Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: wH7b1CPM5mjh8kbGnYCi8cuNJ8rc0cJsxuW4KTScM/c=
Subject key identifier: 85:59:25:33:6E:03:18:09:D4:F1:EC:7F:71:B5:D1:08:0A:CF:72:4B
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 0198801D4594565FDD0C8124AAF636209D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 16:00:58 +0000
Manifest this update: Wed 06 Aug 2025 16:00:58 +0000
Manifest next update: Thu 07 Aug 2025 16:00:58 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: QuPRnj1ycf64IxRueAAKHnt0UR19zi5Ze9g0lZulZ+M=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:45:94:56:5f:dd:0c:81:24:aa:f6:36:20:9d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Aug 6 16:00:58 2025 GMT
Not After : Aug 7 16:00:58 2025 GMT
Subject: CN=855925336e031809d4f1ec7f71b5d1080acf724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:d3:9f:7d:01:44:8d:8b:ab:36:01:fe:94:
e9:4e:4a:40:30:da:42:56:a0:61:04:71:4b:4d:ae:
38:05:94:d8:a8:11:7e:40:df:45:2f:e2:65:9f:ca:
4e:b1:5d:bb:a8:c6:db:15:30:fd:1a:f0:d9:4d:29:
be:bb:20:ab:fa:33:e2:b8:12:12:0a:53:5d:ac:50:
84:28:02:30:db:63:2f:4f:72:cf:33:fa:3c:e9:86:
6f:d4:d3:0d:9f:05:5a:6d:02:a8:1d:08:8b:64:ea:
5e:3b:36:48:c2:1a:a4:59:ba:60:3e:5e:5e:cf:31:
8c:19:3c:d5:c9:2f:24:87:e9:05:ea:8f:2d:bf:94:
35:19:1d:4c:35:78:53:7d:45:ce:fd:31:a5:17:fc:
26:5c:84:72:05:f3:9c:e4:e2:dc:82:08:c2:18:df:
d8:4e:41:bc:4f:b7:fd:4f:e4:1f:21:70:4c:37:1f:
94:5d:69:65:4b:06:a9:6b:fb:69:a2:20:75:83:74:
4b:57:9f:96:37:22:3b:56:83:42:a7:cc:af:a1:2f:
b2:46:6f:b7:bc:5f:04:28:1d:6c:4c:a1:2e:3a:ad:
5c:72:b0:91:c5:18:f8:f7:d2:f9:09:44:8c:89:fd:
38:69:66:47:94:82:7e:fe:1f:ac:51:a6:e0:31:cd:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:25:33:6E:03:18:09:D4:F1:EC:7F:71:B5:D1:08:0A:CF:72:4B
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:b3:41:d9:99:9c:3f:72:75:b3:6e:73:86:2b:4d:4b:54:
09:02:70:0a:7e:d4:76:20:34:c6:5b:56:14:a3:fe:df:11:c4:
b0:c5:55:a9:11:46:de:90:6a:94:c5:8c:73:89:82:f1:83:8c:
2c:a5:8e:c8:e2:fc:3b:40:70:31:77:2b:30:ec:01:dd:00:9b:
b9:20:b2:75:35:a3:b0:a0:2a:e2:5f:34:70:47:d1:26:49:6b:
9d:68:59:dd:48:06:9a:59:f6:5a:26:35:83:af:52:38:fe:53:
f4:02:a1:75:f4:0e:78:5a:ae:77:f1:b5:56:9a:d3:dc:eb:41:
12:41:6c:82:39:02:55:2d:41:5e:95:63:cb:b5:56:80:f4:1a:
e3:cb:52:7a:42:ae:e0:bf:4a:f6:f4:62:b1:b2:ab:59:ef:4b:
66:d9:60:c9:ea:c9:c0:0b:d1:b6:84:94:c2:53:c5:19:f6:46:
44:72:46:75:65:ec:6c:3f:22:80:e1:5f:39:20:7a:e6:c0:0e:
2a:76:c5:90:c7:37:68:3a:a9:a4:ee:32:ae:09:db:d7:29:c3:
f3:bb:51:cf:fa:d6:66:b0:5b:89:f6:47:4a:1c:6e:19:f2:f7:
8c:59:4d:aa:2c:94:a4:2a:9a:4a:4e:68:4f:61:c6:6e:a0:a0:
16:a2:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:39 2025 by rpki-client