
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: HYmrL3BGGLOpik/TCPCR0JqAEpgRgXRUY0b6hEV9RYg=
Subject key identifier: 8B:68:B2:84:CC:EE:99:D2:88:C6:EA:82:3B:F8:E4:55:B6:DF:90:2A
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 01987ED390649F41B4313D793B9FCBDA3125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0368
Signing time: Wed 06 Aug 2025 10:00:50 +0000
Manifest this update: Wed 06 Aug 2025 10:00:50 +0000
Manifest next update: Thu 07 Aug 2025 10:00:50 +0000
Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: QNcXEZ/e2amabFPSRes/4dCM+UPAbU/4z83tAuOZbEw=)
2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:90:64:9f:41:b4:31:3d:79:3b:9f:cb:da:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Aug 6 10:00:50 2025 GMT
Not After : Aug 7 10:00:50 2025 GMT
Subject: CN=8b68b284ccee99d288c6ea823bf8e455b6df902a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:8c:d9:25:8f:3f:4c:0b:2b:dc:03:d8:53:
71:58:9b:d8:04:57:52:88:17:f7:6b:2a:8e:ee:67:
1f:9b:fd:b0:a5:7d:3c:4b:76:fc:72:aa:c6:33:8c:
de:e0:27:cc:af:8f:ce:ed:10:70:97:ff:46:ba:02:
ef:71:52:72:27:8c:05:67:0c:7a:a7:40:ce:4b:97:
36:83:83:2b:85:1c:3d:b3:24:6f:1e:4a:fc:5b:96:
45:90:2c:55:9b:a5:de:ff:b7:1b:52:12:e4:8f:c0:
73:a2:76:51:0f:d3:2d:03:87:6b:f4:dd:04:52:fd:
29:a3:f5:c4:43:d5:d7:5f:1f:d2:ce:e6:53:9b:28:
d0:d9:8a:87:15:64:7b:76:09:39:43:37:7e:7a:65:
4c:30:53:c8:a5:b3:8c:5d:f9:db:ec:8b:9a:c2:c9:
0c:e0:f3:f8:b0:4e:50:14:eb:6a:97:46:3f:6f:3a:
8b:cd:38:4a:25:b2:f5:69:7e:1c:b5:54:3f:3e:ef:
a7:b6:cf:40:f4:49:e0:10:0f:d9:e3:4d:0e:b9:88:
9e:6a:0f:53:3a:73:e6:5e:04:a9:1b:9c:09:0c:34:
d7:04:b0:8c:41:46:38:a7:af:6b:1c:3b:b8:a3:9e:
2d:d4:7b:5d:96:f0:a4:ed:6b:ce:64:53:9f:0d:33:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:B2:84:CC:EE:99:D2:88:C6:EA:82:3B:F8:E4:55:B6:DF:90:2A
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:79:c9:eb:7f:fc:9c:f8:a1:0e:55:ed:8e:fc:af:c1:6c:
58:01:7e:91:b3:a0:68:56:66:af:c7:a2:7d:48:29:82:00:a2:
02:df:b2:da:d6:f3:50:81:08:46:85:a3:09:95:a1:9d:0c:33:
0a:3d:b4:36:aa:83:06:55:f9:f8:7b:01:a3:5b:74:89:b9:42:
02:b6:59:08:da:e5:b7:c0:a4:b6:ee:4c:22:b7:8e:f3:fa:28:
9b:88:d8:13:9d:31:0d:5e:a8:05:12:98:63:3a:c6:9e:d9:88:
1a:63:2e:3e:84:ae:f7:0f:d7:e2:00:bd:37:44:3e:72:35:d2:
a5:b3:5f:f8:69:e7:cf:a8:f1:92:85:dd:a4:ba:de:da:66:8c:
54:29:08:ea:aa:71:73:c4:50:50:d4:2e:01:1c:aa:0c:21:34:
b8:ee:62:71:13:91:0b:b6:da:09:77:c8:20:25:5d:aa:b9:51:
5e:20:64:8f:08:92:92:f9:fb:a9:1e:fc:c7:54:f3:92:89:9d:
5a:a7:b7:b9:ea:8d:de:c8:20:d0:6e:99:25:f6:c8:e7:99:fc:
c2:7d:e9:3a:01:20:32:d2:d5:65:9d:4d:dc:72:21:9d:75:1f:
46:f4:6f:14:c9:3e:65:40:e9:49:94:ef:19:59:c9:40:bb:2b:
11:fd:10:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:36:33 2025 by rpki-client