Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: Pt2rG9o7eTDWT+lGTIZLj9LqWm5UJdlJ3wlYV04FqTw=
Subject key identifier: 3C:69:BD:B1:C1:05:F5:F5:25:FB:73:59:91:D6:3F:C4:8A:1E:AA:FC
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 0198733D6EBA1367FABA09C99AE99AA15E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 04:01:02 +0000
Manifest this update: Mon 04 Aug 2025 04:01:02 +0000
Manifest next update: Tue 05 Aug 2025 04:01:02 +0000
Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: ElG46/tPhoxbhQbEElugz1C/HIm7AuXxnK39h/o43Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:6e:ba:13:67:fa:ba:09:c9:9a:e9:9a:a1:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Aug 4 04:01:02 2025 GMT
Not After : Aug 5 04:01:02 2025 GMT
Subject: CN=3c69bdb1c105f5f525fb735991d63fc48a1eaafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:c4:79:62:ae:38:46:89:5d:68:f0:f6:39:
a6:fd:f0:96:d9:4f:f2:cb:f9:aa:5e:7d:34:1a:80:
cf:3b:70:ae:4a:e5:74:e0:c6:a9:15:0e:6f:ca:61:
12:61:a7:f3:5f:0e:9a:f8:f3:cd:29:7b:9a:00:26:
68:51:6e:73:3b:03:2b:2d:05:44:93:8d:03:7b:62:
1e:2a:90:b5:ca:ac:18:97:be:52:6d:39:1f:78:bc:
1e:8a:cc:d7:fa:3d:b8:00:2a:41:5f:d6:0f:4d:89:
2a:75:b5:aa:35:aa:b7:f6:2e:1f:d3:4d:cc:dc:a3:
b7:9d:ab:c0:f1:25:9b:ed:28:8e:f5:08:1c:ca:42:
c6:9f:11:0c:f2:00:9c:ca:47:d0:bf:b2:31:10:05:
0b:79:06:80:90:4b:a5:83:57:3e:b3:ec:20:c9:93:
6a:56:c4:9f:cb:3e:56:1b:18:d2:2a:2a:09:8f:71:
bf:09:64:1d:c3:8f:d3:eb:91:39:82:71:3d:ad:6a:
f0:79:ac:38:6f:e5:76:ae:02:4c:cc:6c:1e:cb:f4:
63:84:39:6e:97:bb:67:42:64:a1:f9:e3:f5:b9:52:
64:bd:50:21:05:ed:38:45:ab:64:6c:a8:57:07:a4:
1f:10:2b:88:3d:1d:ed:1d:5d:b7:7f:b7:5c:cc:7d:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:69:BD:B1:C1:05:F5:F5:25:FB:73:59:91:D6:3F:C4:8A:1E:AA:FC
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:aa:67:55:44:7d:d4:4d:58:9c:27:89:4f:e9:e8:7f:6d:75:
b8:d2:a7:63:70:89:fe:14:ce:b9:77:be:a2:37:2e:73:6e:3f:
29:ce:5e:bc:7d:0b:81:4f:85:fd:72:4f:a1:33:1c:09:38:ec:
b5:1e:e2:87:a8:38:af:b4:59:8b:1d:e5:a5:8a:68:fd:8a:78:
b2:44:b0:69:d6:2a:37:ef:0e:b3:ff:7b:c7:6c:bc:c0:0c:93:
aa:72:27:d8:cc:c7:1e:58:23:21:99:5b:7f:4d:b8:ef:3b:7f:
81:e5:8d:ca:58:33:b1:6d:2c:37:95:6d:24:d3:bc:58:cb:20:
1b:52:52:6a:7e:ce:11:78:b4:4e:53:8f:e6:a5:b5:81:b1:c5:
46:ce:ad:79:28:01:53:27:52:dd:69:e7:60:89:b3:61:5f:42:
ba:d0:07:32:84:f2:03:70:a8:24:27:1f:f8:d9:53:15:64:3c:
99:a5:cf:94:94:d7:4d:3b:a3:7a:f3:30:e4:27:bd:13:d1:bc:
e3:ad:a6:ac:a0:2b:52:86:38:fa:eb:be:26:25:80:10:5b:20:
d5:0e:32:b1:d1:e9:a3:d3:95:c7:e9:92:cb:be:40:dc:e0:85:
d6:42:91:df:88:a0:10:eb:20:18:4b:0c:0f:dd:b5:27:63:37:
c1:8f:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:09 2025 by rpki-client