Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: 5PK93KaWXFsFV/qB1hIhG+zkOoZ8DnDUgGR92zdYqac=
Subject key identifier: 70:D9:0F:AA:84:E1:54:5C:0E:73:E5:96:38:90:25:FF:35:34:13:2D
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019938E032E422F29E3E3AA6B6640F5B0BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0F41
Signing time: Thu 11 Sep 2025 13:04:01 +0000
Manifest this update: Thu 11 Sep 2025 13:04:01 +0000
Manifest next update: Fri 12 Sep 2025 13:04:01 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: s8WjDi6tpzAqBnpZCWIg5zf8XirhUFQCHYy8TtW1XLo=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: Z9i6om7Xm-VJTFYr4Gx0uAR_icw.roa (hash: ANNmvdhb68U9bMYUn5YDoB+t5R72eGhNlvH1jCjqt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:e0:32:e4:22:f2:9e:3e:3a:a6:b6:64:0f:5b:0b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Sep 11 13:04:01 2025 GMT
Not After : Sep 12 13:04:01 2025 GMT
Subject: CN=70d90faa84e1545c0e73e596389025ff3534132d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:82:71:50:b2:69:c3:29:0e:43:b9:29:b6:
3e:89:fa:f7:5f:71:af:c3:a9:d4:6a:a8:4b:1b:14:
ee:50:0e:c1:3e:f3:ec:da:8a:3c:28:b2:2b:fc:22:
06:c6:60:b8:a2:33:1b:e7:f1:92:9e:cd:e5:13:6a:
2a:b0:50:d2:87:2f:58:cf:84:08:fe:0e:e7:ad:b5:
5a:85:33:1e:e2:fc:5e:65:c1:f3:95:15:39:32:a1:
84:3b:cc:24:d5:38:2c:9f:cc:e9:7f:48:ce:99:86:
87:6b:91:5a:8a:65:30:79:d8:49:d0:f2:6f:d0:7a:
5d:27:fb:dc:89:6d:ee:5a:d7:89:b7:a7:95:fa:21:
db:6f:cf:ff:4e:bd:c4:02:d6:9c:2a:f7:cb:11:a5:
c1:0f:04:f5:cb:c2:54:b9:38:b1:cd:3d:89:66:01:
c6:13:0a:52:e0:e1:67:33:9e:cb:30:a7:2a:ea:aa:
12:56:61:71:ac:d5:86:7c:f5:1a:dc:02:b7:f1:7d:
ed:1a:42:ba:02:01:1f:3e:dd:13:c7:5f:39:5c:e7:
98:84:33:d7:e3:29:f5:80:8f:57:ab:41:c7:b8:b5:
91:9e:57:37:96:a7:e0:95:9f:98:e5:5f:a1:f4:ec:
98:5b:ac:34:bf:82:1d:b6:9d:63:a9:d4:f4:7c:41:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:0F:AA:84:E1:54:5C:0E:73:E5:96:38:90:25:FF:35:34:13:2D
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5b:3e:ca:e1:52:97:75:8b:66:91:a4:ed:22:f9:95:95:f6:
d3:9c:26:f9:ef:91:d8:95:9c:2b:6a:1f:59:4d:b8:2c:1a:39:
89:33:df:37:f7:22:55:22:82:21:72:99:2b:d9:2c:54:70:77:
38:a4:eb:b4:f7:80:3b:e4:13:81:54:cd:d8:be:4d:b5:52:80:
e8:e3:a2:50:22:09:cb:da:25:75:ea:84:be:5b:fa:0f:67:5e:
1f:b2:02:d1:86:f1:4d:c0:99:12:f4:aa:80:8c:8f:a9:c8:bf:
b3:41:8e:1a:68:4b:de:0e:0e:1a:40:00:15:13:2a:3b:8b:fa:
d6:89:12:ab:62:93:5f:74:f8:fc:87:9c:59:48:e8:5a:eb:7a:
a3:e6:f4:d4:41:59:d5:3d:63:ae:c5:13:30:3e:f0:dd:75:7a:
e6:7c:33:4b:3e:c5:c8:68:a5:2f:35:7a:44:58:a2:01:98:45:
cc:e8:c0:43:71:e8:3f:ce:a7:1a:2d:6a:57:fa:9a:26:f1:a0:
3c:d5:53:86:97:7a:3f:a9:17:0f:0e:78:75:62:df:f1:1c:d9:
11:43:80:d9:35:96:7d:55:f5:b1:52:26:ef:e1:d3:7b:4e:d8:
43:17:ee:db:0c:d3:45:40:97:59:ed:88:d6:a8:7d:dd:21:a4:
38:90:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:00:20 2025 by rpki-client