:58:
27:2f:58:08:22:36:4f:fb:93:99:dd:16:98:72:1d:88:17:2d:
3d:d6:54:a4:98:5d:3f:f7:0c:31:88:5c:6a:f6:8e:0e:4d:e8:
20:27:39:58:4d:90:b1:ad:8b:06:93:2d:4a:3e:bf:c0:d9:36:
ee:a3:37:90:c0:e8:36:2c:a3:f5:72:a7:50:db:30:76:55:42:
e5:aa:97:b7:59:1b:b6:21:99:60:ac:b0:b7:ab:c2:95:3e:54:
05:1b:3d:24:54:71:3f:f5:42:61:0d:98:c6:d9:65:82:af:55:
72:95:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:36 2025 by rpki-client