Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File: 8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier: 0pboXQTbCuEa9VbYcWp4qeFXavG3C45KWTqK4idZUS4=
Subject key identifier: 5A:B9:F5:43:63:B3:66:E3:49:B8:5B:BC:4F:98:E5:EF:05:35:2C:43
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer: /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial: 019896A6E75ED5D88D1E4254BA5272054013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number: 0E7D
Signing time: Mon 11 Aug 2025 01:02:57 +0000
Manifest this update: Mon 11 Aug 2025 01:02:57 +0000
Manifest next update: Tue 12 Aug 2025 01:02:57 +0000
Files and hashes: 1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: AqYYrTsAQPkr/eIg+EKKxpbsqzeEQoYxUU9AZLDyD7g=)
2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:e7:5e:d5:d8:8d:1e:42:54:ba:52:72:05:40:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Validity
Not Before: Aug 11 01:02:57 2025 GMT
Not After : Aug 12 01:02:57 2025 GMT
Subject: CN=5ab9f54363b366e349b85bbc4f98e5ef05352c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:83:8c:67:f9:89:84:7e:9c:92:49:6f:03:
3b:de:39:ec:47:6b:ed:a0:33:f6:6d:bf:7e:cd:c4:
c0:e1:29:59:c2:34:bd:d1:59:9a:54:84:89:42:6c:
61:08:a2:39:06:40:9c:ad:6f:3f:5c:4a:cf:db:9f:
99:01:93:a1:4b:7d:44:65:88:e2:78:aa:1f:aa:df:
97:0f:a1:7a:67:b3:c7:ce:e5:8e:09:a5:68:55:a6:
86:0c:cc:36:4d:2b:b0:95:0e:b7:97:c4:3b:45:94:
c4:bd:69:82:61:de:07:f2:32:52:4c:92:62:d4:08:
40:70:0c:67:73:4a:93:8d:f5:b8:60:18:d9:72:0d:
d4:33:84:5e:83:7e:c1:28:00:15:e8:17:73:ba:22:
ab:d5:8b:10:b1:75:5f:69:39:52:68:95:63:78:45:
b5:af:bd:b9:60:51:09:d7:82:ea:b8:e9:cb:d1:62:
35:15:cf:ac:e6:fd:4d:69:50:75:75:73:bb:63:2b:
17:8b:bb:6e:3e:72:8c:c8:30:ab:1c:bf:34:c3:0a:
11:61:7d:94:d3:36:1c:6e:21:19:40:14:d3:cf:94:
78:26:77:fa:0e:60:b1:48:b1:25:3b:24:aa:f1:cf:
39:62:86:65:6c:89:1b:4e:1b:38:9a:a8:34:bc:7d:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B9:F5:43:63:B3:66:E3:49:B8:5B:BC:4F:98:E5:EF:05:35:2C:43
X509v3 Authority Key Identifier:
keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:99:28:13:76:d3:79:4f:d4:5b:17:90:4a:71:8b:84:ab:83:
9d:c2:1b:f1:91:e2:4a:fa:73:c6:ca:ca:36:2e:a2:bf:37:e4:
b0:b8:c3:00:0d:62:33:06:e7:b2:3e:37:4b:0f:59:dd:8c:f5:
dc:58:e8:8f:f2:a7:2e:4c:ad:26:d2:94:78:64:84:cd:c6:40:
8a:f0:00:9f:9b:ab:18:3e:08:e4:88:d5:43:95:04:6d:f7:54:
ae:41:7d:16:87:ca:af:ad:ac:62:f8:8b:d7:f0:e6:d7:e5:48:
3e:4b:0d:45:d1:11:63:20:f8:4b:14:4f:49:70:0d:c1:80:3b:
48:5a:2b:1b:0c:f3:2d:e3:aa:29:51:c4:cb:de:5a:5c:a4:5a:
b7:ea:01:4f:11:b5:83:8f:5d:17:57:3d:88:b0:4e:60:4f:b1:
9b:80:3e:c0:ee:99:0b:d6:ea:8f:83:30:f7:dd:b2:c3:44:45:
56:6a:7a:38:18:9b:86:1d:7f:30:e7:f0:48:ea:a6:a8:a0:58:
52:22:c9:e9:56:a4:c5:b1:59:8f:9f:d4:c1:0c:88:02:dd:b2:
96:14:13:1a:d3:0f:38:64:b9:65:e8:f8:39:5e:d8:be:68:bf:
e4:67:50:ca:e5:11:e8:6b:e9:b2:79:ba:48:48:51:44:2d:02:
a9:2f:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:27 2025 by rpki-client