Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: Kbn7tltGKGPil6t6yRQKEvvQ+MCrqJlj2trCDS65sik=
Subject key identifier: B8:4A:1B:A1:6C:AC:F7:8F:A8:3B:6B:5A:10:B5:F3:2A:00:F0:3F:E7
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 01989F716BA249538BEFD3E40EF00D2AA102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 05AC
Signing time: Tue 12 Aug 2025 18:01:07 +0000
Manifest this update: Tue 12 Aug 2025 18:01:07 +0000
Manifest next update: Wed 13 Aug 2025 18:01:07 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: bNaiChyvtQLOz89jznBDSODdXZpxdBS9wnwhH9nVJ0Q=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:6b:a2:49:53:8b:ef:d3:e4:0e:f0:0d:2a:a1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Aug 12 18:01:07 2025 GMT
Not After : Aug 13 18:01:07 2025 GMT
Subject: CN=b84a1ba16cacf78fa83b6b5a10b5f32a00f03fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:3f:b5:2d:d0:88:e0:df:16:df:00:50:5f:
72:7e:28:d2:49:15:91:c8:00:5e:e9:4a:6b:5f:1b:
de:57:7b:a8:cd:df:c0:c5:cb:26:52:b0:54:a3:4b:
0e:23:56:84:0d:00:08:70:4c:9b:bc:28:c9:56:b9:
11:a4:36:48:56:b7:b8:75:17:4c:f8:20:2a:1a:2a:
29:59:6b:73:b3:64:c6:7c:2e:78:81:c9:51:62:32:
67:7e:f0:78:f0:4d:7a:3b:fb:4f:54:4f:14:4a:5c:
aa:37:7f:5e:c2:21:79:a9:49:d4:3a:dd:89:e0:0f:
3d:c9:51:89:80:a3:cb:bb:1f:9d:5d:ad:9f:91:7c:
e5:f8:bb:d3:22:31:9e:af:09:c8:8e:88:e0:3f:c6:
92:95:db:82:40:75:2b:70:9f:dc:0a:b5:d3:51:65:
a1:7d:22:82:2a:fb:cd:b6:e8:ac:65:f8:85:f7:60:
98:83:df:5e:1f:f9:06:8c:7b:77:ff:1e:44:82:39:
31:b3:bc:0b:be:49:38:c6:ba:17:5b:f3:23:ea:10:
ee:53:c5:aa:96:49:61:37:4c:18:b7:0c:dd:67:51:
2a:e7:a1:27:10:a9:a9:6b:98:93:8a:e2:f0:f8:d6:
3a:a8:b9:bb:dd:2c:2d:4c:c0:ae:8a:aa:3b:ef:f2:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:1B:A1:6C:AC:F7:8F:A8:3B:6B:5A:10:B5:F3:2A:00:F0:3F:E7
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b3:b1:94:ab:32:fd:b6:ba:b4:0c:a6:3e:0d:ec:3f:14:e6:
f5:6e:b9:60:83:91:b3:7a:a4:b2:05:87:31:9e:49:f0:7d:e7:
3c:12:c0:71:71:0f:17:25:c8:6e:9c:8d:ab:52:d4:8d:5a:74:
59:9e:b8:b7:5a:be:65:94:e7:ae:7f:42:2a:7f:55:62:bc:44:
bb:27:ee:87:e9:90:13:17:3c:c5:77:85:e7:43:f3:2b:bb:4f:
29:e5:cc:e5:da:94:7d:39:e4:c4:90:b3:bd:de:09:15:90:fd:
5d:0f:97:4b:62:5d:a8:25:23:08:b4:4b:23:ef:91:bf:08:8d:
42:99:1a:da:28:2c:f7:2e:1e:74:04:ca:91:97:1d:65:de:03:
44:99:70:14:1f:62:bd:a1:b6:15:7d:50:be:31:5a:55:b7:64:
d2:2e:92:7a:9c:36:3d:35:98:c9:e0:76:68:52:77:c9:2b:d4:
50:51:ec:64:ea:41:da:77:0a:c7:b8:e3:a6:43:2f:3a:96:1d:
33:2b:13:2b:20:60:09:db:0a:b8:c8:e0:ba:a1:55:e7:c0:4c:
ca:4d:ec:4f:2c:79:f5:5d:08:26:0e:fd:d7:ff:b4:79:38:74:
aa:b3:b0:8f:5c:5f:7c:a7:24:5e:a9:e4:2e:73:69:f0:ab:e8:
30:26:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:38 2025 by rpki-client