Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: sI/pakHC0UANh/psF3CUbXIs5Zr3VJT1/Sv7WfoaGpk=
Subject key identifier: 91:7E:D3:2D:73:CB:AB:F9:81:BE:97:08:DD:38:CB:A0:7C:C4:DD:3B
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 01993ACD89FB520E9FD759B30520385BF640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 0619
Signing time: Thu 11 Sep 2025 22:02:52 +0000
Manifest this update: Thu 11 Sep 2025 22:02:52 +0000
Manifest next update: Fri 12 Sep 2025 22:02:52 +0000
Files and hashes: 1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: xiNEoghe7JydnUPr/ibjXtEkuG5GY7IyNmNyQXMiJjI=)
2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:cd:89:fb:52:0e:9f:d7:59:b3:05:20:38:5b:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Sep 11 22:02:52 2025 GMT
Not After : Sep 12 22:02:52 2025 GMT
Subject: CN=917ed32d73cbabf981be9708dd38cba07cc4dd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:f5:01:f1:70:10:e0:62:74:dd:ad:69:3e:
cd:ed:b7:15:3b:bb:71:31:cd:ed:fd:f5:4b:c1:da:
f3:14:9f:68:5e:02:8e:9f:d7:38:30:e9:10:e6:ea:
aa:c6:34:3e:22:50:7a:d7:29:2d:e6:50:29:97:2e:
c9:3f:c5:8e:fa:30:46:b5:32:8e:ea:a6:8c:e6:5c:
9e:d7:b3:86:61:19:0c:15:91:07:38:b2:32:97:74:
48:12:82:25:f2:9d:98:94:aa:b9:97:3d:fa:08:4d:
24:64:68:8e:ec:76:d1:a7:67:c5:e6:33:3a:2b:ba:
d3:9e:e4:ac:1b:1a:80:0a:a7:6d:c5:8d:2d:22:66:
d4:4c:2a:b2:53:be:e2:ce:0e:6c:6a:e3:7f:82:12:
21:3b:62:06:2f:1b:cf:05:06:f0:35:fe:5d:f7:fd:
0f:29:0e:b6:da:da:4e:be:f4:8e:57:ff:32:f9:eb:
57:3e:96:b8:1c:6d:63:a9:98:77:4e:7b:84:5d:d1:
8a:e6:84:78:50:6b:7f:0c:3e:4d:3a:93:e7:f3:9e:
ea:3b:27:f6:43:c9:f5:5c:fc:88:f7:6c:81:54:c9:
72:f3:45:0b:4d:c6:27:42:9a:77:67:b7:08:de:b0:
92:d3:3f:0e:20:11:7b:de:51:a5:cd:9d:bf:ba:39:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7E:D3:2D:73:CB:AB:F9:81:BE:97:08:DD:38:CB:A0:7C:C4:DD:3B
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:15:bf:e9:05:be:f4:98:ae:e5:23:ac:0b:7b:d6:f9:67:ce:
36:e0:35:e5:d6:15:b2:03:2f:b2:e9:2c:18:f1:33:81:0b:1e:
d5:45:98:c4:c4:1d:43:b5:25:ca:42:70:d5:17:58:b7:8c:e2:
48:47:97:b5:a4:bd:62:6a:3c:6f:8d:33:3a:e8:9c:2c:61:c2:
04:cc:5e:94:27:aa:4c:2b:d2:b4:0c:ba:8b:c6:98:7a:23:24:
d3:c4:36:c0:99:6d:c3:42:ce:df:cc:02:ec:a7:3f:12:e5:3a:
fd:90:14:b2:52:6f:46:67:1d:89:29:f8:4e:35:bf:f8:f5:9c:
b1:26:a2:3c:51:75:fa:5c:c4:ed:5c:84:d4:b8:fa:9d:ce:1e:
33:fe:53:8d:5d:33:b0:77:04:7e:06:a2:5d:85:5f:e8:09:fc:
c4:04:6e:66:cf:45:6d:7b:dd:e1:d7:6a:d5:fb:36:c3:bb:15:
75:0d:c7:f1:26:b9:99:fd:f7:f6:75:3b:74:b9:6c:f5:57:a6:
48:58:5e:0f:91:c4:4f:ed:23:de:87:b0:e8:56:37:10:ad:cb:
d7:fb:68:fd:7b:d3:36:84:49:d3:7c:a6:de:1c:50:e7:90:fb:
4b:a5:bd:b9:02:82:5e:de:4a:8b:5b:17:17:0e:94:5f:b8:a3:
85:a6:de:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:05:33 2025 by rpki-client