Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
File: n8IY9nJDtH2gIf2j_rRBR0s865Q.mft (raw, json)
Hash identifier: cKth7ux0kN3iamsZo39zXN9x5VrH+4bfqmxsHQXZcIo=
Subject key identifier: FA:A2:CA:28:05:19:41:C2:0D:8A:34:4D:17:46:BF:81:97:5F:BF:44
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial: 019923A022FCBC3723BBA863B40FD58EC731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:02:01 +0000
Manifest this update: Sun 07 Sep 2025 10:02:01 +0000
Manifest next update: Mon 08 Sep 2025 10:02:01 +0000
Files and hashes: 1: n8IY9nJDtH2gIf2j_rRBR0s865Q.crl (hash: L4SaphZi8Y3PzhlaWBZwf8I6sxMWAWQRf9abGQZr50o=)
2: sYA6KeIU16Bd58c84OvJJaCKPKU.roa (hash: tX4ZljxiPaFmNoY3hS/p0i7eqE1TuxWDswzU5ZDhiFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:22:fc:bc:37:23:bb:a8:63:b4:0f:d5:8e:c7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
Validity
Not Before: Sep 7 10:02:01 2025 GMT
Not After : Sep 8 10:02:01 2025 GMT
Subject: CN=faa2ca28051941c20d8a344d1746bf81975fbf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:45:c2:2e:12:e2:8c:5f:de:18:0f:cc:67:
6a:b2:11:43:9f:2f:f9:ca:1c:43:b7:bc:8c:2f:5e:
36:5b:6b:ee:bf:bd:32:26:8b:50:52:d1:c2:94:85:
1d:ba:c3:f6:d4:49:08:98:05:4b:94:b9:98:38:bd:
a4:f5:fe:f0:c4:e1:a0:12:c1:9c:21:74:de:be:df:
ad:5a:09:94:38:04:86:43:a9:e3:f4:0a:df:0e:1e:
2a:af:5d:a7:8a:7a:7c:16:60:af:cf:62:73:01:7c:
ec:1b:66:2a:de:52:e0:45:11:9f:e9:9a:21:1e:e7:
fa:c5:1d:82:1d:b6:0a:e8:1a:62:92:8f:5d:34:1d:
13:44:70:75:8e:5b:53:be:d8:72:3f:a4:35:c2:a4:
86:ca:52:6c:29:4b:ee:2f:8e:5e:90:e4:22:89:3a:
4a:8b:b8:ac:f7:f2:ef:f9:e6:56:60:cf:1e:fc:0c:
fb:2e:e4:54:d5:05:39:31:83:35:0b:7b:24:93:dc:
2c:3b:e0:1a:88:a7:54:ba:db:30:96:6f:94:ac:cc:
61:ac:9c:d0:c8:2c:1e:74:28:af:26:b1:b3:cd:09:
4b:3f:8b:84:d2:9b:ea:32:14:19:09:84:06:71:51:
98:45:c2:04:bd:b1:23:8b:60:cf:77:8b:d7:67:d4:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A2:CA:28:05:19:41:C2:0D:8A:34:4D:17:46:BF:81:97:5F:BF:44
X509v3 Authority Key Identifier:
keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:66:7c:73:1e:5b:dd:a1:8f:f7:ad:17:fe:1b:2a:0d:b4:8a:
44:0c:c8:9c:ec:ef:7d:6f:72:df:ad:a0:fe:28:f2:83:90:e8:
78:b2:42:94:8e:41:2f:5c:90:5f:d0:65:2d:94:6a:80:ad:66:
6e:b6:aa:00:0e:ad:65:1f:3e:2b:5b:2c:1c:7e:4e:52:25:d9:
76:12:8f:45:5d:a3:55:9d:d3:ab:25:f5:39:04:34:ef:e1:0e:
d7:76:a1:c8:45:23:1e:b2:77:f4:a4:a4:8c:31:a3:a8:b3:5e:
48:ff:47:0e:67:70:36:ed:cb:bd:4d:af:c0:dd:12:7a:07:49:
e7:ec:ff:7b:ea:6c:1c:5d:53:6a:a5:22:b3:52:81:23:33:68:
96:a3:1e:78:cc:4a:63:77:91:cb:8e:0f:58:d0:e6:0f:21:ab:
03:1a:0d:34:55:80:b9:76:72:66:5d:64:f4:39:27:10:96:9b:
f4:b9:7f:f0:81:ea:f9:06:2c:9d:fa:32:a3:9e:bf:5a:ce:06:
da:bb:32:a9:6c:bf:8e:fa:63:8a:98:ff:30:a7:1a:95:1e:18:
e4:2d:aa:10:19:6d:d4:d3:34:33:e7:2e:1c:73:34:c6:2c:d0:
02:c1:24:6f:87:79:66:e7:bb:08:82:22:63:35:e3:ee:cc:25:
52:09:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:27 2025 by rpki-client