Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: R1R96sXOfIxCrBgO6aXZAHvf59Ce32Hz0yHvv/h3tYk=
Subject key identifier: F8:99:24:39:0B:01:D0:2A:73:05:57:29:AC:A4:24:6E:E6:87:48:A9
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019849D2F5ADC8E5BDBF9966E4941D30D5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 06EC
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: mYSBw3El0l6EGDChl58ziwWSkZX09XNM7Jm1S8V+wcg=)
2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f5:ad:c8:e5:bd:bf:99:66:e4:94:1d:30:d5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=f89924390b01d02a73055729aca4246ee68748a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:3b:ec:06:3c:08:18:d3:fe:23:46:22:4b:
e7:59:9b:06:5e:61:ac:5e:bd:3e:a8:81:45:67:11:
e0:91:f4:c4:25:5f:28:7c:60:28:d9:d5:c6:c1:19:
f2:27:6b:a1:6e:31:e7:e1:27:05:5d:42:c9:08:34:
ba:68:b1:96:f8:da:83:a3:a6:a2:3e:05:fc:32:11:
94:06:d2:cb:01:32:35:2f:da:3d:79:79:7e:b5:58:
7a:57:78:c6:3e:ac:6f:5b:5b:1e:d7:23:77:ce:93:
1b:4d:4b:b2:92:f3:41:4a:53:9d:b1:2f:80:14:36:
c0:9d:f1:ca:13:78:05:06:5a:ee:f8:95:dc:8f:a2:
39:bf:9c:9d:e0:15:9c:25:8d:5d:5a:3f:9d:6b:69:
27:d9:58:39:13:d2:5a:ad:13:65:26:f3:4a:c4:30:
f9:b1:16:29:d3:39:4c:a6:d1:56:cb:ba:86:92:6a:
0a:07:e2:24:6e:12:5c:9b:d9:70:61:b7:06:0e:63:
5b:46:61:41:54:d9:58:3e:50:b8:99:97:67:b7:27:
24:56:b1:49:3a:f3:a9:8d:16:31:cd:36:5c:51:e6:
ee:68:18:cf:8d:0c:bc:bc:b7:1c:ea:8b:ed:3f:cc:
d2:ad:17:c5:68:4d:bb:fa:ed:aa:08:35:95:13:56:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:24:39:0B:01:D0:2A:73:05:57:29:AC:A4:24:6E:E6:87:48:A9
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ad:80:5f:8d:b0:a8:76:6e:9c:6e:71:fe:28:04:08:2a:31:
fe:e2:40:76:ed:82:fd:cf:1b:76:08:76:42:66:9c:6a:59:8a:
12:44:dd:ba:b9:54:0e:a0:a5:5a:f4:7c:48:f5:b9:b7:c5:52:
15:22:15:f6:40:7c:dc:84:9e:21:e8:66:3a:92:8b:19:2f:96:
ef:bd:37:e3:ad:92:e0:b6:77:97:ba:55:23:2e:c7:6e:ed:30:
46:3c:3c:6d:18:4c:6e:60:76:f5:5a:c1:8e:ee:0d:2c:e1:71:
8f:8c:e6:03:5e:66:c5:c6:80:13:1c:90:04:7c:8d:89:ad:48:
ca:41:d8:05:f5:de:b6:9f:e5:d6:a8:7e:d4:54:c5:ae:6f:c8:
74:c2:c6:72:b9:5c:99:53:77:b8:33:9e:f5:59:f5:23:15:f8:
27:c7:03:19:97:10:d4:be:33:0d:53:69:8d:ab:e6:d3:96:5d:
7a:44:ab:81:04:3a:5b:98:08:0c:c2:5b:9a:7c:a3:ec:86:dc:
81:19:c7:69:a2:cb:5c:10:4b:db:43:02:22:c2:5c:81:15:74:
a9:50:51:34:18:5f:a0:e8:dc:42:35:4f:1c:6d:ae:05:ca:7d:
88:e2:e6:6a:f2:fd:c3:67:f5:9c:af:50:e8:eb:42:62:63:bf:
36:5c:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:41:14 2025 by rpki-client