Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: r/AAR9HPn+GYTuYdFJeze8wYHqqVuTIxwZaQvdYVC7E=
Subject key identifier: 87:02:16:7A:84:D1:1B:CB:2A:00:56:F4:FD:69:36:DA:D8:54:DE:BD
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019935376140C64E9AB13A95BACE0C9BD113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1565
Signing time: Wed 10 Sep 2025 20:00:45 +0000
Manifest this update: Wed 10 Sep 2025 20:00:45 +0000
Manifest next update: Thu 11 Sep 2025 20:00:45 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: MYK7D4mRP10nF2i0sWWj9IaYyMxwvhlOM6ekJpE33t8=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:61:40:c6:4e:9a:b1:3a:95:ba:ce:0c:9b:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Sep 10 20:00:45 2025 GMT
Not After : Sep 11 20:00:45 2025 GMT
Subject: CN=8702167a84d11bcb2a0056f4fd6936dad854debd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:98:af:09:b4:bb:5a:41:4c:f4:ab:01:42:
2f:58:c4:d4:f1:80:86:fb:d9:f4:70:c2:b7:49:3d:
44:dd:7b:3d:2a:6b:a8:92:66:82:0d:88:f3:de:4c:
f2:fb:94:7a:20:cf:cd:5e:1a:6f:bb:8f:c0:f4:4d:
1d:9b:ee:e9:0c:3f:3e:e5:ba:be:c6:7c:ee:28:3e:
ea:d3:a5:77:c8:23:60:75:55:da:c8:17:04:d8:dc:
c9:ae:6a:74:79:b5:4c:08:56:6c:d1:5a:b3:57:74:
2a:05:fa:08:dd:f8:93:a3:5d:a6:b8:a8:de:71:5e:
91:46:dd:bd:68:0f:a8:e6:21:40:fd:2e:f7:9a:f6:
53:bd:6e:d0:32:cc:ff:0c:a1:72:7e:8f:58:58:b8:
4e:10:67:8f:81:23:c4:4e:f1:bc:bc:0e:68:3f:d4:
6d:95:7b:fb:c2:e2:01:a9:d0:a6:c5:f9:06:b3:49:
5b:a0:d1:9f:85:bb:a9:d7:c8:b3:c4:19:f0:66:e4:
66:7c:17:33:74:3f:3a:11:0d:ce:33:b4:7d:c1:0b:
7d:4b:9b:00:04:0f:c7:f4:48:49:52:bd:e6:8f:1f:
6b:c5:19:82:d1:31:14:67:00:23:b7:63:21:82:ee:
1a:66:c2:9e:50:f2:ed:36:89:d0:94:b6:f0:d6:ba:
36:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:02:16:7A:84:D1:1B:CB:2A:00:56:F4:FD:69:36:DA:D8:54:DE:BD
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:2d:fe:07:8b:a2:0a:e6:7e:86:fe:09:c8:45:30:d3:bd:
8a:3b:73:01:a3:f7:6d:92:c1:84:13:9f:3c:0c:6a:21:30:4e:
f3:e6:05:d3:2b:91:31:cf:aa:c9:21:15:1e:95:8c:fe:dc:82:
5f:38:f7:7b:4d:e7:d8:92:ac:6b:58:12:66:24:65:52:15:5d:
7f:f5:74:b6:f4:71:fd:92:9c:6e:b5:49:5d:16:d0:a7:82:b3:
9d:c7:86:ba:56:08:5d:c5:b0:45:d4:df:9c:7f:72:09:d5:5f:
f5:63:a3:c3:3f:e9:44:38:19:a1:3c:70:85:42:9c:06:1d:c1:
8a:2f:0e:21:68:19:3e:0b:84:cc:ea:09:a1:12:01:ee:1b:36:
37:fb:41:b3:f8:06:00:c5:59:7b:9a:13:5f:77:63:62:4d:26:
50:d8:8b:eb:ae:93:28:5e:10:95:fb:0b:8d:5c:64:2e:18:4a:
84:48:e2:bf:31:87:81:9a:fd:53:fe:19:a9:14:3d:4b:c0:88:
25:f6:58:13:bc:f4:3f:d0:28:ce:e6:6c:69:80:4c:dd:f4:c9:
f6:95:f5:da:1b:77:3a:5f:2a:8b:dd:ce:5d:fb:41:17:3e:f1:
1e:45:26:a8:ba:2b:ae:f0:e1:f2:3a:0e:13:a3:c0:37:b8:45:
8e:1d:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:51:46 2025 by rpki-client