Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: stsKdfjphxgzJCPpnNlXVZZKk2nVJUokFleFtUgdWKc=
Subject key identifier: EA:EB:1A:7B:20:8D:18:82:0F:9C:F1:D0:EA:A4:78:6E:EB:42:66:DB
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 0199239F86BF0F640C7825B25EBF5DAF6E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:21 +0000
Manifest this update: Sun 07 Sep 2025 10:01:21 +0000
Manifest next update: Mon 08 Sep 2025 10:01:21 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: uwqItTI6ejCR/V8FweE1gzqGkcu6GTQJNXMgj0fWWPk=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:86:bf:0f:64:0c:78:25:b2:5e:bf:5d:af:6e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Sep 7 10:01:21 2025 GMT
Not After : Sep 8 10:01:21 2025 GMT
Subject: CN=eaeb1a7b208d18820f9cf1d0eaa4786eeb4266db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:8b:09:88:16:cf:14:49:c2:2a:2e:62:c6:
3f:4f:6a:df:12:0f:f3:27:a7:95:47:35:6b:12:67:
67:c9:95:b6:36:95:ed:e1:0d:cb:f5:46:a7:3b:ea:
56:b8:b1:03:52:7b:3a:55:a8:fe:20:79:89:c7:6f:
d9:46:24:d8:b5:07:60:e8:72:74:ab:51:73:0f:64:
f9:89:18:17:5b:65:8d:10:89:8d:19:63:21:69:a3:
5e:bc:e1:8b:9d:dc:cd:ce:26:41:df:f6:32:5f:58:
19:a1:9b:46:b6:57:cc:90:1d:8b:e9:9e:69:35:74:
dc:26:03:ed:2a:a9:61:2d:1d:60:cf:15:14:9b:6a:
c2:83:16:1b:80:bc:59:23:d4:d0:ea:e0:4d:df:d0:
28:3c:0d:67:93:fd:b8:f6:a0:a4:97:b8:ee:08:71:
2f:eb:ac:d1:1f:56:e1:d7:c0:80:c3:50:9e:8f:c6:
e1:86:97:e2:a7:bc:0a:27:3b:19:dd:a8:d2:e8:8d:
75:34:ab:dc:d6:f0:8c:c0:3b:f3:aa:8c:79:c9:a9:
07:86:90:8d:f3:23:6b:97:b3:28:95:5d:5b:d6:bb:
b4:3e:e4:c9:df:27:a4:65:5a:3f:32:b3:45:1a:66:
2d:81:89:c7:12:ce:17:8d:e1:ab:52:25:86:de:2d:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:1A:7B:20:8D:18:82:0F:9C:F1:D0:EA:A4:78:6E:EB:42:66:DB
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3f:e7:9c:8e:6a:f2:a9:63:c2:9e:03:71:e6:1d:46:77:7b:
ad:b4:fb:f6:9b:57:50:cd:ea:e6:cb:cc:4c:47:a4:3d:ff:3f:
89:10:cf:f4:25:6a:5f:0b:db:d7:77:7b:0b:b7:e8:60:5b:03:
41:ec:76:f2:90:d5:81:c5:0e:ff:c8:2c:69:5c:e4:3f:4b:0c:
09:ef:b9:0b:2f:e3:9f:d6:eb:96:59:13:a9:be:0a:75:1f:0c:
7c:2f:af:80:e2:0a:61:4f:fc:66:82:82:b7:d1:c4:da:62:6e:
f1:f8:35:7f:56:48:52:67:7e:d1:1b:a0:24:41:fb:bf:9d:5a:
0c:97:34:62:db:bd:a5:89:df:30:e3:36:0f:91:8d:ba:e8:63:
6b:56:eb:c0:70:24:ad:b0:e7:af:e9:e2:2c:20:e5:1c:b0:ab:
16:77:a7:ef:32:fe:71:aa:02:c0:08:6e:12:ce:3f:49:16:78:
e9:fd:48:30:89:9e:51:43:ea:1d:59:73:70:12:71:9f:11:05:
e5:53:be:e5:cd:11:6e:d7:2e:4a:cc:94:d8:a5:c2:2c:dc:a5:
d6:8a:f0:a1:99:e8:b5:5e:c5:c3:d2:0e:39:ad:f0:bd:bc:aa:
b5:14:81:ce:16:f5:48:8a:9b:a0:55:91:a0:cd:42:36:35:01:
73:7b:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:35 2025 by rpki-client