Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: E7dPGGGYJHZZHYC6PLzmUnn4iTj2p4ujZI8tNgFieD0=
Subject key identifier: A7:3F:D3:D3:F7:59:5F:F3:3A:EB:02:BE:58:EF:CB:1A:E0:61:98:F6
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 01988C8F881D025AED074EE53DDEB72AABC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0685
Signing time: Sat 09 Aug 2025 02:01:13 +0000
Manifest this update: Sat 09 Aug 2025 02:01:13 +0000
Manifest next update: Sun 10 Aug 2025 02:01:13 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: w9Q36V8gGb5T+Um5kBmGNKDYFOaigxRlXzf49mew/9w=)
2: ieIY7b0KhvQU4QgMPfI50NN4QnY.roa (hash: 5XIl/Vpt8manbA7AG4mG7L9mNTT0fdofSZrC08n/ke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:88:1d:02:5a:ed:07:4e:e5:3d:de:b7:2a:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Aug 9 02:01:13 2025 GMT
Not After : Aug 10 02:01:13 2025 GMT
Subject: CN=a73fd3d3f7595ff33aeb02be58efcb1ae06198f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:9a:26:23:18:c3:93:d8:ec:1b:14:ed:ab:
66:89:fd:3e:88:5c:58:55:bf:70:d8:f3:33:39:d9:
96:ba:c1:95:5d:4b:8e:b2:ba:71:89:64:36:46:15:
37:e8:1e:af:15:37:0d:10:37:d7:53:76:0e:12:1f:
df:f3:1f:d6:75:49:9a:18:d1:30:77:2d:13:c6:3f:
11:8d:3b:7d:89:d1:0f:3e:d2:cd:17:9f:4f:22:9e:
d3:b1:5e:dc:86:3e:7b:9d:c4:c1:07:6e:c6:2d:b7:
7c:67:e0:71:c5:6f:f3:04:ba:7f:6f:a5:d6:77:af:
ed:c5:37:82:5f:b0:31:21:ea:54:c2:22:12:20:9c:
8c:fb:02:02:0b:22:c6:4c:49:0d:d5:4c:91:27:7a:
1c:52:9c:05:92:c5:ba:1b:b9:92:f9:78:51:63:4f:
23:8b:31:37:5a:bc:f3:ab:a4:b0:26:99:8c:75:21:
e6:28:e3:59:34:5e:8a:dd:3e:7b:be:83:35:a9:2e:
30:76:0c:44:37:8b:12:39:5c:8b:c2:d4:81:a8:31:
fb:c3:01:9e:2c:3f:30:dc:58:8c:e6:d4:62:55:8e:
b2:0b:ea:d8:f0:1e:32:7d:3f:14:de:d7:fb:60:ac:
46:1c:a2:90:e9:72:55:cd:aa:c4:44:0e:dc:90:74:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:D3:D3:F7:59:5F:F3:3A:EB:02:BE:58:EF:CB:1A:E0:61:98:F6
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:94:02:b5:8b:a6:91:d2:6c:b0:8e:fe:54:8c:58:56:1e:80:
b7:71:cd:31:9d:cd:10:12:90:b2:05:5a:89:35:4a:2e:23:d6:
28:2c:39:80:bd:e0:8c:d1:54:41:0a:f9:fa:e1:cd:e6:3e:1b:
41:7b:b5:40:30:e4:76:3f:e4:2b:47:b4:4f:b1:b0:86:c8:59:
e4:d5:29:d4:19:13:da:36:28:ea:d2:29:d1:59:27:47:b6:2a:
9b:26:f6:29:ce:63:05:69:d5:7b:89:ad:03:e4:9a:5f:4c:d9:
4a:2b:a4:73:92:54:a4:8a:10:77:dc:8e:a3:d2:b4:34:9a:c2:
6d:97:e9:bd:56:05:78:14:e5:5f:8a:c6:61:c7:5e:92:2e:23:
43:9f:7d:77:d2:2a:b3:6b:be:03:4f:e5:98:cb:aa:51:43:3f:
ef:42:ee:77:51:94:06:92:b6:6b:aa:b2:84:c1:00:a1:e3:a1:
f4:08:9f:11:8a:78:de:91:19:6b:85:25:a4:c3:2c:82:42:4f:
c6:80:7a:bc:c2:c7:cd:71:3b:97:9e:ad:1c:7a:b1:0e:c0:b2:
1e:0a:a8:20:ad:02:08:b5:4c:ea:df:69:2e:77:12:f4:55:00:
a1:3b:64:53:e7:2d:07:7b:b7:0e:61:a7:24:62:f2:63:9e:9c:
94:30:12:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:45:28 2025 by rpki-client