Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: 1X0b+0+d+hsRaqdAXFV3bsW6BDZue7d7T9JZGGh68Z4=
Subject key identifier: 66:13:EC:3F:9A:4A:F6:64:6B:85:88:85:B8:D7:B6:B2:E6:C1:C8:19
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 0199221E9FCEBC6D19CD99DBB40433D9B047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: tf10ppmrUbOT9D4LCxvKi7Cgs/rPv0i5x9macuMZgIE=)
2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9f:ce:bc:6d:19:cd:99:db:b4:04:33:d9:b0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=6613ec3f9a4af6646b858885b8d7b6b2e6c1c819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:d7:b8:07:40:4e:75:10:be:f9:04:7f:87:
59:a5:23:25:11:85:ce:b1:2c:f4:e2:cb:29:aa:ba:
59:8b:9b:b5:33:87:be:40:26:8d:49:35:00:15:9d:
5f:b3:28:c6:97:06:45:aa:ce:74:77:31:cb:92:52:
ff:02:6f:b9:72:a3:2d:5f:95:0c:92:e6:ed:ee:92:
58:48:30:ff:9f:8b:0c:76:cd:9a:48:32:fb:a2:14:
a9:7f:b1:9d:4d:21:27:8d:33:fc:b9:12:b5:df:8f:
71:19:44:4a:19:c5:01:22:8d:1d:d2:65:45:73:5d:
21:08:63:50:8f:62:9b:08:9e:10:cf:d9:89:c2:e0:
df:16:5d:51:59:c6:8a:9a:55:87:e5:f0:b0:55:46:
f3:2c:7e:bc:29:ba:1a:c8:6d:24:88:fa:88:a5:50:
73:ae:8a:85:ea:7f:92:0c:ec:c2:8f:dc:9f:0a:5b:
8c:be:f4:e5:02:0e:bf:67:4e:50:b8:17:75:97:b0:
3f:26:47:a1:ae:cc:c3:83:9b:a0:c0:96:43:94:27:
d9:c6:bb:aa:d0:27:fc:89:80:50:03:ce:fc:9a:6b:
3c:df:44:91:7e:d9:05:66:0f:9b:cb:bb:46:2b:62:
b9:20:14:3f:06:c0:8e:2c:af:de:88:8d:4f:42:95:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:EC:3F:9A:4A:F6:64:6B:85:88:85:B8:D7:B6:B2:E6:C1:C8:19
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7e:d0:77:c2:bf:91:35:6e:44:57:26:ee:07:34:89:5a:44:
8d:94:fb:e3:b0:bd:a5:2d:f7:a0:16:e1:f9:5d:59:97:80:d8:
e4:53:65:dc:d8:47:9b:f5:54:3a:09:d5:a5:c8:75:7a:bb:2b:
ff:a4:4f:96:8a:ec:f9:32:db:fd:78:0f:b5:94:0b:6e:c4:d8:
36:f3:2b:a0:56:d6:f4:db:2f:4a:14:e2:28:d1:ca:59:09:47:
86:ca:a0:97:b4:22:bb:a4:89:02:28:11:62:29:cf:31:7e:df:
f6:9c:3b:28:49:76:7f:25:12:79:77:1c:81:76:8a:00:c4:aa:
82:33:54:f0:92:68:dc:2a:f0:4d:2b:f3:4e:80:f7:67:8e:40:
ec:e3:a3:cf:a0:9b:9c:25:dd:fb:ed:03:fa:ab:46:cb:1c:e2:
a0:69:86:e9:3e:e2:cd:d1:5f:42:b9:80:17:d0:ae:54:31:d2:
fc:ef:6f:2e:4b:a0:f8:9f:a9:34:80:b2:0c:f4:d4:0a:fa:09:
ed:4c:2e:71:5f:e5:ed:39:d4:bf:61:00:34:2f:9a:8c:92:93:
71:83:8e:27:c4:ac:46:3c:47:70:92:61:99:e2:80:ab:90:0d:
8c:34:9a:ff:6e:0c:84:0b:c8:39:b6:f0:89:9d:29:37:03:fe:
32:80:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:18 2025 by rpki-client