Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: MvKPH8MGCtFH2wkxEzQLhV6ukYM6u3Qk0PZwR6FXx1Y=
Subject key identifier: 94:B0:11:DA:0D:D6:34:8A:30:D4:53:89:ED:CE:3E:A9:16:C0:F7:61
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 0199372634424C11D7E62D573C035E07D30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 160E
Signing time: Thu 11 Sep 2025 05:01:14 +0000
Manifest this update: Thu 11 Sep 2025 05:01:14 +0000
Manifest next update: Fri 12 Sep 2025 05:01:14 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: cyVnyHDvAiMdH6dOzo8LTBwAPekVlBVyywK2ePVmiYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:26:34:42:4c:11:d7:e6:2d:57:3c:03:5e:07:d3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Sep 11 05:01:14 2025 GMT
Not After : Sep 12 05:01:14 2025 GMT
Subject: CN=94b011da0dd6348a30d45389edce3ea916c0f761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:fc:6f:d3:0f:b1:51:da:1f:c3:59:a7:2e:
52:7e:c1:b8:53:b5:90:fb:e4:71:c6:fc:bc:f3:10:
99:99:e8:84:f3:a2:7b:99:5c:75:4b:72:c8:3f:e4:
3f:f8:f2:c6:db:08:ae:c7:2f:e0:d8:ea:fd:0a:2f:
b0:93:dd:44:33:6c:ed:02:f1:eb:0e:1e:97:7a:42:
75:47:bd:bc:04:db:26:91:91:81:9e:9c:0b:a8:00:
d8:cb:9a:03:18:46:5d:29:04:ea:c7:62:4f:97:79:
6a:1c:29:33:db:c9:ef:60:02:f8:5e:7c:66:87:d9:
d7:b9:d1:8a:33:7b:ec:23:90:ce:3f:6b:ff:f3:96:
67:69:e8:78:4d:0b:54:8a:2d:8e:cc:29:9f:a8:12:
93:4c:7a:d6:d6:e8:be:1c:d5:e6:ad:43:5c:40:08:
9d:b7:ac:2f:58:6c:7c:d6:29:0e:77:6c:68:7d:e8:
22:fd:ad:77:96:0f:1a:41:54:97:e3:17:db:8d:5d:
c1:ec:6a:00:5a:06:d3:a1:3c:b3:02:51:16:24:a6:
c5:6a:4b:1b:d4:36:c8:26:a5:f2:cd:0d:8c:22:d6:
9d:59:a6:89:15:44:95:3d:92:8d:4e:4f:2f:b2:15:
41:52:4e:cd:5d:fd:2a:c3:e2:42:91:79:e7:51:06:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B0:11:DA:0D:D6:34:8A:30:D4:53:89:ED:CE:3E:A9:16:C0:F7:61
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:60:57:28:0e:a4:8a:dd:ac:f3:54:25:e1:e3:f1:a5:42:31:
b6:62:02:1d:44:d4:88:da:fa:72:3f:1f:dd:8a:d4:18:6f:64:
8d:65:b6:c7:e6:9a:22:cf:79:b0:fb:e7:44:ad:fa:11:98:c8:
2d:0f:bc:f1:b2:c8:07:42:88:cf:2e:aa:6f:98:bc:7e:37:f4:
1f:c3:6a:c5:ac:34:a4:1f:a1:a1:47:59:c4:17:8d:a1:b3:88:
9d:52:42:7c:07:b3:8d:6d:72:27:bc:20:6e:f0:df:75:d4:ae:
ef:43:8c:a3:c3:55:0e:54:49:24:6e:82:7d:84:d7:16:ab:da:
00:a4:33:e9:2e:0f:32:2e:83:95:b9:2e:ab:9f:43:4b:23:be:
fa:c1:7c:5f:4a:49:c7:c7:b4:bc:19:dd:f2:74:d2:95:d9:0b:
6b:da:ed:d1:30:a3:19:bb:5d:65:41:c5:9f:e1:c1:91:c1:4e:
55:d8:cf:e9:e8:03:88:e2:42:62:c2:11:43:68:d0:33:33:49:
b7:24:00:a9:ba:f6:eb:8d:3e:42:bd:81:c0:7a:2c:fd:ef:3e:
3c:cd:a7:56:a4:e3:e0:01:85:a5:6f:80:f8:f1:09:34:69:e5:
80:84:06:b4:0a:92:26:f7:43:21:f1:69:65:b2:f9:2d:ea:85:
1e:5f:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:09:08 2025 by rpki-client