Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: ukop9L28x1LYHY3OxIJPPrXmCiREVFiFzYIXhXdjs0Y=
Subject key identifier: 95:47:A6:95:B1:74:E2:90:88:67:DE:E5:48:02:4D:02:FD:2A:FD:FC
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 019848C03D2CF708CC88CAC976CFC02F18DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 22:00:14 +0000
Manifest this update: Sat 26 Jul 2025 22:00:14 +0000
Manifest next update: Sun 27 Jul 2025 22:00:14 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: QuHPWmIf0Zdzz1DSLO/AjpiMCV8rWRbbVF763nHgsoE=)
2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:3d:2c:f7:08:cc:88:ca:c9:76:cf:c0:2f:18:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Jul 26 22:00:14 2025 GMT
Not After : Jul 27 22:00:14 2025 GMT
Subject: CN=9547a695b174e2908867dee548024d02fd2afdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:de:1f:56:15:54:b3:78:5e:e9:6a:8d:aa:
c8:dc:14:52:ed:50:72:d6:55:54:af:b2:5b:4e:ff:
b3:6e:5b:18:17:c2:ca:a1:4c:70:1d:6e:49:38:9f:
05:b3:d8:34:af:a1:a5:66:b5:8c:03:2a:32:34:d0:
9f:32:c2:29:69:76:b1:6c:ff:45:59:a4:2c:f7:b4:
7c:9e:5f:2e:e6:7d:c3:17:c0:85:f5:b0:f5:a6:29:
cb:f2:dc:55:d6:06:45:d4:7d:46:c8:9b:91:3c:3d:
10:a0:6e:52:e6:53:04:66:c1:06:21:2e:9c:f3:e8:
59:a9:e8:fb:d0:43:50:de:08:bc:5d:c0:4b:29:31:
d8:04:3d:dd:4c:75:42:73:c2:c4:c8:ef:36:38:6d:
02:c1:4d:b7:c8:cc:ad:1d:48:53:dc:d2:54:7f:1f:
94:34:fc:6a:81:3e:0a:6b:00:48:9d:42:7a:da:ba:
35:09:7f:67:e7:45:dd:17:14:f9:67:de:4d:9f:23:
8f:99:eb:8a:86:df:1e:d5:2d:3f:3b:33:1d:31:3a:
88:46:06:03:a8:6c:93:49:02:10:5c:c3:0e:ca:8e:
f9:df:88:7a:ff:f8:99:48:4e:73:3c:b0:ee:97:bd:
6e:dd:0d:17:e4:b8:33:48:6f:4c:92:69:67:37:e7:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:47:A6:95:B1:74:E2:90:88:67:DE:E5:48:02:4D:02:FD:2A:FD:FC
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:af:87:ae:b3:36:f0:37:37:bd:d1:58:86:75:e6:b4:78:b3:
c9:9a:3b:a6:7b:2c:26:e9:40:ad:80:97:59:3e:1d:17:4d:81:
3b:f0:cd:82:5d:2c:34:22:1b:f3:67:70:f8:e2:75:96:72:9e:
83:e5:d0:e9:f3:39:3f:e8:99:cc:1e:3a:b8:62:e8:15:67:f1:
55:60:ef:d2:fe:cc:70:d6:3a:b9:3b:24:dc:bc:ea:76:9e:70:
b5:de:bc:8e:b9:0c:3c:a1:60:57:14:fb:46:76:a5:fe:35:d1:
17:d3:bc:47:64:af:42:e9:65:47:fb:dc:1f:26:f3:2d:b2:28:
b7:45:f5:31:a9:bb:e8:e4:5a:21:6f:ea:90:d7:78:9d:62:f4:
a3:b3:b8:46:05:c3:97:47:9a:b3:ca:dc:ad:6a:8a:5a:61:eb:
d3:99:bd:0d:17:ad:c5:b9:7f:fd:df:fe:b7:fa:20:e6:a7:5c:
02:b3:43:fa:2a:79:32:4f:4a:1f:aa:78:56:2f:29:54:d2:c4:
74:10:9b:2e:ee:ea:66:fb:e2:ed:c4:88:7a:d7:27:5f:85:81:
96:bb:2f:f1:8b:d0:c4:af:5c:a9:53:15:a5:d4:66:ea:91:6a:
c7:4c:d8:68:86:d2:dd:f9:b6:8c:4e:e8:6e:30:11:73:73:68:
e4:4e:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:00 2025 by rpki-client