Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: mVF4ao2jU3INHeFyR25h5XgF+YVzY7XdRdhuQBjRrsI=
Subject key identifier: A9:94:4C:85:74:AD:45:98:99:A0:D2:ED:5D:E0:58:37:D9:EB:07:E4
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 01987C777466EF542CFB436016CBC85D6421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 061C
Signing time: Tue 05 Aug 2025 23:00:59 +0000
Manifest this update: Tue 05 Aug 2025 23:00:59 +0000
Manifest next update: Wed 06 Aug 2025 23:00:59 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: +9+CiAjG/AVteclDeWHUe9JISsGhWDx+x7QKdjKh+Ho=)
2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:74:66:ef:54:2c:fb:43:60:16:cb:c8:5d:64:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Aug 5 23:00:59 2025 GMT
Not After : Aug 6 23:00:59 2025 GMT
Subject: CN=a9944c8574ad459899a0d2ed5de05837d9eb07e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:e1:84:63:13:a6:08:a2:78:76:11:e6:56:
fe:1d:d4:d6:c8:ed:85:e2:12:5f:cb:f2:3a:8b:89:
22:c1:1b:98:05:a1:76:53:ea:12:2a:ec:bf:fa:32:
a0:89:4d:3a:af:77:c8:95:d8:e3:13:3a:bb:8c:df:
55:fb:4e:54:ba:47:e6:32:d2:d5:f4:dc:77:5d:d3:
f1:1e:55:53:4f:e4:57:a6:26:27:bd:d7:25:03:81:
fa:08:41:a9:b1:59:55:97:44:49:c2:9a:4a:db:1d:
fb:cf:fe:72:28:60:26:02:86:21:6b:82:d3:1c:92:
38:ac:2b:6c:8c:34:a3:5e:29:3c:5b:6d:c2:3f:98:
46:3b:e6:b4:43:7f:57:db:6c:6c:e7:de:56:fd:dc:
ec:3d:c9:52:09:67:60:e5:1f:a4:92:7d:be:b4:ca:
a9:3c:1b:e4:0a:53:05:6f:8a:a2:8d:6f:4d:e5:ef:
07:74:b6:1c:36:76:dc:ed:85:0c:c5:b8:d4:13:de:
b2:a3:ca:07:cc:81:e7:01:df:c0:5b:74:0b:52:83:
d6:4f:66:e3:8c:0d:4a:41:06:3d:78:ef:05:ed:12:
57:79:0e:4a:fc:46:5b:d0:e3:37:53:75:b5:f2:3e:
74:e9:fc:1c:a1:8d:41:bc:cd:11:b5:37:d0:9a:95:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:4C:85:74:AD:45:98:99:A0:D2:ED:5D:E0:58:37:D9:EB:07:E4
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:66:15:1f:fd:a8:6f:94:12:95:c7:bf:58:79:7f:a9:22:62:
25:a7:90:e4:0c:18:f7:48:3f:e5:8c:f2:af:0a:c4:c9:d1:a4:
d7:dc:c1:f6:56:9e:76:3b:54:d3:8e:6b:61:95:fe:08:d5:d5:
a9:5b:2a:85:0a:13:40:93:e9:70:c9:95:58:30:d4:2c:4d:e2:
b3:f6:fa:3e:ff:0f:60:64:2b:a2:85:ac:1d:9c:66:28:a9:81:
b0:4d:53:79:33:0b:73:b3:6b:bb:d4:f8:1e:8b:2a:a3:fc:5e:
e5:d3:c0:f2:b5:1b:1c:65:ba:1f:61:45:6f:5c:69:a0:09:28:
28:bb:09:21:fb:a2:1c:67:8e:b8:ef:fa:08:05:65:91:cf:89:
c2:3e:a6:13:cf:3c:fb:fa:ca:de:a4:6a:73:78:0d:42:6a:21:
d8:93:55:bc:bc:01:d0:69:0f:a5:f5:16:00:65:c8:99:94:08:
4f:ea:62:3b:a8:d0:b1:a4:b8:97:64:f2:fa:18:8f:b7:d7:ff:
ff:2f:e5:9c:80:de:41:ae:74:6f:96:39:88:0c:05:2e:a3:56:
ed:82:cc:6d:10:82:78:4b:33:75:71:bd:fb:8f:05:8d:c3:45:
b7:4c:df:ef:bf:bf:39:76:bc:61:8a:e1:20:d0:c4:47:80:73:
f8:4c:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:58 2025 by rpki-client