Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: /Zh0CeGFn0DhTLZ2HMNo4mnKFLPlnfPEOKhCfbV9vO4=
Subject key identifier: 39:5E:34:23:3D:4F:FC:49:6F:A7:22:83:12:27:AB:20:69:7C:70:B9
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 019A711371D90492CFFAE713C29FA3A466AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: koujXZiT+av+IPvaTeRlfYPL9xQjv2bIs5je20vC1+Q=)
2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:71:d9:04:92:cf:fa:e7:13:c2:9f:a3:a4:66:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=395e34233d4ffc496fa722831227ab20697c70b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:29:60:a5:6d:c9:ba:b7:12:96:25:07:83:
82:62:e3:d7:f8:39:fb:b4:b3:14:60:0b:d4:8e:22:
67:2b:93:f5:bc:4a:5f:b9:ad:94:8f:bd:24:79:42:
07:14:d0:ad:67:ab:62:c2:d1:26:1a:da:99:9c:eb:
dd:6b:a6:5e:cb:05:4b:5e:c2:f3:47:a4:6f:84:c3:
83:86:d5:67:b4:4d:4f:b6:ce:f8:ff:9b:5d:e4:12:
ac:36:77:73:42:66:4d:81:73:30:5f:18:b3:97:da:
af:2d:82:d5:cf:8e:69:1f:45:02:28:a6:8c:53:fe:
f8:ff:4e:08:3e:cc:14:0e:6e:ed:f6:00:54:55:2d:
c9:12:d0:9f:08:93:9c:ab:cd:4f:24:19:c3:e8:f2:
0f:3f:bb:8f:d4:92:b3:3e:3b:71:e9:e3:14:67:7e:
3b:72:b1:6d:6c:dd:82:44:2e:36:22:54:9d:75:70:
f3:fd:56:85:5c:a1:eb:b3:ac:54:fd:6c:ee:2c:38:
e6:55:64:24:60:27:50:3b:d5:44:f5:78:7e:4b:4e:
2e:70:4d:81:ef:0c:74:16:88:ba:20:4d:f5:7e:9f:
d7:7a:c3:64:58:be:49:55:a1:df:38:68:7c:54:b1:
88:4a:16:57:95:9f:90:9a:a1:16:b2:fe:c3:44:f5:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:34:23:3D:4F:FC:49:6F:A7:22:83:12:27:AB:20:69:7C:70:B9
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:0a:f8:97:ff:cb:bb:13:d6:e1:26:9e:c3:26:30:0e:2d:
95:6b:59:0a:2c:45:8c:44:01:85:9f:b6:83:2f:fa:ee:c8:ed:
c8:66:53:39:f5:46:37:c1:e8:39:50:48:f1:3e:d5:62:a0:8a:
2b:bb:dc:05:aa:56:fa:2d:50:e3:3e:27:a5:9b:23:88:0d:2e:
30:68:1a:27:4e:81:64:82:ed:62:6c:9b:4b:89:72:ad:36:76:
08:5d:f2:69:f9:e0:8b:b6:f9:f1:e8:7d:b4:1d:d0:41:0f:1c:
69:fa:61:02:00:0f:4f:1c:e6:1b:6a:71:2f:08:b9:0e:0d:ec:
41:f4:6c:8f:58:79:76:34:19:17:f6:04:6c:c1:24:92:4e:c2:
07:bf:94:d4:09:fa:48:e1:ab:f7:d7:a3:c9:80:1d:87:0f:a8:
e0:e6:16:14:fc:a1:7e:e9:8d:0e:e8:9b:e2:70:ec:9f:b2:37:
7a:d8:2e:bf:e7:a4:9a:f3:75:5a:cb:57:ab:e5:bb:89:79:e9:
a9:0f:35:51:91:64:63:e5:d7:5d:b8:98:2d:1a:bb:2f:55:57:
f6:38:65:51:8f:be:17:db:62:ec:db:50:34:69:fb:ba:dd:65:
5e:e6:20:be:84:02:80:e9:43:26:51:f4:0d:9e:b3:40:a8:3a:
6d:4b:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:31 2025 by rpki-client