Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: Z4DpOQLXd0vhSN+2flHMeNu6U+UDbomQZoEz6NSSl4Y=
Subject key identifier: 3F:86:14:0C:6C:2C:A1:54:C1:8D:86:05:B2:B7:42:53:43:9A:ED:93
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 0198808AE2FA191C8C36E8D82CA0D58C462F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 18:00:42 +0000
Manifest this update: Wed 06 Aug 2025 18:00:42 +0000
Manifest next update: Thu 07 Aug 2025 18:00:42 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: PWM1yS/AUTYrDNir43VtPdHDYED0hEveBdTSX/Peufw=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:e2:fa:19:1c:8c:36:e8:d8:2c:a0:d5:8c:46:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Aug 6 18:00:42 2025 GMT
Not After : Aug 7 18:00:42 2025 GMT
Subject: CN=3f86140c6c2ca154c18d8605b2b74253439aed93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:42:75:4d:27:cf:64:90:b5:a5:e5:54:57:
6f:e3:a2:e2:92:de:a1:b4:f3:cb:a3:4d:63:76:60:
18:bc:e6:5d:5f:80:fa:de:4d:48:6b:d4:79:b7:79:
ad:52:93:ee:91:80:3e:ad:d3:1a:f8:ba:e0:ec:77:
c6:34:cf:df:97:fe:d1:2d:97:dc:73:94:f6:80:ef:
41:2b:ba:20:ba:eb:53:d8:13:6b:4b:c4:fe:16:c2:
65:f5:f6:d4:0a:40:c0:3d:98:93:f6:25:d9:a4:cb:
9d:cd:13:2e:12:9b:27:ce:b1:85:ff:8e:b9:27:14:
12:a3:0c:9b:ed:b8:13:07:22:80:39:65:60:57:c7:
e8:d0:0b:75:f2:d7:ec:81:ef:f9:b2:cb:2a:7e:6b:
85:01:8e:d6:d4:8d:be:0d:8c:d4:91:11:90:f0:00:
5f:56:a7:b2:b5:2e:82:a9:8b:00:0f:6c:8b:96:6d:
e7:6b:8c:16:63:77:a6:6d:28:61:3c:ef:a5:cd:cb:
95:91:e2:02:f3:16:8c:59:e8:7f:ab:c9:ec:7b:95:
e3:11:d4:f1:a2:14:e8:fe:e4:fe:03:7f:a0:23:5b:
7a:d3:11:f3:5f:d7:f5:c3:ca:1f:53:e0:ec:61:74:
0e:59:54:56:a0:01:45:a3:de:9d:1d:38:33:c9:45:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:14:0C:6C:2C:A1:54:C1:8D:86:05:B2:B7:42:53:43:9A:ED:93
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7f:58:2b:0d:cf:b3:ef:8a:3a:c9:5e:50:d0:23:e3:68:7f:
0b:9f:9f:1f:35:6a:ec:cc:7c:45:61:6d:4e:39:15:3a:21:06:
cd:a2:e2:98:45:59:fb:07:ae:6d:c5:24:30:e6:d2:58:e1:fc:
13:c0:c5:12:3d:d8:18:e2:38:42:c5:ed:af:17:d4:3d:0a:db:
b8:9e:c3:ad:83:85:79:08:36:57:a9:b1:db:77:75:e4:c2:0a:
df:93:8c:7f:fc:25:f3:14:6b:4e:23:29:fb:97:8c:f1:58:73:
e8:84:87:3e:ad:54:7a:79:70:df:a9:60:aa:8c:27:ec:d2:22:
87:b4:23:e6:f5:92:c1:79:70:03:ca:c0:c8:54:ca:b7:63:4a:
5c:a6:78:b0:51:5f:6a:71:a8:7d:44:c9:cb:e2:21:4b:24:92:
f1:3a:aa:d9:73:c4:87:51:2b:fc:fb:25:cc:92:cf:4b:44:3d:
2d:06:f3:6a:cb:a6:ca:61:89:8b:44:c3:19:b1:e6:2c:97:37:
fb:5f:01:0d:f4:84:93:1e:51:dd:eb:ba:95:1e:76:18:66:be:
e7:8d:25:95:0a:9c:6d:c2:4f:13:b7:ff:71:cb:3d:ab:62:34:
89:eb:ab:25:ef:84:70:8f:42:d3:dd:cf:c4:49:d0:ab:d4:13:
fc:18:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:04:39 2025 by rpki-client