Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: /oe1qdBg7fcackDiQBDOJ6yRHArrKIYZNPWYhqjPaXI=
Subject key identifier: 4F:3A:69:DB:2E:51:6E:DC:EF:67:50:39:7B:7B:EF:AD:FA:A2:74:01
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 01988E0FA5326147385E6EE2B901095FB7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 108A
Signing time: Sat 09 Aug 2025 09:00:46 +0000
Manifest this update: Sat 09 Aug 2025 09:00:46 +0000
Manifest next update: Sun 10 Aug 2025 09:00:46 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: ULXeI8ZxtITLrSOQrkraL8NmxGrRwpwpnPlMju9ahaA=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:a5:32:61:47:38:5e:6e:e2:b9:01:09:5f:b7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Aug 9 09:00:46 2025 GMT
Not After : Aug 10 09:00:46 2025 GMT
Subject: CN=4f3a69db2e516edcef6750397b7befadfaa27401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:3d:c7:6b:88:9d:c2:27:e8:5e:20:90:06:
38:03:27:85:f7:37:c2:fe:1b:a1:83:dd:a2:b8:ec:
7f:7c:4b:18:8d:13:e8:18:96:55:28:bc:34:2d:7c:
84:23:6e:3b:8c:9b:e9:81:09:28:21:5d:de:a3:e2:
b6:64:df:10:02:54:ba:5c:2b:84:b3:36:5b:76:3f:
46:e3:d4:1a:89:61:68:48:60:bf:ad:81:d3:0c:94:
d6:49:a6:21:75:23:73:db:e3:a9:f9:c7:ef:b9:4b:
95:6a:35:08:7f:c3:26:3d:3d:34:7c:46:31:57:9c:
e9:e4:e5:e1:87:da:31:6b:7e:18:6f:0f:88:93:9d:
8a:39:b7:cf:97:ba:f9:13:75:f8:73:87:56:0c:79:
6a:09:58:8c:88:16:2c:09:b2:67:35:11:11:9e:47:
e1:84:ac:24:ac:c9:5a:b0:9f:35:0e:23:ef:d9:05:
a0:e0:1b:ba:0f:4c:79:d6:a4:4d:80:96:5c:43:1b:
e3:13:c2:5b:fd:13:7c:a6:cc:25:56:b2:2c:66:34:
c6:b0:a7:35:73:9f:c8:1a:f3:d3:27:20:ad:82:5e:
49:7f:ce:e4:cc:2f:1a:62:e9:9d:56:76:a5:e5:1e:
e6:10:12:6b:e5:ed:45:32:95:f7:04:25:5d:c7:dc:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:69:DB:2E:51:6E:DC:EF:67:50:39:7B:7B:EF:AD:FA:A2:74:01
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d1:41:26:ef:a0:7c:88:04:b8:d8:31:62:a9:63:93:e1:c0:
86:50:dd:de:50:2f:94:f2:53:ef:dc:34:37:d1:77:96:67:e2:
b3:0b:6c:5c:10:2e:23:1c:c6:88:20:77:c2:b4:66:54:f2:9c:
b0:a8:52:55:b6:31:68:d7:9b:e9:54:e4:41:6f:28:04:ba:b9:
0c:e4:ae:62:44:c9:35:d1:89:0b:c2:ad:47:df:a9:da:1d:e3:
df:a5:94:21:9d:b3:14:59:88:b2:2a:60:d8:f0:4e:3e:70:9d:
c0:11:22:27:ed:0d:2e:7f:14:a7:43:fc:12:69:69:9d:da:32:
7d:f9:89:6e:88:7e:ca:9d:6a:23:a6:44:60:eb:4f:68:64:45:
2a:a1:fd:07:c8:2d:fc:f5:44:af:46:d1:94:67:14:b3:df:ab:
a6:9e:7b:98:7c:27:4d:57:90:1f:63:27:8e:fc:53:30:52:88:
65:0a:5d:aa:e5:6e:5d:4a:55:87:30:8f:06:8c:f3:89:77:1a:
29:6c:3a:9e:00:27:4d:61:08:81:b0:f2:4e:96:c1:3b:d2:1c:
43:bd:d7:c5:72:4e:a0:36:05:d1:1b:ce:2c:7c:df:65:1f:86:
64:01:1d:87:a9:01:35:21:93:d2:ff:5c:b6:4a:15:55:42:c3:
06:c0:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:17:19 2025 by rpki-client