Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: 5AwFB5al2UejPs1xkdv3uG+Pn6Bf+TldHbFpGYAr/+8=
Subject key identifier: 57:C0:F0:93:54:B3:1E:3B:D2:27:0A:33:A4:49:C6:27:EA:99:F8:30
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 0198A15FD95E66F56469A27F47C8BD087508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 1533
Signing time: Wed 13 Aug 2025 03:01:09 +0000
Manifest this update: Wed 13 Aug 2025 03:01:09 +0000
Manifest next update: Thu 14 Aug 2025 03:01:09 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: 1ZANzAuV1lmlb4ZjrSy2aCnm7IH7M4M7zoQIXTyey8g=)
2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=)
3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:d9:5e:66:f5:64:69:a2:7f:47:c8:bd:08:75:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Aug 13 03:01:09 2025 GMT
Not After : Aug 14 03:01:09 2025 GMT
Subject: CN=57c0f09354b31e3bd2270a33a449c627ea99f830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:ef:8f:17:2c:97:6c:e3:e1:41:98:2d:9e:
1c:95:d7:cc:4c:8b:d5:5c:a4:f4:15:d9:0e:5c:04:
97:46:ba:0c:40:c5:65:3e:27:4b:5d:1e:7a:5d:e6:
45:4e:a6:76:af:ae:85:db:a1:ef:23:c7:65:2d:2a:
4a:4c:2a:b7:fc:10:dc:fe:32:8c:42:31:b6:d5:b4:
d4:44:b1:f9:70:30:b4:f5:e7:1a:6c:af:5e:33:7b:
63:18:c2:ef:87:70:a8:9e:37:73:ed:64:62:d4:de:
0b:58:a1:8b:e9:8c:1a:7e:96:f8:d2:16:c8:8a:69:
e3:24:be:1e:15:57:d4:da:b8:3b:8e:e6:a2:23:00:
52:2a:05:5b:62:64:26:b4:8f:87:3c:65:08:8a:8e:
0b:39:08:04:2b:19:9a:f5:a6:e3:cd:44:d8:87:27:
16:3d:9e:ab:e7:bd:8c:0c:b6:ef:35:02:d4:2b:7a:
28:6e:1c:6b:78:6d:39:a7:d8:71:89:02:38:93:c1:
af:87:60:82:ae:a3:55:7c:5c:65:5e:3e:9b:57:eb:
3a:5c:49:49:9c:4d:a7:6e:3b:9b:e9:48:67:5d:cc:
7f:49:9c:c1:4f:72:92:bf:db:af:59:1c:89:07:df:
6f:38:f9:04:fc:03:2b:2f:94:6b:91:39:c4:02:54:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:F0:93:54:B3:1E:3B:D2:27:0A:33:A4:49:C6:27:EA:99:F8:30
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a5:3b:9a:ab:47:4f:fe:83:77:77:15:31:68:fc:00:07:f8:
ba:40:14:7b:c9:fd:0b:3d:05:b2:4b:99:f8:e7:4c:a0:e5:4a:
55:11:42:ca:5b:1f:ea:4d:ee:90:73:20:85:e4:d9:5c:a2:96:
3e:48:3d:a8:26:8e:9e:55:0b:c3:f4:27:51:fc:00:f6:e7:33:
08:50:3a:4b:b2:25:10:53:92:73:35:3e:e2:1a:86:86:b4:e7:
fb:af:72:51:98:9e:d6:54:12:6f:92:c6:81:ca:6c:b2:02:9f:
f2:90:dd:1c:83:7c:e9:1b:b2:e0:c4:fc:a3:3f:08:a9:c0:a1:
86:a7:37:5f:37:8b:3b:27:66:9d:bd:be:15:f4:30:47:d2:d8:
15:e3:11:e3:6e:54:d6:71:da:9a:0f:37:da:6e:20:02:e2:5d:
07:6b:1d:30:83:8b:1e:65:33:7a:28:52:c3:9e:f6:17:66:9d:
85:d8:4f:40:4c:a4:a1:4b:d2:e0:57:72:e9:85:f7:3d:f1:84:
11:e2:d9:b0:ef:a5:f6:4d:b3:ef:30:3c:a2:14:b6:73:83:1c:
75:12:74:03:4e:30:9b:d9:52:56:f1:75:37:3c:a3:89:ce:37:
8f:65:34:20:2a:a2:08:65:1e:92:b8:38:1b:82:cc:9d:1f:64:
85:c7:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:50 2025 by rpki-client