Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: 3TGzXphAlA7VsVXeUA6cq3SWVSROTec4el8muYLvteU=
Subject key identifier: 1C:1E:AB:E3:A1:45:42:A3:48:F3:7A:B5:01:D3:D6:D2:18:3A:86:31
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 01993915714ACFAAA4E86854B4895BA7ACE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 0628
Signing time: Thu 11 Sep 2025 14:02:10 +0000
Manifest this update: Thu 11 Sep 2025 14:02:10 +0000
Manifest next update: Fri 12 Sep 2025 14:02:10 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: KIE4PxfeYAyBmaiNlP5Kx+ADIsuU0I5/+tbWzXYkWWM=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:71:4a:cf:aa:a4:e8:68:54:b4:89:5b:a7:ac:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Sep 11 14:02:10 2025 GMT
Not After : Sep 12 14:02:10 2025 GMT
Subject: CN=1c1eabe3a14542a348f37ab501d3d6d2183a8631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:70:b4:96:2f:4c:d6:8d:36:02:0d:2b:dc:
3c:15:b6:4c:74:14:26:9d:c4:11:97:bf:52:bc:1d:
bf:69:23:4d:6e:59:29:3f:37:15:10:5e:0b:9f:8b:
22:e2:a7:ab:8b:d0:98:92:51:d8:35:6d:5d:27:93:
65:fd:2b:9f:9c:92:25:af:57:a1:21:a6:d3:2a:7d:
60:92:15:4a:18:7a:4c:d2:0b:23:68:f7:49:72:00:
8f:fa:a5:23:bb:ae:52:f4:73:13:44:48:19:ac:d8:
74:d6:d0:e2:ee:09:07:4d:1c:f7:7e:b3:bd:3a:0b:
c0:46:89:bd:cb:6c:37:9d:1c:dc:8e:ba:86:7c:b0:
6a:17:b0:99:1e:72:1a:96:0e:6a:d5:42:8b:4e:b4:
e9:af:9b:d1:69:17:1c:01:7f:a9:86:35:47:51:49:
a2:5f:a2:6a:ce:8e:77:67:91:02:eb:60:55:19:07:
7f:4f:cb:ba:68:04:ab:f8:2b:37:18:7c:7b:e1:93:
21:69:55:db:58:1a:77:2c:a2:54:dd:17:4f:bd:36:
df:d5:bb:98:3e:be:da:3f:66:9b:a7:b6:9c:c3:a4:
54:93:23:2a:49:c8:9f:04:c8:51:33:35:6c:92:3d:
1b:62:e6:f7:cf:a1:4a:44:93:bb:a0:25:0e:fd:cf:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:AB:E3:A1:45:42:A3:48:F3:7A:B5:01:D3:D6:D2:18:3A:86:31
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:da:81:33:71:8f:2d:a5:b2:10:cc:1c:31:66:d8:68:f4:8b:
7d:02:87:36:f3:1e:21:b4:aa:70:01:4e:39:af:d1:ec:e6:53:
bd:c3:97:c3:72:79:32:f3:46:d1:6a:d8:b8:1a:b9:c5:3a:28:
68:ba:88:ad:96:90:5b:75:f1:3c:27:cf:9b:83:21:f2:76:c8:
b8:b9:f0:cc:22:de:10:69:2a:2a:a0:ae:9b:4f:df:ab:6d:8c:
a9:41:48:eb:71:07:41:23:99:f4:2a:d3:10:6f:d2:fb:41:16:
a0:d6:9e:c0:4e:ec:f8:b7:e8:64:2b:0a:8b:c0:00:0d:98:a9:
f0:9d:60:7c:26:27:57:52:c2:c7:7a:7e:3f:f1:5d:e1:4e:27:
a0:91:1e:42:df:fa:c7:3f:bc:9e:fc:c5:85:98:02:19:7a:2a:
df:9b:14:4a:e9:69:03:35:b5:3d:30:a0:1e:c3:df:fd:9c:d5:
69:5a:ca:16:44:4e:26:35:c0:ea:dd:8e:d5:40:e3:67:3a:b5:
92:a9:b1:22:2b:b6:f9:eb:c5:c7:a6:4d:87:9c:2c:10:7b:4e:
5a:52:49:8a:22:1c:b4:a9:c1:be:c4:5c:98:18:3f:f0:b9:10:
54:53:99:d2:3a:5f:12:d2:9b:91:1b:0a:8c:d5:fa:86:21:4f:
b3:fd:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:34:35 2025 by rpki-client