Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: FSIVnahmaWV2lI6fGNdG5OpUmq4m/6w3wRtTvkVoA28=
Subject key identifier: 94:8C:EF:B0:F0:14:CE:29:B6:CB:F8:4F:08:D5:5F:30:94:F6:9B:7B
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 0199239F783B030987A175DF57C1E5882254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0A7F
Signing time: Sun 07 Sep 2025 10:01:17 +0000
Manifest this update: Sun 07 Sep 2025 10:01:17 +0000
Manifest next update: Mon 08 Sep 2025 10:01:17 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: yOQqm9eUcoYNhVAR7+VR6VTLxfoZ2hGhNt2dXVnHVtQ=)
2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:78:3b:03:09:87:a1:75:df:57:c1:e5:88:22:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: Sep 7 10:01:17 2025 GMT
Not After : Sep 8 10:01:17 2025 GMT
Subject: CN=948cefb0f014ce29b6cbf84f08d55f3094f69b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:ee:c4:2d:47:93:d0:a4:6d:de:86:5e:58:
2e:b9:88:dc:31:ff:ca:a3:20:60:46:f7:b5:5b:62:
67:0c:fd:a9:1a:66:01:64:6a:58:f3:52:fe:c3:94:
66:7e:0d:3a:9c:8b:45:78:65:d7:a7:4a:d6:01:6a:
41:49:c7:5a:fd:e1:cc:04:c4:23:18:b5:df:a4:89:
79:3c:8a:99:df:2f:84:17:c2:53:64:93:12:ef:e1:
f6:a6:90:9f:60:56:0b:d9:d1:e6:6d:a3:62:53:53:
12:45:2f:94:ee:e9:c5:ec:bf:68:c8:d6:4d:62:a8:
f5:bc:d5:51:b8:ae:32:09:9c:e6:de:e3:f8:1c:f5:
4a:f7:ec:5f:20:0b:92:44:11:d3:fb:fc:f5:42:38:
13:91:b3:25:c1:2b:ff:26:53:5b:42:d5:6d:65:68:
a2:84:a7:0f:fd:ba:c1:95:a5:b9:7b:95:9b:7a:7f:
e9:c7:18:0f:77:9a:b7:99:41:26:ce:40:64:3c:f5:
31:07:51:c9:d5:88:f1:ed:7c:53:2d:28:ec:a6:6b:
70:7b:7f:c0:2b:db:18:8d:bf:8f:09:c4:d2:5b:98:
be:cd:3d:2d:50:92:65:d7:ac:ce:67:66:7a:0d:42:
04:13:c2:54:aa:a8:05:80:f2:b6:18:08:df:77:85:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:EF:B0:F0:14:CE:29:B6:CB:F8:4F:08:D5:5F:30:94:F6:9B:7B
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:44:f1:cd:90:c6:59:d4:07:0a:34:ea:b1:6e:6a:f2:36:e5:
7e:7e:a6:76:1d:97:ed:43:d5:70:8b:f2:24:96:c4:19:69:bb:
ac:10:db:b7:8d:13:17:03:29:4a:99:7e:15:f6:b8:b0:cf:38:
d4:41:17:83:5f:df:33:fe:95:d7:70:d2:13:93:79:5f:d7:0a:
9e:bc:91:7b:a8:75:8e:19:26:6a:59:2e:85:bb:26:99:59:59:
69:7c:4d:b3:63:e3:00:b3:f4:ca:2b:f9:d2:3c:9f:f3:0d:99:
40:ed:cf:9b:54:7e:0d:09:10:b2:5a:98:f6:eb:c5:39:59:d0:
76:54:eb:c6:cf:ef:0b:e3:41:1b:f2:10:ee:a4:95:47:2e:34:
fd:b1:d5:35:6d:1e:54:f9:ad:55:47:2d:11:60:9b:a2:7c:ee:
9b:d5:6d:55:e0:57:83:d0:e0:d7:48:3e:4d:0a:04:aa:e7:8d:
be:0b:2e:f7:8e:eb:96:72:fc:8d:70:8f:0c:9c:3a:24:59:32:
24:4c:53:7c:10:b1:19:af:14:61:d8:13:42:03:cc:2d:c7:df:
1e:24:af:95:c2:ca:8d:fe:85:57:b2:a3:b5:8d:54:9e:20:07:
6b:86:8d:01:e3:e2:04:bf:d2:75:82:26:eb:76:53:8a:90:bf:
a9:54:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:09 2025 by rpki-client