Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: w5RL8Xbau96cUbmdPmsEvMWA7XYEd1h6dUkZ6B/M71A=
Subject key identifier: 2D:08:A2:2B:13:83:F5:86:78:5C:85:1F:B8:03:B1:80:71:2F:93:F9
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 019872CFA511DE4CE5E7CE64DA041AC7B3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 02:01:07 +0000
Manifest this update: Mon 04 Aug 2025 02:01:07 +0000
Manifest next update: Tue 05 Aug 2025 02:01:07 +0000
Files and hashes: 1: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: 3Tw4jt40guQBr4qcEMpRf/O3JnmJ0EIG+V3ngo+l294=)
2: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (hash: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a5:11:de:4c:e5:e7:ce:64:da:04:1a:c7:b3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Aug 4 02:01:07 2025 GMT
Not After : Aug 5 02:01:07 2025 GMT
Subject: CN=2d08a22b1383f586785c851fb803b180712f93f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:0f:5e:36:6a:fa:76:f3:d0:9b:3d:d3:61:
ca:6c:4b:37:a8:94:29:b5:6d:d8:58:c3:bf:00:4e:
6c:f3:97:17:53:0d:30:7e:f9:a4:4f:2b:a7:93:07:
79:e6:d0:45:ab:86:3c:76:7f:4f:83:64:98:7c:61:
18:f7:3e:7d:db:f5:33:8c:f1:ed:51:49:e2:0c:43:
4a:42:e3:1c:4d:a0:a3:73:f9:82:a7:c9:f2:f8:d4:
8f:15:6f:3b:9b:bb:ce:f9:3d:03:86:22:de:ed:f6:
33:9a:45:fa:d4:af:bd:8e:37:b5:1c:01:94:91:f3:
7b:95:b4:ec:3b:6d:c9:e2:01:57:08:0b:b5:df:88:
b1:c5:47:64:35:3a:b1:89:8d:d8:10:9a:de:59:7a:
f5:ff:16:22:b0:27:3c:a1:e3:7b:41:ef:79:47:38:
dd:07:27:a7:b4:d6:cb:30:ac:e5:0f:d7:84:93:57:
3e:23:b5:d0:85:2c:81:e5:3c:aa:8b:9c:eb:ff:f0:
62:68:38:a0:cf:57:aa:83:9d:73:41:ec:48:07:68:
7c:43:95:86:7d:f0:f0:89:b3:1e:2f:b0:ec:e2:68:
97:0f:a2:8e:c3:8e:69:de:bc:5f:9c:c2:c9:96:a2:
d0:fc:c6:79:a1:a6:95:b7:69:85:e6:03:e8:7d:ba:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:08:A2:2B:13:83:F5:86:78:5C:85:1F:B8:03:B1:80:71:2F:93:F9
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:62:16:c6:86:84:e4:3c:b1:a5:ba:0e:d9:21:f4:0a:81:d3:
76:0b:f2:32:f4:ba:2e:86:0a:b7:38:8c:e2:96:82:81:2a:79:
a3:19:05:21:84:d9:e7:dc:3b:93:40:08:17:68:27:86:57:71:
31:f4:ad:a4:f5:13:73:26:09:6a:ae:1f:47:70:44:b4:78:dc:
5f:13:c5:fd:b3:3a:57:bb:8e:69:f5:33:9a:8a:e7:30:9d:1d:
d6:d9:ac:6e:f9:a0:75:6e:a2:44:44:c6:11:5b:fb:01:42:de:
84:a5:12:14:d9:7b:c4:a0:ba:ac:76:4c:60:37:40:94:9f:1e:
30:e3:10:da:64:3f:72:e6:fc:7d:16:7f:46:92:8c:dd:22:67:
5a:d0:92:e2:d2:b4:3f:fa:4b:d5:07:c9:36:49:ae:88:d9:1f:
4d:96:0c:b1:62:40:1d:87:b0:9a:da:a9:f6:41:c8:99:d9:aa:
be:97:8e:d3:96:60:8f:81:79:c3:64:be:2d:ce:71:5e:7a:2e:
d8:e4:b0:80:6e:15:7d:52:86:4b:b6:9d:97:58:cb:17:d3:cc:
6b:61:80:4e:18:17:1e:35:c6:93:22:33:a2:9b:e2:4e:0b:cf:
8e:cc:3c:da:15:d8:29:e8:15:3e:ec:57:74:64:71:df:98:64:
5b:57:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:19 2025 by rpki-client