Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: hk64iwDkBThsXeOQ0dNaeJ0itJYNAw5Y0ZxDIF4NerQ=
Subject key identifier: 89:A1:8B:F3:2D:08:B7:FA:11:51:85:EF:C7:8A:90:07:0B:25:52:FD
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 01989ECC2D48D063CA60296A28FD6890B81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 15:00:37 +0000
Manifest this update: Tue 12 Aug 2025 15:00:37 +0000
Manifest next update: Wed 13 Aug 2025 15:00:37 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: FFHhY77Jx11hZDMIyq4oU9qSvVPXIwgcCPmJA9EhO4k=)
2: vf_PL7Z26am-bUWHqusGVLE57ns.roa (hash: lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:2d:48:d0:63:ca:60:29:6a:28:fd:68:90:b8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: Aug 12 15:00:37 2025 GMT
Not After : Aug 13 15:00:37 2025 GMT
Subject: CN=89a18bf32d08b7fa115185efc78a90070b2552fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:46:e1:ef:8c:fc:a0:18:1b:1f:3c:35:62:
7e:85:c2:bb:cc:6c:9b:02:8a:18:18:f6:86:99:b9:
66:bc:85:ec:c5:74:34:0c:0a:75:d7:fd:14:24:25:
91:c3:ae:82:6a:47:1e:0d:cc:9c:f5:8f:1d:31:9e:
a7:61:f2:29:f9:77:2f:36:fe:60:1c:62:e4:27:cf:
0a:42:08:d4:26:4f:91:15:04:88:d5:9c:fd:cb:0d:
51:57:c5:c2:42:f2:ba:42:e2:97:77:6a:50:44:e5:
64:1e:cd:39:80:d9:65:42:45:cb:7f:6f:af:22:03:
61:27:22:7c:1d:e5:e1:3b:0b:4f:d3:70:fd:6e:0e:
10:15:05:2b:c1:00:89:8b:17:29:e8:db:65:98:a6:
b3:e6:48:ef:f6:e0:8a:7d:4a:a6:13:be:a8:39:78:
1f:76:74:f0:1a:5b:f3:d5:05:5a:a3:95:5a:1e:ac:
02:1e:66:14:5d:63:04:4e:0e:5c:cd:a5:fb:11:bb:
57:f0:df:66:4a:e3:1b:b9:2d:74:0b:79:e2:6d:95:
42:69:f9:24:18:a7:8c:69:f9:ee:58:c7:62:75:93:
39:7c:fc:44:02:26:9f:a8:58:9d:87:a5:41:63:fa:
52:52:9d:88:e4:79:59:a5:18:00:35:8a:ee:c8:d3:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A1:8B:F3:2D:08:B7:FA:11:51:85:EF:C7:8A:90:07:0B:25:52:FD
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:be:8c:3d:3e:34:c6:f5:4a:e2:38:4b:66:da:44:6e:df:52:
2d:cf:66:fc:37:d9:43:15:36:07:de:29:cb:95:8d:52:02:8d:
84:72:cc:0e:a7:c7:9d:1a:1e:1e:9a:ca:34:79:96:60:e1:84:
82:db:76:72:a8:74:f1:5c:4e:63:59:29:a3:16:dc:14:f5:c4:
57:3a:83:25:4e:17:2d:5e:97:f0:1d:5b:a6:d0:f6:f2:15:c0:
08:5e:2d:13:2c:fa:12:75:d9:09:9d:6f:d6:8b:a1:ff:d9:df:
c8:20:e1:8e:c8:f5:46:19:83:4f:40:af:a2:de:11:be:81:0e:
42:a9:ae:73:47:b8:02:48:26:b6:82:ac:ff:17:9b:b6:90:4a:
c8:68:ba:41:e2:67:7e:ac:8d:37:1d:dd:91:ae:67:39:72:ca:
6d:12:e6:0a:e4:11:f4:db:09:8c:b9:e8:c0:08:26:08:70:a7:
7f:39:d6:58:0a:6f:28:56:9e:87:83:ad:bc:be:de:b1:23:7a:
3e:6f:37:06:98:0e:6c:21:97:63:29:1d:d6:63:5d:e8:19:49:
25:26:39:52:93:ad:30:15:93:9b:28:43:49:68:ff:4f:1d:3a:
77:3a:24:f4:03:cc:64:e7:15:5f:56:2f:01:47:81:59:4a:12:
c7:25:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:26 2025 by rpki-client