Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: ApQYD8Io74+FLaXavIGsjPbWbL5NFLRS0FrIQePNE+A=
Subject key identifier: 48:E4:0E:D7:34:67:A9:54:2D:F9:03:A1:CB:25:EC:F2:59:A9:91:B0
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 0199221E5BD066BF672B3E38BC3BF4CBBF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:00:38 +0000
Manifest this update: Sun 07 Sep 2025 03:00:38 +0000
Manifest next update: Mon 08 Sep 2025 03:00:38 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: 9zPQZBta24SDXTRLU3xMRwOAQB06tYkZYW/1tZ8c9jE=)
2: vf_PL7Z26am-bUWHqusGVLE57ns.roa (hash: lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:5b:d0:66:bf:67:2b:3e:38:bc:3b:f4:cb:bf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: Sep 7 03:00:38 2025 GMT
Not After : Sep 8 03:00:38 2025 GMT
Subject: CN=48e40ed73467a9542df903a1cb25ecf259a991b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:52:67:11:13:a5:08:85:29:51:58:67:29:
d8:de:57:77:4e:17:b5:73:f8:9d:0d:3b:07:e9:ab:
7e:52:0d:4b:94:47:8c:00:01:7a:fa:b8:af:b3:01:
a9:db:82:1c:5c:a9:13:a1:7a:36:35:b6:22:25:5b:
ee:c3:f0:c4:70:d9:28:98:90:96:6a:69:e4:df:4c:
e3:95:78:38:ec:5d:bc:8e:84:12:22:e1:f9:1a:e2:
26:18:d3:52:f5:24:96:d0:b1:b4:bc:ab:b8:e5:e8:
90:28:21:fc:5e:cf:82:d2:c3:88:7e:e7:82:2c:56:
f4:77:38:2e:d7:d8:4f:7f:8b:cc:14:84:4b:ef:a9:
14:c2:c0:cf:ce:37:1d:51:6f:63:b3:04:c8:e9:92:
55:ed:43:76:40:b7:32:26:6c:16:35:d5:f2:2d:17:
15:0f:24:1b:5f:46:51:d0:84:fe:90:01:e8:cd:ac:
ed:65:26:49:85:12:29:d7:a7:ed:6f:12:cf:39:c1:
cb:a9:a8:b0:f8:eb:03:44:83:62:d7:81:45:3c:84:
51:c2:39:bb:d0:52:a5:41:b1:d3:6e:00:d2:ee:3b:
4f:f6:c5:cd:4f:00:60:8a:57:b7:d1:17:2e:5d:94:
34:48:6d:15:92:93:76:37:0b:31:a3:1b:7e:d2:79:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:0E:D7:34:67:A9:54:2D:F9:03:A1:CB:25:EC:F2:59:A9:91:B0
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:82:ab:ef:b0:bc:48:2c:10:35:cc:26:b9:13:e4:e0:e6:2a:
67:d8:4e:84:70:c4:ef:ea:28:fd:80:ba:36:8b:1d:e6:ba:e0:
11:51:9c:ef:47:51:44:d2:e5:c5:33:7d:66:0f:02:54:29:1b:
d8:91:a6:56:cd:e9:77:c5:37:5c:40:fb:81:35:6f:ef:1c:f4:
7a:68:47:3d:45:fa:c2:dc:dd:b6:a6:ab:74:37:39:32:54:30:
19:a8:b1:3a:3e:74:98:b8:7b:f2:16:7b:cd:37:09:09:af:d0:
fc:bd:ea:c4:61:cc:73:03:65:ae:a9:d2:60:f0:01:1e:13:61:
e0:b3:21:17:f5:f5:8e:30:ce:e0:86:43:0a:bd:57:55:71:3e:
87:13:67:f9:af:d8:23:9e:f2:00:38:88:93:cf:78:dc:e2:0f:
37:61:a7:b5:7d:16:8d:d4:25:61:73:8a:9c:36:ef:2e:6c:82:
9c:fa:9a:db:f2:58:65:ee:d1:bc:b7:e4:53:14:88:a6:fa:87:
ca:79:dc:97:f6:59:fa:8e:de:52:7c:50:39:d6:ca:ec:9c:fe:
65:80:df:6d:94:0c:53:ed:c6:f7:30:99:ed:a5:5c:0d:a3:12:
00:49:18:ea:62:5e:2a:d6:08:2d:da:a5:cc:03:ca:be:a5:f0:
e4:b8:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:26 2025 by rpki-client