Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: MfxPZ8HIF1zTRzXPEq9EoWEN+MpCQhzs9f2bb+8+CIc=
Subject key identifier: FE:45:6F:DF:D9:F0:E1:F4:68:69:0F:DC:42:7B:E9:30:46:9D:33:DF
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 0199240CF1D08CED91826A1D167AC80E9F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 04C9
Signing time: Sun 07 Sep 2025 12:00:51 +0000
Manifest this update: Sun 07 Sep 2025 12:00:51 +0000
Manifest next update: Mon 08 Sep 2025 12:00:51 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: VHLAldwkvNttScP5iSGoVLmj8xry3/NG1XV0TcXmHOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:f1:d0:8c:ed:91:82:6a:1d:16:7a:c8:0e:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Sep 7 12:00:51 2025 GMT
Not After : Sep 8 12:00:51 2025 GMT
Subject: CN=fe456fdfd9f0e1f468690fdc427be930469d33df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:f9:84:0e:a8:ee:22:60:a5:d4:57:11:58:
0a:3c:8f:44:23:a5:f8:b6:b1:49:f6:6b:ee:a2:6c:
cc:27:f0:54:a0:2c:3f:d2:09:7e:0c:c4:1c:52:55:
5d:6a:99:23:1d:e1:f0:fa:78:54:07:98:26:07:0a:
75:8b:c7:ab:a0:d5:75:d5:df:00:e6:da:f2:fc:ff:
06:11:3b:f8:30:42:e7:ad:7e:ab:39:a4:35:e7:15:
19:3a:83:46:52:2d:2c:f1:c4:49:5b:b5:c7:25:e6:
c1:3e:ee:b5:b9:ed:e7:6c:23:be:a0:fc:c3:64:f3:
cd:c0:2e:90:14:03:77:54:b5:b8:ff:2a:40:09:ad:
ea:86:eb:b9:61:f2:08:47:5f:14:f7:bf:aa:16:eb:
15:c9:bb:87:55:57:ed:82:13:f7:6f:67:a6:4f:77:
df:d2:86:1a:53:2a:68:ba:1e:5f:c4:a7:fd:b2:47:
da:99:ab:58:30:35:cf:45:7f:67:2d:be:cc:d4:d3:
21:c8:2f:fa:11:d4:97:af:c9:32:10:d8:58:ba:92:
f2:1c:51:d9:47:2a:ae:03:c2:5f:1e:aa:20:5d:df:
82:c8:9b:6c:e0:fe:9b:83:d8:d2:6f:9a:df:17:e8:
a3:b1:fb:4f:07:a0:d0:c9:16:4d:7e:b0:58:1b:18:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:6F:DF:D9:F0:E1:F4:68:69:0F:DC:42:7B:E9:30:46:9D:33:DF
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ef:f5:d2:65:ac:20:19:c9:ae:6d:d4:24:81:ac:91:0f:6c:
d7:ba:23:ae:82:ad:fd:68:c1:e3:ff:aa:0d:f1:60:ae:ad:7f:
cf:2a:2d:0a:17:bd:5d:b8:1e:92:c9:42:2f:ba:85:65:27:8f:
50:93:4d:82:48:a7:4e:7e:29:93:41:55:d1:f8:7c:ea:b3:d3:
d4:dd:6b:24:ad:fb:a0:7f:5d:6d:6a:a0:7c:0f:cf:78:05:aa:
0a:75:40:23:9c:77:e4:7a:f8:22:d2:a1:a8:57:bc:f8:37:72:
85:90:ac:9b:8c:5e:05:98:4f:2d:80:b2:28:5a:07:de:d1:9f:
cb:12:bb:77:43:d1:7e:23:fa:21:54:da:eb:b2:4e:e2:4c:a3:
03:92:73:6c:1c:09:4f:ec:8a:0d:a4:ab:60:af:35:83:05:62:
bf:87:96:2a:0d:83:0b:c2:9b:08:39:5b:0b:70:a5:28:4d:3e:
40:bf:59:8e:39:e6:95:88:26:6a:71:8e:05:22:46:60:6b:f2:
f5:0e:3e:f2:4c:75:65:f0:65:8d:71:d7:61:f8:e9:c2:0a:eb:
51:81:0a:59:e4:17:ec:2c:13:5d:12:ed:85:1d:a9:30:23:79:
1e:00:fa:16:22:c3:70:6a:8d:5b:43:86:b6:1d:45:f4:27:0d:
04:a7:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:56 2025 by rpki-client