
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier: FFd8LX+pgpjXvnix02KSyTjN/ZCvmUqZKKJ3Tr9n85Y=
Subject key identifier: C3:79:C0:5B:03:70:24:DB:02:AD:B1:4C:D1:24:39:80:4B:44:CA:D5
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 01987418F6F281F60FF44CD6DD84ECC2A94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number: 1154
Signing time: Mon 04 Aug 2025 08:00:49 +0000
Manifest this update: Mon 04 Aug 2025 08:00:49 +0000
Manifest next update: Tue 05 Aug 2025 08:00:49 +0000
Files and hashes: 1: cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa (hash: N1QdoGGRESzbdDo8ibNStMhsdyaZ5jyu5P6HBd0ZTZU=)
2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: SPDipyCPMq+NB0xRdg1MthbHvlEqRKCk2VaY4vEVQ1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f6:f2:81:f6:0f:f4:4c:d6:dd:84:ec:c2:a9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Aug 4 08:00:49 2025 GMT
Not After : Aug 5 08:00:49 2025 GMT
Subject: CN=c379c05b037024db02adb14cd12439804b44cad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:b3:8b:bb:b6:c5:97:55:ee:59:b1:2f:41:
08:97:1f:8a:b4:2b:2f:01:06:96:10:a7:da:a9:9e:
e8:bc:bb:f1:ae:9e:b1:5a:cc:dc:04:a7:d3:26:69:
d8:da:83:79:e2:1b:67:a8:4e:65:2a:0a:a4:9b:cf:
b0:6b:0a:0b:4b:6f:40:24:44:c0:7f:c1:46:f2:ae:
a9:6d:05:71:64:37:e2:1a:0d:18:ba:b2:8d:b2:d5:
0e:a7:81:74:94:21:b2:ce:55:bf:a4:ca:f3:8a:04:
07:8d:bc:5b:22:b9:aa:0f:75:41:66:a5:c3:69:6b:
35:e0:53:c7:a1:86:17:4a:2c:dd:c6:1a:50:7e:cf:
4d:d0:cd:19:db:50:58:cb:46:6b:4d:5a:cb:08:dc:
fb:ca:9e:b1:15:f1:2e:df:38:88:92:7d:fd:9b:63:
6d:fc:21:51:69:0c:ab:4a:d2:4c:f5:44:5f:67:78:
c9:56:0b:3f:dc:53:f9:2c:e3:31:09:ec:3d:7c:1b:
17:e3:b5:f6:6a:b0:ae:d8:77:af:d6:a2:76:83:e6:
73:2a:86:0f:60:65:a7:09:7a:81:ce:c5:c3:b2:94:
5c:4a:0d:4c:fc:5b:9e:1b:48:80:d2:90:a0:ce:10:
d3:59:1e:7f:05:df:8f:c8:48:50:9c:4b:c1:14:bc:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:C0:5B:03:70:24:DB:02:AD:B1:4C:D1:24:39:80:4B:44:CA:D5
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:1f:59:70:4c:03:9e:c3:14:fd:4b:e9:ab:41:94:97:aa:
04:af:bc:0c:3a:db:19:ad:c8:ea:54:ee:a0:7d:04:48:6c:95:
d4:93:bf:12:bc:d6:f5:75:91:6b:76:e2:52:d9:a8:39:15:39:
ba:fb:f4:95:bc:01:f8:2d:6d:ea:50:b8:9a:e0:1a:a2:30:b8:
a5:8f:0a:db:38:a4:9f:13:a6:69:4c:7f:ac:6c:41:6b:8a:16:
f7:c0:6b:38:cb:46:58:22:85:82:3b:cf:e4:36:59:6c:fc:f0:
86:99:8d:d2:30:76:94:39:f1:eb:7b:1b:08:1c:b2:56:0a:e9:
1c:43:71:4d:e5:38:8a:dc:aa:06:73:34:63:66:33:11:6d:35:
e0:f9:5e:4d:1b:71:24:75:b5:90:8a:15:a6:3d:2f:89:b4:25:
9b:b8:ec:67:e9:bc:0e:8c:45:56:1d:36:6a:af:87:7f:3c:f1:
a0:d7:be:a2:cf:da:20:c9:f4:fd:4c:62:89:ec:6f:49:6d:50:
e9:77:80:07:c0:54:71:e3:41:02:4d:b6:6b:ca:ca:a2:27:6b:
71:53:78:00:3c:6e:81:a0:2b:d9:2a:3c:24:1b:1c:67:13:83:
1e:47:a9:c7:a8:8b:1b:cc:93:2b:e8:2d:9e:49:f5:ef:f0:75:
ae:12:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:36 2025 by rpki-client