Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: UTewW8iDh20eOERcq5yAxCjB7vmzOV8ZHsPaT6NPOR4=
Subject key identifier: D1:5A:8D:D9:D5:F2:5A:C3:68:07:2B:81:0A:17:E2:86:AE:05:AA:4E
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 01992255C347DB36985F3A9155AD2077DA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 04:01:09 +0000
Manifest this update: Sun 07 Sep 2025 04:01:09 +0000
Manifest next update: Mon 08 Sep 2025 04:01:09 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: a85ZZcAzwawzdGtdlOHQnTO3ITFmhIBTzT2xf+X+H4c=)
2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c3:47:db:36:98:5f:3a:91:55:ad:20:77:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Sep 7 04:01:09 2025 GMT
Not After : Sep 8 04:01:09 2025 GMT
Subject: CN=d15a8dd9d5f25ac368072b810a17e286ae05aa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:c4:32:4d:57:f8:18:0d:03:14:43:82:64:
a8:12:b7:c3:b0:67:75:bf:8c:a3:cd:65:0b:3d:ec:
ea:20:9e:55:73:1d:a0:dc:41:9d:ec:de:2d:1a:76:
34:3a:bd:74:78:43:41:5e:ac:c0:ff:b9:a9:ce:39:
df:05:0c:cc:8f:5b:10:bd:cb:0b:3c:d2:b7:b4:78:
33:6c:3b:15:e2:d6:cd:e1:93:2b:b0:be:f6:a3:00:
dc:ce:66:33:b9:4d:e1:16:3d:63:eb:98:c4:9c:4f:
27:77:f7:17:72:ab:dd:54:09:5e:89:9e:99:60:3a:
12:40:67:31:7b:75:28:94:5e:12:c6:97:91:a7:27:
b6:b7:c5:91:6b:8e:ab:cc:44:4b:5a:28:a6:33:98:
b0:25:9a:f9:f1:be:b6:81:68:91:a8:92:9f:d1:50:
5b:09:33:5c:3c:09:26:da:6e:f3:78:a9:01:f7:aa:
b5:e5:41:c2:10:41:88:b7:a2:6b:63:a4:d6:65:70:
39:cc:c7:d3:35:fd:c7:e0:77:a2:8c:59:36:66:ee:
6d:51:ed:c5:f5:d5:e4:05:02:16:dd:5d:57:b1:7e:
1c:a9:50:d5:21:02:31:68:4e:47:56:85:8e:62:70:
20:df:41:c7:4c:ea:a2:95:8d:db:31:22:ff:31:f5:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5A:8D:D9:D5:F2:5A:C3:68:07:2B:81:0A:17:E2:86:AE:05:AA:4E
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b6:d1:80:16:ac:1c:62:89:79:7c:e1:5e:96:6a:e0:c3:c7:
6e:d1:68:df:4c:21:0b:c0:4a:26:97:09:04:db:f5:6b:ea:ff:
c9:d6:ca:24:e7:c0:3f:fb:e7:31:27:03:d0:40:25:a5:07:bf:
71:e3:7b:fe:f6:46:16:cd:7a:cc:5d:7d:90:e4:38:ba:6a:01:
c3:b9:c4:e0:e9:3a:72:26:99:d0:61:64:4b:9d:28:58:af:9c:
fd:61:70:d3:45:9d:f7:11:49:84:48:c1:d7:1f:3e:bd:3a:70:
19:2f:4d:1c:01:63:c4:a5:73:88:24:26:87:27:48:91:2a:0c:
2e:9b:35:84:10:84:41:a9:ec:e9:2c:2c:32:91:13:06:dd:72:
9b:a2:c4:1d:de:33:ad:58:2a:c1:fa:4a:f1:d1:f1:80:89:9b:
ec:1a:1a:5d:03:dd:af:4e:b3:62:65:4e:19:cb:28:59:fe:60:
ee:36:d1:e6:05:1a:29:aa:2a:d1:72:fb:25:e8:8a:3a:ad:9c:
d6:05:77:54:36:43:86:a5:0a:79:10:98:67:a7:52:c3:f6:2f:
04:cf:97:41:54:2c:81:1a:4a:ee:0d:de:2e:cd:c2:ad:52:6d:
37:07:4f:ff:42:6c:df:28:92:e7:74:39:3a:89:09:6f:86:a8:
7e:f9:6b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:13 2025 by rpki-client