Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: 934JB3YFUPs7MciKCH7CXjBk2EckYG9TMxI6gZQICaA=
Subject key identifier: 03:D8:64:56:7B:C9:ED:63:F0:77:CD:39:FD:98:9A:F9:BC:A7:37:48
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 019935375E802692222744308E29DA901522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 20:00:44 +0000
Manifest this update: Wed 10 Sep 2025 20:00:44 +0000
Manifest next update: Thu 11 Sep 2025 20:00:44 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: 5IOrjhh9TPGWaxhMkfnzBb1SEPH7900/e+rAPeuyil8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:5e:80:26:92:22:27:44:30:8e:29:da:90:15:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Sep 10 20:00:44 2025 GMT
Not After : Sep 11 20:00:44 2025 GMT
Subject: CN=03d864567bc9ed63f077cd39fd989af9bca73748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:21:80:90:f0:92:ef:df:5e:5f:b7:45:14:
1f:1c:6e:13:1b:64:16:79:1c:97:82:af:e5:5c:f1:
f5:7f:5e:fa:12:9b:c8:a3:a4:33:b9:69:43:eb:aa:
14:cd:e3:a3:27:cc:17:9b:81:ca:5b:72:51:8f:90:
d8:11:32:cf:d9:0e:1d:05:01:92:bd:ec:e2:00:ee:
04:98:2d:98:d3:3a:b1:1b:d9:5d:cc:38:12:ad:2b:
29:46:14:30:af:b2:a5:fe:6f:9c:95:7b:9a:e1:1d:
8e:73:ed:e3:5a:6d:27:34:e3:e9:ea:09:88:1b:9b:
0f:b9:13:29:68:b6:da:e9:fe:15:70:47:de:22:74:
af:d0:06:b9:02:62:22:fe:51:57:05:53:68:da:da:
de:17:67:80:f0:57:51:bc:ab:bf:d3:a3:c4:60:58:
83:b9:df:96:4f:78:7d:a5:16:1b:57:cc:eb:22:7e:
85:c8:bd:48:65:43:77:54:4e:b2:e5:9c:80:d0:80:
38:10:8a:0b:ce:8d:0b:ea:4d:78:2a:33:11:59:c7:
91:c4:1d:01:ba:28:eb:eb:d4:3c:f5:bc:09:2e:36:
44:08:04:61:b0:2c:36:80:39:1e:13:78:33:cc:1e:
f2:16:8e:9e:8f:a2:56:43:c9:4d:e9:0a:14:1a:fa:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:64:56:7B:C9:ED:63:F0:77:CD:39:FD:98:9A:F9:BC:A7:37:48
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3b:7d:a3:02:c2:31:3f:a3:57:ea:48:35:59:38:d0:4c:68:
6b:58:dd:c9:9f:a8:7e:44:30:02:e2:37:9a:e1:4c:63:7c:9d:
d9:5c:99:ed:a7:0b:8a:55:11:cd:bb:ec:ea:94:4f:47:83:6c:
23:17:55:0d:c6:fb:eb:b5:51:33:81:11:29:e4:e7:54:20:83:
04:cb:e3:1b:f2:ec:fe:6b:db:8e:35:6e:e9:8b:af:a3:5f:07:
56:f5:b5:6b:0a:62:d8:64:b5:b4:5f:c5:dd:be:f4:01:cb:4b:
70:4f:44:1c:c8:f7:a3:1d:5e:98:f7:b7:ca:8b:80:00:e6:8c:
ce:a3:11:27:53:96:6b:28:b9:51:1b:0f:c7:d1:d4:c2:d9:cc:
fe:f6:f3:b4:de:b1:2c:b4:32:27:a2:d2:86:6e:87:64:5f:de:
d9:09:d4:97:94:50:25:58:ac:a4:13:bb:31:18:5b:b4:94:0e:
12:c5:38:72:46:35:c8:6b:b2:be:7e:2d:91:ef:51:a9:18:a6:
4f:e2:d9:d0:b5:1a:4f:bc:72:9f:f5:30:a6:88:ef:a1:c9:40:
8e:e0:c6:a7:41:99:c8:0c:30:07:fc:5b:a5:b7:26:68:ac:4e:
53:d8:07:1d:d3:42:f6:21:83:f5:7f:80:1c:e8:af:57:98:c3:
d9:8c:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:50:33 2025 by rpki-client