Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: DQwvsoKeSAmvR9siBnArBmHaRTrzBmTe5a/Deh9bwlg=
Subject key identifier: 5E:0D:4F:9B:34:F5:A3:06:CB:BB:4C:0F:CA:BF:C2:75:0C:89:17:ED
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 0199225568C3631A933C8F1DFA23B8F2BFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 12E5
Signing time: Sun 07 Sep 2025 04:00:46 +0000
Manifest this update: Sun 07 Sep 2025 04:00:46 +0000
Manifest next update: Mon 08 Sep 2025 04:00:46 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: PKu47bZNcrzgf2rjtDzV1wNzaDQbz2dc0neMlOHxgCA=)
2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:68:c3:63:1a:93:3c:8f:1d:fa:23:b8:f2:bf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Sep 7 04:00:46 2025 GMT
Not After : Sep 8 04:00:46 2025 GMT
Subject: CN=5e0d4f9b34f5a306cbbb4c0fcabfc2750c8917ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:94:94:12:74:c4:84:20:fc:14:e7:38:1f:
d3:22:7e:34:d0:31:4d:0f:71:c7:ae:ff:12:5b:d8:
91:d2:ae:09:7a:07:d5:f1:85:c4:e2:75:54:7c:5b:
cb:5c:c7:53:78:9d:d0:0b:c0:91:79:11:e4:9c:c8:
88:0f:3f:d0:b9:c6:a2:3b:ab:07:ee:78:9d:f6:52:
11:85:c1:45:bb:dc:c9:01:76:56:7d:fb:1f:37:98:
8f:1c:8d:92:09:d8:09:4e:86:fc:05:49:af:a7:c4:
e5:64:a1:ff:b4:4e:42:e0:79:30:b7:4e:72:8d:70:
1b:94:bd:00:09:aa:fe:0d:f2:d7:6c:14:91:83:ec:
13:a7:43:bd:26:9c:c8:c6:4d:ac:3d:c7:e1:ba:64:
2c:b0:8e:a3:3c:9a:7a:26:bd:ae:f9:63:61:5d:31:
36:40:3c:31:b3:69:b6:40:71:d8:78:a6:d8:4a:aa:
a3:77:88:83:f0:a3:70:af:15:63:67:d5:44:c2:78:
42:07:c3:97:b3:95:83:1f:19:d3:93:9e:05:5c:5a:
aa:6f:80:1c:f8:fb:04:10:15:1f:62:9c:63:bd:c2:
2b:4b:14:67:2c:4c:b8:07:73:08:16:04:ac:64:cc:
ce:cf:74:2b:3d:1f:05:2c:d2:82:97:fb:fb:8f:2b:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0D:4F:9B:34:F5:A3:06:CB:BB:4C:0F:CA:BF:C2:75:0C:89:17:ED
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:1b:2c:84:a5:dd:14:8f:36:ae:43:75:4f:78:f8:21:c3:98:
cd:cb:0f:60:04:9f:ba:05:bd:65:fe:72:3e:36:77:64:59:f1:
57:d7:01:f1:8b:e5:c3:03:78:68:37:a5:fc:a1:61:01:5d:1d:
02:a4:32:10:05:b0:cc:d1:81:dd:78:84:87:b9:0c:bd:66:88:
64:a5:89:e0:af:74:50:39:6e:d7:a6:12:ae:b4:10:fa:21:45:
bb:47:d2:05:18:b4:eb:8a:7c:12:04:e0:38:cf:a5:c2:ce:2d:
24:d7:3a:b7:e3:d2:11:b5:6a:69:00:e1:f9:f7:06:3a:16:4d:
a2:bd:d3:a2:3b:f6:d5:47:a1:1d:5f:3e:a1:9a:5b:de:92:7c:
c1:7d:ed:f6:26:b7:57:68:35:cc:a3:99:7c:55:25:ab:16:16:
dd:eb:21:70:a9:73:82:e7:2d:b7:9c:c8:f3:de:dd:05:88:52:
75:4f:3d:2f:c8:b6:ea:e1:cf:73:ad:d7:ca:89:04:7f:30:3d:
ac:4a:89:98:a2:99:78:ce:1e:df:95:ab:3f:0a:91:fc:46:e3:
d7:10:db:d7:e7:8d:1c:0d:3a:e5:a7:46:10:54:aa:a2:35:82:
1a:f0:9c:99:83:c0:7d:d2:16:c8:87:77:67:13:91:c1:b3:10:
f1:fe:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:33 2025 by rpki-client