
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier: roPTZDPiLILIIr98XgusobaMvPNQ00fSZ/OeGI/zpbo=
Subject key identifier: 9F:0D:A4:46:84:E2:88:55:94:13:21:3F:5E:AD:E3:8F:A4:24:60:6A
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 01987E9CFCC0C9E60A2EDE825E8B9EF1C8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 09:01:14 +0000
Manifest this update: Wed 06 Aug 2025 09:01:14 +0000
Manifest next update: Thu 07 Aug 2025 09:01:14 +0000
Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: +iLu1qaynDG6IBpMkKmPAwSvESjmiV+pXtdX08QyjmM=)
2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:fc:c0:c9:e6:0a:2e:de:82:5e:8b:9e:f1:c8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Aug 6 09:01:14 2025 GMT
Not After : Aug 7 09:01:14 2025 GMT
Subject: CN=9f0da44684e288559413213f5eade38fa424606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:01:49:3a:e8:60:20:cd:1e:32:0d:f2:3a:
dc:0d:fe:d5:4d:42:78:40:7d:19:4c:c3:04:43:83:
fa:b6:40:29:29:78:73:f0:2d:f0:bd:1e:61:0b:1f:
41:d6:3f:cb:b9:66:1c:39:e0:25:fd:02:2d:82:5a:
45:9b:12:2b:e0:c1:d4:16:e9:e6:a6:25:2d:33:d3:
63:1e:e2:cf:26:22:33:d4:b5:79:e2:3f:6a:31:31:
d3:ec:ac:9a:b8:56:8e:39:eb:14:96:cf:0f:42:84:
b2:a2:12:a4:9a:03:e8:49:06:8b:0d:9d:f9:8e:f7:
76:71:7e:d3:ba:59:26:27:38:76:4e:8f:0e:46:18:
9e:44:60:65:cc:a0:bf:b0:98:aa:0f:7c:53:a2:a5:
51:b8:56:60:61:34:58:1a:ef:c9:58:d7:55:f0:f6:
c9:86:cd:58:4f:7b:7d:ee:0d:38:de:3f:25:5c:48:
70:6c:8b:83:70:4d:eb:a8:a4:53:20:b0:dc:07:eb:
9d:d1:76:cf:72:a3:6f:36:7b:43:f8:66:7c:bb:e7:
26:e7:74:8b:43:18:02:1d:a6:bc:47:68:d4:6f:de:
dc:65:63:06:75:b4:af:40:71:08:eb:ff:ee:43:4b:
c5:0b:58:2e:c3:22:12:80:a1:81:d1:9d:01:b0:8a:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:A4:46:84:E2:88:55:94:13:21:3F:5E:AD:E3:8F:A4:24:60:6A
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9e:08:0a:b3:59:b6:f6:4d:30:ba:fd:8e:aa:bd:30:96:ae:
98:cc:b4:9b:97:82:c4:76:05:92:e0:a7:0b:6c:c9:27:d7:3b:
05:67:f7:59:b8:84:5f:3d:54:ec:37:e2:ae:35:c5:9b:1c:09:
ec:c1:ad:42:d5:e9:9e:57:9d:f9:de:dc:4b:47:3a:7f:f3:66:
74:33:99:ac:61:9d:6b:9f:b8:db:a8:61:24:ee:2f:1d:bb:06:
13:84:76:55:70:c8:09:e0:ef:de:15:b6:d8:ee:1d:e8:68:ed:
98:3d:3b:8e:3d:6f:f8:ab:fc:db:4e:43:17:b2:e8:04:ae:bd:
5d:1b:81:4d:ba:a9:92:27:a6:75:c8:b1:b9:cc:c8:94:7d:95:
6a:2e:f5:ce:a1:aa:93:84:17:2a:39:1e:6d:d6:ab:9d:15:c6:
b8:53:7d:e9:27:00:a5:79:1d:ff:73:27:2a:15:b8:b9:ab:30:
41:d2:82:09:7c:82:e9:ee:12:11:ee:2b:2a:8f:54:48:b2:d6:
93:ae:bd:ed:8d:f4:fb:b8:7b:72:1b:03:90:cb:25:87:bd:2c:
f2:8e:b5:d3:cc:dc:ec:f0:ef:9a:60:40:f7:2e:dc:e7:9c:f5:
50:7b:7c:e7:5a:b2:de:f1:bd:bd:63:05:2b:bd:72:07:d6:c6:
e9:1b:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:34 2025 by rpki-client