Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: AIyK9Y7wafYmaoVjQxAv81EDFRVurjMdWGIsk/WqTGk=
Subject key identifier: 02:1E:99:50:E1:E9:FD:6E:9F:19:E5:F9:E8:12:1A:45:4A:F2:99:4C
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 0198A0F17632A94DB3315F73C3969830DDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0D10
Signing time: Wed 13 Aug 2025 01:00:35 +0000
Manifest this update: Wed 13 Aug 2025 01:00:35 +0000
Manifest next update: Thu 14 Aug 2025 01:00:35 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: oxRhZz+MC+ddC1CjYePyrd8nRrcbuBLZq00TOd7tK2M=)
2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:76:32:a9:4d:b3:31:5f:73:c3:96:98:30:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Aug 13 01:00:35 2025 GMT
Not After : Aug 14 01:00:35 2025 GMT
Subject: CN=021e9950e1e9fd6e9f19e5f9e8121a454af2994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:f3:33:d2:1b:fc:a2:92:bf:1a:44:77:21:
55:b2:88:91:21:f7:e8:43:f4:c7:38:95:8f:f3:fe:
d1:48:33:24:5b:f5:99:e2:6d:aa:7b:80:09:55:52:
bd:87:33:79:02:35:54:62:62:87:d9:6b:a4:87:00:
97:d0:aa:84:2e:f7:16:43:85:cc:32:9a:f9:85:89:
12:58:b8:fe:14:4a:92:aa:bb:d6:6a:0a:1d:7d:fe:
f0:10:39:a5:59:e4:a4:42:49:07:41:a7:e7:61:4b:
9d:b7:9a:0c:1e:de:7e:dc:be:e0:f5:d4:ad:eb:88:
cf:36:89:d7:2d:38:9e:24:00:83:63:cb:b6:5a:7b:
55:a7:a1:9e:6a:fd:77:88:6a:7e:9d:04:c1:97:fa:
2b:0d:47:1e:e3:40:8d:3c:e0:f7:28:5b:82:1d:02:
6e:64:bd:fc:da:94:01:fc:ca:28:ce:5e:db:c9:64:
a4:71:03:bb:9f:73:74:c1:f2:10:bb:37:23:bb:3b:
98:5d:6e:12:bc:6c:e7:4b:69:65:7c:88:f0:bd:eb:
f9:8e:6a:64:9a:d6:5d:86:bc:15:0d:73:4e:22:8a:
61:58:be:13:e2:fd:9d:82:39:2f:68:04:26:05:40:
b4:17:96:db:da:9d:80:42:85:1c:6b:cd:fe:fc:a2:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1E:99:50:E1:E9:FD:6E:9F:19:E5:F9:E8:12:1A:45:4A:F2:99:4C
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e1:79:4f:44:c2:d5:ce:d7:51:74:4a:7f:01:c8:12:16:9e:
f0:60:79:03:27:4f:93:28:86:bf:60:23:52:e9:15:ae:f5:d3:
be:e1:c8:43:5b:8f:37:93:40:d7:5e:67:86:17:d8:f1:f4:27:
9d:14:ee:66:24:27:a5:72:39:97:44:25:eb:a8:93:f7:0f:38:
8a:9c:03:83:ec:d0:8e:65:61:14:9f:d9:81:e4:10:4e:67:0d:
3f:6b:fb:52:5b:4b:a7:d9:34:f0:4a:3b:e2:7b:5a:bd:9d:42:
92:d8:08:56:f9:8e:be:36:7f:a1:ac:a4:99:ce:b3:f6:0f:8f:
bc:8a:54:6d:57:3f:00:be:c4:29:0f:6c:9e:1b:69:4e:e4:48:
e2:37:4b:78:68:a0:b1:e3:63:98:c8:8c:c3:ba:45:ab:a0:94:
28:93:27:55:83:75:fa:07:55:7d:94:b3:87:99:e6:0b:4d:a2:
87:7b:37:89:02:e1:52:6e:34:62:4c:66:aa:92:4b:ec:77:44:
71:ff:61:f4:f0:cc:8f:b3:d0:f2:16:42:17:66:2d:11:a5:4f:
f8:03:d3:27:dd:f3:80:66:7d:17:55:45:1f:14:61:69:b7:a6:
e6:af:bd:23:9d:81:e6:58:9a:5f:51:ec:e8:cd:6d:73:48:ab:
5f:f5:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:16 2025 by rpki-client