Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
File: id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json)
Hash identifier: ziag4TV6/w/zy4uMJJ5CGERvw1SelUf+t+//XOMFVtQ=
Subject key identifier: F7:95:20:6A:0B:91:00:76:0B:5A:6C:9F:3D:1A:B2:70:FC:5A:27:32
Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
Certificate issuer: /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Certificate serial: 0199228C4D01968638199DFA2A7CB49575BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 05:00:44 +0000
Manifest this update: Sun 07 Sep 2025 05:00:44 +0000
Manifest next update: Mon 08 Sep 2025 05:00:44 +0000
Files and hashes: 1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: q1oRiRrju8uCrZdD1G1A+xcorscKP+yquHIOPagEbKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:4d:01:96:86:38:19:9d:fa:2a:7c:b4:95:75:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Validity
Not Before: Sep 7 05:00:44 2025 GMT
Not After : Sep 8 05:00:44 2025 GMT
Subject: CN=f795206a0b9100760b5a6c9f3d1ab270fc5a2732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:96:96:f8:a0:9b:d8:e8:b5:fc:07:c5:e7:
80:34:67:54:70:6f:fa:09:f0:b8:67:9c:18:cc:13:
78:ec:34:46:c2:6a:e7:ad:5c:91:04:68:30:8c:94:
3c:16:88:cc:21:68:87:f7:64:d7:6c:33:f5:1f:53:
47:c3:ea:9e:51:6f:14:38:4c:db:71:5f:26:39:2a:
42:cf:3f:df:e5:60:4f:db:0f:89:e5:2e:58:6d:d3:
83:ec:72:87:4f:66:55:21:00:26:b7:5e:33:a2:11:
82:f3:7d:98:36:72:33:d5:a1:e2:f0:4f:05:26:b0:
61:b8:61:43:d3:29:5b:89:23:d7:c8:87:09:f6:f8:
cf:40:a7:2f:4d:e8:73:30:ad:1e:fb:0d:d7:87:35:
a3:cf:de:46:43:5f:88:85:5a:6e:8a:e8:2c:80:e1:
55:b7:5c:a6:8c:70:f5:cd:51:44:f7:aa:57:79:10:
7d:03:c5:15:43:15:a1:e3:5a:ac:63:69:de:5a:8d:
c3:df:06:47:3d:9e:0e:9e:ac:5b:7a:d9:bb:c3:04:
8b:94:49:e6:4f:63:92:9d:e9:59:bc:13:a3:f1:04:
52:58:6f:b6:61:2a:23:de:77:ee:3c:8e:d6:4c:80:
10:8d:4c:4b:ec:48:72:28:76:54:e7:dc:75:24:4a:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:95:20:6A:0B:91:00:76:0B:5A:6C:9F:3D:1A:B2:70:FC:5A:27:32
X509v3 Authority Key Identifier:
keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:30:91:46:74:df:c1:ff:4c:a2:5e:de:75:ee:a3:01:f9:58:
88:3e:30:1f:ac:7d:a6:c9:50:4f:c5:5d:b1:66:16:e8:5f:dd:
17:1c:ab:8a:c4:62:eb:ae:88:e9:8c:19:a2:26:b9:f8:57:4c:
fa:77:26:63:c4:67:e3:c1:13:0b:64:d7:db:5c:c6:46:37:35:
bb:93:c5:4f:56:28:76:d1:74:85:f4:72:78:b1:5f:6f:f9:bb:
f8:d1:b3:e1:67:71:f0:26:8d:42:5d:a6:26:99:15:50:62:5c:
67:2f:00:d8:c2:79:1c:e0:ea:f4:6f:db:36:fd:19:85:27:9b:
fc:cc:9b:59:c2:2d:6a:fe:a6:96:4d:2a:91:3e:e2:87:a5:d8:
a8:84:d3:47:b2:a9:ec:b8:5c:c9:78:44:d1:a5:9c:16:04:1e:
87:34:32:52:3d:bc:e2:5f:d2:f8:13:8c:b5:29:b0:a4:90:61:
ac:66:e7:df:ed:88:b8:cd:1f:bd:c3:4e:59:be:80:96:29:ad:
9e:c2:52:ef:7d:5d:10:51:7e:39:59:bb:1f:08:ce:78:6a:a6:
bf:8c:6b:1f:be:08:57:be:3a:6e:86:05:14:44:62:9e:f2:ca:
aa:18:e0:82:a2:7b:c4:e3:f1:fd:64:4e:a9:19:7f:61:a4:4b:
b5:8e:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:09 2025 by rpki-client