Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: vYgC5bwfoEIUTeAbl0NS8giDWtrThlsuT1zCTo5065w=
Subject key identifier: 6C:80:A9:A8:65:A8:EE:2E:66:F5:66:C2:3F:D8:06:9F:32:4E:32:EE
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 01988166FE46145BEB2F6E323B4F1FAE5227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0A2B
Signing time: Wed 06 Aug 2025 22:01:07 +0000
Manifest this update: Wed 06 Aug 2025 22:01:07 +0000
Manifest next update: Thu 07 Aug 2025 22:01:07 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: G/CAkXI/l1926gC62WHe+LnogMxAoIZSJ67ROR9vLRQ=)
2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:fe:46:14:5b:eb:2f:6e:32:3b:4f:1f:ae:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: Aug 6 22:01:07 2025 GMT
Not After : Aug 7 22:01:07 2025 GMT
Subject: CN=6c80a9a865a8ee2e66f566c23fd8069f324e32ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:c8:49:c5:55:00:1a:c6:03:0c:56:71:1c:
79:d7:95:d8:b4:65:92:40:84:88:c0:bc:10:9d:d3:
ee:f5:9a:83:cc:6c:05:6f:d0:a3:b7:7a:18:d8:4a:
bd:79:c1:6f:09:1b:ab:3c:5e:99:9e:49:37:0d:f8:
e3:1a:75:73:15:39:e8:ba:96:ab:0a:de:cc:9f:14:
53:8d:9e:98:c6:88:72:6b:31:7a:8a:7e:4e:ed:29:
4c:9d:98:af:80:97:ce:e5:c4:4e:f6:2a:20:2f:69:
65:91:33:78:4d:39:41:8f:e7:2b:11:1f:f2:96:66:
da:5a:6f:38:2c:ef:b0:3d:2f:d0:ed:89:43:94:5c:
38:3c:aa:91:8d:a8:05:dc:e2:e6:46:f0:19:c8:21:
ab:78:c4:f3:2b:e0:95:a2:81:b9:55:97:19:06:50:
d6:47:29:b2:75:e8:52:2f:a1:75:65:c8:53:b9:15:
9e:37:b6:cc:97:74:03:c3:cc:b7:84:39:dd:6b:bf:
ca:25:11:c8:9f:8c:11:22:d7:2c:dc:b9:6f:a2:d2:
41:ef:80:97:d3:8b:a1:9a:c8:b6:e3:4c:5c:48:d5:
d4:f7:d9:d5:7e:c2:e2:6a:37:85:2d:96:19:23:d1:
a2:5a:0d:d5:ac:4f:42:bf:4b:24:0a:30:bb:4f:ad:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:A9:A8:65:A8:EE:2E:66:F5:66:C2:3F:D8:06:9F:32:4E:32:EE
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:48:c3:ce:df:c3:bd:01:6b:4c:11:aa:e9:44:bd:2c:b8:de:
97:56:bf:17:24:06:2f:b0:35:97:d9:fe:b6:54:cf:a8:ed:ba:
4f:7a:6b:66:7a:2a:7b:bb:80:6a:d2:1e:10:75:0a:18:f0:a6:
5d:61:c7:04:58:4f:26:7b:0d:1c:f2:5f:32:3c:84:42:30:fe:
04:69:df:dc:e3:8f:fc:db:72:00:2f:d7:bd:7b:a9:3b:4f:d4:
92:29:86:b6:72:5e:d8:ba:f3:f1:10:66:9f:22:9a:9c:36:85:
1c:6f:2c:32:8b:7a:9b:cc:33:32:00:c4:42:ec:7a:c6:cd:6a:
6f:77:e3:53:94:e5:ba:86:ba:b8:4b:15:04:64:a9:cf:84:bb:
81:cd:30:f2:8c:70:45:62:f5:64:c3:76:7e:9d:71:a1:bc:4f:
b6:bb:f8:f8:c5:bc:08:c9:71:30:07:ee:e3:24:cf:3d:87:ea:
44:82:9d:34:ac:a6:45:47:bf:ec:19:d1:78:f9:0a:62:d5:e6:
9f:4b:fe:9e:03:8a:19:d8:e0:fb:d6:43:20:7e:92:53:24:3e:
c6:38:b4:89:37:f6:fc:25:28:7d:2e:2b:c0:89:b4:cf:e6:ca:
af:d5:68:d1:b4:c1:f5:9f:fa:0e:26:fe:9b:1c:8b:6a:ee:e8:
d7:83:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:33:33 2025 by rpki-client