Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
File: 8CDLT5tfebnaa0gnutnFSiqAxTE.mft (raw, json)
Hash identifier: XDpzeESYKcdz5V9j4K0Nc0W4cvqJ320DKw1YnOl9+RY=
Subject key identifier: AA:B4:B4:D7:84:B8:3C:7B:CA:F1:78:9E:9E:D4:35:36:C8:56:06:B9
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Certificate issuer: /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial: 0199228C5E37035BB5A344707C46C5A03E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
Manifest number: 0F08
Signing time: Sun 07 Sep 2025 05:00:48 +0000
Manifest this update: Sun 07 Sep 2025 05:00:48 +0000
Manifest next update: Mon 08 Sep 2025 05:00:48 +0000
Files and hashes: 1: 8CDLT5tfebnaa0gnutnFSiqAxTE.crl (hash: e5l95qO116nHZbb0OpzbeWql3yrwjwv30z/bnBTqQMI=)
2: amkS5SoIvujCi9yce4d8VftUldc.roa (hash: +cELHuiQeJpKMXecyPF27q6ZAbek7zvwZNYTMIlI2SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5e:37:03:5b:b5:a3:44:70:7c:46:c5:a0:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Validity
Not Before: Sep 7 05:00:48 2025 GMT
Not After : Sep 8 05:00:48 2025 GMT
Subject: CN=aab4b4d784b83c7bcaf1789e9ed43536c85606b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:da:6d:7e:e8:17:8f:57:c3:fb:79:03:97:
a2:0b:28:ac:62:4b:86:62:8c:ee:dd:83:73:d2:74:
c0:d0:7a:1a:67:ec:8b:03:30:b7:b5:5e:8f:57:31:
91:af:9f:ea:83:10:40:94:f4:34:8a:e8:dd:f8:6f:
72:11:de:83:79:d5:54:29:cd:f2:ef:86:76:6b:30:
d1:2c:21:6e:02:8f:08:2d:ea:45:68:95:80:04:af:
bc:49:d0:f6:e3:31:cf:c7:56:83:51:a6:13:64:65:
a3:ae:3e:fb:ee:bf:3e:b8:ec:75:69:ec:4b:53:c3:
16:45:d8:6a:71:d6:db:c9:29:63:75:05:a3:ce:4b:
f8:9c:dd:eb:92:94:19:ff:da:ef:90:a6:92:b7:2d:
e8:8b:84:1d:7b:f5:d3:77:00:46:d1:4c:e6:85:74:
c6:39:9e:ca:35:9c:37:70:93:ba:61:0e:56:21:2c:
52:c2:cd:be:5c:30:3e:94:a4:53:fc:11:f7:39:5a:
7c:8c:ac:00:c7:2d:7b:ca:46:7c:ae:c3:b4:17:1d:
21:a5:03:7d:d7:9c:e1:fc:6a:4b:0f:ef:e3:16:0f:
6e:46:7a:76:8d:17:d8:e5:9d:bf:84:1c:0b:3a:a0:
8c:36:ff:7a:85:d9:4e:46:16:3d:47:4a:c7:8e:6f:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:B4:D7:84:B8:3C:7B:CA:F1:78:9E:9E:D4:35:36:C8:56:06:B9
X509v3 Authority Key Identifier:
keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:15:75:7c:cb:44:f9:79:9c:92:63:0a:39:6a:5a:06:89:d1:
e7:b5:37:d6:1b:0b:d4:3d:88:8f:44:74:f5:e1:53:5e:5f:a2:
73:c3:6e:b2:d5:0e:cc:7c:1d:42:1a:f2:1f:01:86:0a:db:f0:
86:0f:24:c4:07:a4:f5:4f:f1:7a:78:21:92:35:99:93:58:7f:
53:55:29:06:2d:c0:64:ef:8e:c4:17:a6:5f:9a:bd:e7:7b:11:
32:e0:f8:4e:a0:14:8f:ea:60:69:fc:eb:b2:93:6a:16:11:93:
44:85:81:ff:e0:c9:ad:c9:b4:ad:6b:0c:b0:a8:c6:c9:8a:4b:
c8:3f:22:7e:bb:a7:ce:51:05:f3:d9:31:fd:2d:65:a4:7c:06:
7c:5e:2b:98:df:fd:63:74:cd:45:af:6a:3d:32:38:02:3d:16:
d1:78:2f:c9:d1:11:35:00:3a:d4:38:ea:97:6c:c4:7d:fa:be:
1b:0e:b5:27:1d:e6:33:d7:a7:32:69:7e:22:d7:a9:29:d8:84:
92:ce:0b:0e:41:e4:d6:b4:8f:d8:98:ea:a8:a3:7e:d0:ea:ac:
57:1b:41:02:3d:43:ee:82:9f:1e:f6:c9:f9:30:5b:61:d4:4e:
a2:08:df:92:76:c8:c4:bb:59:ca:29:8d:c0:c4:3d:a6:75:c5:
6c:f1:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:20 2025 by rpki-client