Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File: 8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier: v+BbdB8JF0ylMWuovkD0ieXdhfzPxbv73fcH0f25AmI=
Subject key identifier: 70:39:BF:BA:1D:F7:16:0D:E5:91:ED:9F:FC:BF:21:A7:62:8C:1B:A0
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial: 0199228D04A38204F569AFC662D4BA438B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number: 0FDC
Signing time: Sun 07 Sep 2025 05:01:30 +0000
Manifest this update: Sun 07 Sep 2025 05:01:30 +0000
Manifest next update: Mon 08 Sep 2025 05:01:30 +0000
Files and hashes: 1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: pvshYvakNA4z0sM4faRC5GgqfiqkPAVWrIIev6oFjkU=)
2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:04:a3:82:04:f5:69:af:c6:62:d4:ba:43:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Validity
Not Before: Sep 7 05:01:30 2025 GMT
Not After : Sep 8 05:01:30 2025 GMT
Subject: CN=7039bfba1df7160de591ed9ffcbf21a7628c1ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:82:32:be:2d:25:bc:11:01:9b:e0:78:09:
8b:b2:05:8c:16:cd:bc:d0:e5:3e:71:bd:16:9a:e6:
65:75:7c:6c:0e:54:85:8e:82:08:c4:b0:9d:0d:88:
7e:13:8a:9e:8f:4c:26:f3:a6:c7:e6:fb:d4:ad:66:
a4:29:19:c4:ad:8a:54:a0:64:f4:b7:a3:98:6c:98:
9f:91:2f:8f:ca:aa:57:7b:aa:a4:df:c2:24:bb:47:
b6:24:3f:9a:ec:26:57:4d:e4:af:f8:dc:6c:d9:17:
70:76:fa:aa:f2:7d:25:d4:c4:dd:00:68:9a:82:84:
d3:85:c2:b1:91:e1:b6:8c:8b:43:9d:20:96:f0:6c:
fe:18:ec:1d:43:c6:ef:98:4e:4d:0d:92:6f:0c:b6:
47:71:3c:84:a6:e0:27:3b:87:e1:a1:dd:64:e3:11:
9f:75:a5:d0:a8:67:4b:63:f0:dd:ee:3a:73:f1:c1:
bd:c4:c4:89:dd:69:de:a8:fb:32:cf:47:f4:65:8c:
85:52:d1:4f:a5:0c:74:07:fe:29:3c:d3:a6:aa:df:
9b:41:53:c9:bb:47:43:6b:cd:3c:c4:aa:e6:eb:68:
60:54:90:62:6e:d7:71:fb:8b:ff:20:60:fc:a6:0c:
2c:54:a7:70:6f:91:97:67:42:36:e4:04:87:ff:6d:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:BF:BA:1D:F7:16:0D:E5:91:ED:9F:FC:BF:21:A7:62:8C:1B:A0
X509v3 Authority Key Identifier:
keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b2:12:7f:96:3d:59:c9:0a:c1:b8:ee:10:96:d3:d6:08:bb:
50:2a:88:1e:fc:0e:d1:3c:0c:72:93:5c:bc:fb:5e:56:43:c0:
1b:b9:98:4b:98:73:e3:9a:fb:e2:36:fd:f7:79:6e:14:43:a1:
2e:4b:10:0a:55:35:78:b2:15:98:f3:6e:5b:da:b7:db:8e:ba:
40:2b:87:0f:4b:cc:3a:6a:42:74:ad:92:43:50:f5:18:98:4b:
15:96:b6:55:79:6d:d6:5d:42:72:82:66:72:c4:6a:60:de:98:
b2:28:56:d2:0f:48:b1:1a:5d:e9:4f:03:f2:2b:2b:a9:5e:79:
b7:d0:70:83:91:4c:61:b3:0e:79:e4:7d:48:b8:0c:da:f5:91:
15:4c:9b:41:2f:c6:56:47:8f:77:7e:d1:77:4c:58:c5:a6:a1:
60:14:8c:7d:90:67:51:42:94:1d:77:21:49:e3:63:f5:c2:7d:
06:21:d7:87:17:0f:55:fa:87:f8:51:30:2b:c4:42:f8:88:e0:
ee:0b:18:5d:40:5c:e5:5e:dd:04:9f:48:c0:82:7a:af:c4:fb:
76:6e:23:91:5e:f9:9f:24:d3:66:fd:83:30:02:bb:bc:70:28:
3b:78:87:23:56:67:20:72:19:5e:23:4b:56:9f:3e:28:76:8f:
05:91:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:41 2025 by rpki-client