Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: BR64zw26be8gvJZ9pXnTon6jGJxBLCG6GdgcdtEYQjo=
Subject key identifier: CB:71:CF:23:D3:4C:71:EF:81:BC:94:42:72:12:D0:3F:0F:47:D8:09
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 01992255F56B327704F7CF52BBFC0F95D4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 10BA
Signing time: Sun 07 Sep 2025 04:01:22 +0000
Manifest this update: Sun 07 Sep 2025 04:01:22 +0000
Manifest next update: Mon 08 Sep 2025 04:01:22 +0000
Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: erFVJln0Ed6LD8OuFqWK1DXd+hA4XwUuwCmahaRvM/Y=)
3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:f5:6b:32:77:04:f7:cf:52:bb:fc:0f:95:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Sep 7 04:01:22 2025 GMT
Not After : Sep 8 04:01:22 2025 GMT
Subject: CN=cb71cf23d34c71ef81bc94427212d03f0f47d809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:44:c9:f5:1b:45:69:63:bf:6c:70:e7:67:
94:8e:50:61:6a:44:39:6d:9f:f8:cf:1f:9e:d4:2c:
37:28:47:67:f4:0b:66:8e:95:58:51:9a:33:1c:7b:
b1:82:18:14:88:9c:9e:ac:07:c8:ff:8f:62:ac:73:
7d:85:d5:7e:6c:c6:e4:f7:03:57:48:ee:10:9a:59:
37:20:4b:4c:dc:71:23:81:77:9d:b2:01:48:cf:d9:
d1:6f:93:57:59:7c:4f:68:ac:e5:71:6a:62:ef:7d:
42:36:46:cc:15:6b:4a:64:f8:37:26:16:bb:e5:3d:
1d:18:63:8a:87:7d:5e:ab:c9:1d:71:9e:dd:87:14:
39:a4:04:f4:f1:34:2a:25:b3:08:35:22:a5:85:96:
41:9e:cb:ff:e9:9f:d8:63:e1:15:84:41:23:9d:03:
a8:71:bc:da:24:d2:f4:8a:90:86:8f:7c:0e:40:90:
38:e2:87:69:e6:4a:5e:6d:67:04:99:02:24:85:8f:
c3:37:d5:8d:6a:d8:79:b0:cf:43:d0:9a:ec:70:b3:
0f:4c:a7:ca:f9:a8:8e:f8:77:aa:30:c0:ae:67:f1:
86:c1:61:2c:a2:7f:f6:57:32:21:30:0a:a0:1b:b0:
54:a5:ee:6f:66:af:fd:1d:f8:ac:8f:d4:49:22:50:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:CF:23:D3:4C:71:EF:81:BC:94:42:72:12:D0:3F:0F:47:D8:09
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:44:c5:18:70:9d:b0:91:e8:69:cc:ee:72:64:99:01:70:54:
15:3b:18:f1:b3:1b:8e:45:e8:18:ad:b1:e8:82:4d:db:dd:ac:
6b:30:cf:af:02:71:f8:cf:db:24:be:fd:00:2a:e3:b9:1e:92:
98:4a:20:31:5c:9a:0c:73:c8:de:ac:09:00:48:21:16:2a:bc:
15:57:6c:f8:2e:9b:b4:03:51:12:8e:0e:0c:ba:9d:52:f0:53:
55:d3:4d:8e:18:b0:62:66:e8:05:a3:81:cc:aa:b6:6f:4d:8f:
d9:c0:3e:3b:bf:8c:77:f7:82:3d:ed:6d:10:93:0e:6c:60:03:
41:eb:05:29:ea:97:7a:85:10:d4:00:19:45:ab:03:bc:a3:70:
29:17:96:04:c0:c9:f2:84:b0:b9:d9:44:6d:99:82:78:42:5c:
3f:71:52:78:0f:05:2c:b9:ea:b4:75:a5:0a:40:23:b3:89:0c:
81:e6:8e:46:58:0c:76:4b:3f:dc:23:64:7f:9e:98:c8:42:8d:
7a:90:0c:b6:05:f3:39:0f:66:6d:5b:5f:c4:c5:bd:23:b4:5d:
dc:83:18:b4:60:ff:56:f9:a9:c0:f0:db:5d:68:33:2e:35:9d:
cd:ba:c8:56:2d:68:49:82:08:73:bc:d7:a6:c5:a9:e3:e8:83:
24:e4:b3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:50 2025 by rpki-client