Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: h/mixuteCljbh3iSXsNjwz5vp83OTDIlzA9qSa+N58g=
Subject key identifier: B6:AF:22:4F:29:37:2E:5B:F6:AF:73:6F:91:12:B1:56:CB:08:9A:36
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 01988732C59C66758E17C609BA7DD1F01F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 09ED
Signing time: Fri 08 Aug 2025 01:01:48 +0000
Manifest this update: Fri 08 Aug 2025 01:01:48 +0000
Manifest next update: Sat 09 Aug 2025 01:01:48 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: 5lQCi3GYV4nRvScSyw/E0qEC+3pwGbIi82M6BghrElk=)
2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:c5:9c:66:75:8e:17:c6:09:ba:7d:d1:f0:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Aug 8 01:01:48 2025 GMT
Not After : Aug 9 01:01:48 2025 GMT
Subject: CN=b6af224f29372e5bf6af736f9112b156cb089a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:5e:7e:17:63:23:fb:ba:ac:f9:5f:97:47:
02:ff:4f:9c:8d:ac:ca:55:32:3e:39:9a:32:47:d5:
6f:a9:7f:b0:96:a0:7c:9a:ba:ee:04:62:c4:38:a7:
8a:e1:71:37:f3:2b:30:be:1c:45:c5:32:3f:15:aa:
d0:3d:7c:4d:7b:74:c0:a9:22:8f:ff:07:d2:8b:ef:
9e:62:13:49:ba:4c:69:24:5c:0d:43:d2:02:bd:85:
88:95:10:a7:ab:62:f6:ac:e3:80:e0:30:23:6c:20:
8e:2b:08:33:9b:96:8f:86:f7:b5:0f:cf:1f:02:46:
a3:23:4d:cc:2f:ea:bd:9d:4c:ef:f6:af:2c:62:de:
66:dd:de:5f:10:25:b9:a2:04:6b:69:0f:87:ff:83:
35:e8:48:71:80:3a:ef:ad:12:f2:e3:20:c4:2a:29:
72:ce:4f:4c:ac:94:cd:80:87:40:70:32:ef:5b:65:
5c:32:58:d3:69:9d:ad:1b:cf:0a:31:f4:f9:8e:06:
cb:5f:e4:60:01:72:ab:75:94:07:2d:67:bb:0b:1e:
e5:8e:b1:31:57:05:4c:79:71:e3:d7:42:6f:f0:1a:
57:8c:a8:d2:2f:96:95:ae:d2:00:f2:50:dc:4e:30:
1f:74:88:fa:ad:51:32:36:35:0a:d4:48:db:b9:b7:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:22:4F:29:37:2E:5B:F6:AF:73:6F:91:12:B1:56:CB:08:9A:36
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bf:e5:b0:d4:3f:a8:db:0e:80:35:34:b1:36:48:07:6d:ef:
be:b1:68:d1:4e:15:62:e2:e0:12:89:e2:23:fb:91:c4:30:b4:
46:98:ba:ab:3d:54:8a:db:7d:b9:b6:b6:d9:c3:a7:38:8d:a5:
fc:f2:5b:d9:44:46:84:9f:05:97:3e:7a:e0:5e:01:b0:be:9b:
3b:40:78:b8:c8:08:44:8c:d8:86:ac:35:00:27:bf:49:bd:bf:
0e:96:20:03:e1:6b:88:59:08:68:7b:36:88:4f:52:08:4f:60:
76:55:52:3d:79:45:b5:36:3c:08:37:e9:d8:88:26:55:6e:cd:
43:63:a8:aa:6a:f2:00:b8:20:d8:d9:06:df:7f:de:84:69:ea:
89:1d:db:c3:d6:45:81:54:81:84:81:67:b7:ed:3b:de:80:01:
75:99:a4:0b:63:36:c7:ae:20:af:c8:5a:74:7a:f8:a8:06:71:
98:6d:65:bb:a0:4a:01:46:29:bf:fe:29:ce:8d:db:34:27:00:
e5:5e:33:06:d5:de:ce:7b:bb:80:56:3e:5f:a1:dc:8d:1e:b2:
fd:70:53:94:2a:ba:6e:44:44:5b:8b:b5:61:82:4f:80:ed:54:
b7:01:b8:4b:a6:0d:f6:40:8c:49:1e:7a:34:a4:0d:e0:5d:4d:
cc:20:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:15:38 2025 by rpki-client