Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: Gb54rqdn3slNbqNDeQZDfL+Tj2SfqMHe5uPE56aQd6U=
Subject key identifier: 79:5A:A8:99:F3:6C:8B:43:D4:CD:8C:3D:52:60:4F:D3:F4:62:E0:9A
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 019A7149B32AB880CEADA7C7944F7724C9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 1132
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: r/UIbJJkkHcj5LfbVVZSZ7qg7MLpSwNfsDfUE4KtRlA=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b3:2a:b8:80:ce:ad:a7:c7:94:4f:77:24:c9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=795aa899f36c8b43d4cd8c3d52604fd3f462e09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:7e:3f:e6:85:7f:0f:5d:3c:f7:f0:4f:ab:
7e:93:8f:ca:16:27:03:a9:0f:0b:f7:0e:e5:62:88:
99:33:df:35:3f:17:0f:83:dc:1b:a8:3b:9f:7c:fd:
e6:fc:38:53:d4:e4:76:3e:c8:bc:60:68:a8:8c:93:
96:9b:59:c3:31:f8:af:99:c7:e8:df:15:a4:b1:35:
1b:05:67:00:65:ca:1d:93:58:77:fe:08:6b:f3:d7:
f1:69:e6:29:b0:e1:26:52:71:bc:14:9d:e0:0e:18:
34:e2:6a:9e:7d:2e:6d:e3:83:ba:d9:12:13:e0:d7:
00:40:69:20:c5:46:14:a8:c9:40:40:8d:59:ea:ad:
b9:16:a2:b4:7a:97:7a:ed:99:d0:a9:bc:1a:1c:a6:
3d:32:14:55:a6:18:87:f8:54:9d:f1:4a:f8:89:fb:
12:e1:60:51:0f:67:0e:27:89:82:b4:f2:37:1f:b0:
fe:14:14:ad:3e:06:ba:10:14:cd:18:3f:81:ce:14:
13:6d:f1:03:20:99:4e:7e:2c:79:e5:83:91:6a:a3:
6d:26:e2:9b:56:9a:8f:0e:12:2a:1b:6c:23:10:7c:
e7:ba:64:1b:35:15:e2:eb:ba:ea:4b:d9:51:e3:f6:
62:00:c4:46:84:42:c2:d3:5a:41:72:ee:7f:ac:8c:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5A:A8:99:F3:6C:8B:43:D4:CD:8C:3D:52:60:4F:D3:F4:62:E0:9A
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:24:1c:93:76:22:6a:c6:72:eb:68:3b:f7:03:33:ac:e0:ae:
5d:60:99:a1:78:e4:76:38:5e:8d:38:ea:d4:f6:c3:d0:1f:20:
fc:89:97:7d:a0:5f:05:01:8b:7c:bf:9e:15:a0:6b:82:f3:94:
4d:28:d1:29:57:19:a9:ab:82:ba:c6:93:08:db:c2:a9:6d:3a:
88:ec:c8:35:53:1d:81:24:5f:2b:60:ed:b7:11:c1:93:ba:aa:
7e:d9:87:a1:71:25:77:47:f0:58:f4:d8:5d:73:88:fd:05:07:
06:7e:1b:6e:5f:39:b4:27:c1:26:93:a3:82:4c:3a:f5:dc:c0:
95:9c:63:f1:4b:ab:1a:f2:dd:bc:5f:d0:5c:ca:48:86:6f:02:
d4:6c:5f:45:22:09:e3:6e:83:4e:e2:43:af:b1:54:06:74:70:
63:b5:74:1a:0a:fb:f2:65:68:96:2e:13:1a:77:8e:6e:14:1b:
2b:30:ac:71:29:76:57:65:65:46:c0:f4:df:93:ee:23:e4:5d:
91:2b:3c:9c:3a:6a:3b:0c:23:04:eb:62:b5:17:65:bf:72:23:
f6:d8:bc:ed:4a:9d:79:4a:56:c6:c5:83:b4:ef:ca:61:cf:82:
8e:4a:95:fe:36:7f:c9:19:b9:ad:06:a4:17:18:8b:f1:5b:31:
b4:7e:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:41 2025 by rpki-client