Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: iYLNDUcP/Da/ymsck1rdugbqSLxnGKCmgskIRSAI3Qs=
Subject key identifier: 9C:53:3E:7B:9C:3C:C1:E4:3F:9C:2A:22:65:B2:B6:26:88:8E:F1:AE
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 01987B9C00AD19234B5F5B25168DB9CD5D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 15AE
Signing time: Tue 05 Aug 2025 19:01:17 +0000
Manifest this update: Tue 05 Aug 2025 19:01:17 +0000
Manifest next update: Wed 06 Aug 2025 19:01:17 +0000
Files and hashes: 1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: XY6vMsMBU4G7H+0w3hvx+XRBSOTgJvUaiQlEnoU4GZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:00:ad:19:23:4b:5f:5b:25:16:8d:b9:cd:5d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Aug 5 19:01:17 2025 GMT
Not After : Aug 6 19:01:17 2025 GMT
Subject: CN=9c533e7b9c3cc1e43f9c2a2265b2b626888ef1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:7a:50:66:b0:94:96:f7:39:34:9f:58:32:
f7:50:d3:a6:74:ff:19:74:22:b1:f2:98:23:fd:77:
85:15:fa:68:ff:59:01:1e:dc:00:73:07:bf:a9:13:
c9:20:00:ed:4e:1e:a2:77:b7:a3:03:f9:93:72:9c:
b3:6d:2b:64:66:b9:7a:4d:69:8b:93:6a:ec:19:2c:
52:ef:1e:6b:a1:e1:05:cf:9e:25:05:51:61:9b:68:
09:f4:11:ae:06:28:ce:e8:f3:10:0f:67:20:0f:98:
7b:c1:df:c9:a5:2e:36:2e:2e:eb:97:3d:b7:33:f7:
08:9b:1f:17:8a:97:50:8f:ca:99:22:31:1d:16:b1:
e0:fb:73:e7:a4:e0:e5:47:5f:a9:48:d5:60:78:47:
04:4d:32:ea:27:18:8b:34:5a:c8:e4:1d:2c:31:2b:
da:f8:03:58:3c:10:5e:cd:03:64:ba:3a:2e:5f:88:
c9:c0:7d:41:1b:72:93:f7:dd:33:fb:7b:4e:4a:6d:
0d:69:d3:e2:20:ee:1d:2d:b8:07:93:2d:40:a1:f1:
f9:aa:93:a0:39:99:59:6a:54:9d:a5:b9:29:3b:25:
f8:28:fe:f4:e1:2b:20:a3:5c:a2:a1:62:0e:b7:73:
d9:47:2f:45:84:2a:c5:02:38:59:66:58:ca:f1:8a:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:3E:7B:9C:3C:C1:E4:3F:9C:2A:22:65:B2:B6:26:88:8E:F1:AE
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:00:20:a0:aa:1a:bb:0b:0d:3c:06:4c:49:1c:f5:be:71:
fb:23:b1:99:f6:8f:c1:45:36:85:1f:10:5d:bb:7e:da:9b:99:
cb:73:92:2f:69:d7:68:ee:dd:99:19:21:fd:e9:8a:3d:74:45:
6b:66:cf:8d:45:c4:2f:fa:49:f0:89:b3:ae:3f:60:89:ce:ba:
b2:fe:d4:3c:6a:9e:3d:b1:8a:71:42:3b:13:54:bd:50:32:08:
52:f9:a2:54:ff:22:6a:34:96:af:8c:63:3d:77:34:b4:54:d1:
72:d7:ae:ad:67:54:5f:c4:bc:93:5c:22:fd:83:be:91:23:2f:
c8:f9:1e:5c:28:34:83:1f:73:17:75:37:f8:fd:40:ea:f3:06:
41:59:31:75:95:0a:12:81:1d:88:7b:70:51:5e:bc:9a:d8:37:
8d:8f:79:5e:df:60:45:18:8e:04:33:fa:aa:e8:9d:57:69:c5:
da:3f:3e:92:84:3c:04:01:39:e3:97:e3:b8:e1:83:2f:c8:fc:
94:d4:82:66:6c:33:9f:b3:63:42:af:71:b6:1e:f2:7a:49:d3:
03:af:ce:a0:f7:7b:40:cf:fb:da:5f:05:8b:82:e3:68:14:51:
85:4e:3b:da:70:f2:ee:1a:25:43:31:ea:96:63:7e:12:3f:85:
e1:92:c9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:12:27 2025 by rpki-client