Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier: GjDCm3dZZMPIdBIyDGAgIHNiNtCBhxuR5idDsxlODe8=
Subject key identifier: B0:A9:7E:67:36:A2:B2:B7:8D:60:D6:0A:30:D3:EF:6B:19:F7:DA:11
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 019A258AE1897B375FDD57CB4A551C3249D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number: 14AB
Signing time: Mon 27 Oct 2025 12:00:49 +0000
Manifest this update: Mon 27 Oct 2025 12:00:49 +0000
Manifest next update: Tue 28 Oct 2025 12:00:49 +0000
Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: RPlxgug/Wv8CUb+zNfzWEXUhF4ZkbvrDcN8/RzrQNs4=)
2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:e1:89:7b:37:5f:dd:57:cb:4a:55:1c:32:49:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: Oct 27 12:00:49 2025 GMT
Not After : Oct 28 12:00:49 2025 GMT
Subject: CN=b0a97e6736a2b2b78d60d60a30d3ef6b19f7da11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:c9:bb:c2:92:43:57:09:57:8b:4c:32:e3:
7c:ba:37:a5:6d:c8:cd:52:df:b6:e9:95:0c:7e:2f:
fd:9f:ae:b2:c4:c6:f1:83:36:ed:e4:37:5e:42:d9:
8e:09:cb:53:4f:b7:58:0c:40:98:45:7f:ad:54:e9:
a5:1f:ed:5b:56:d8:5d:75:ec:9e:9d:e8:64:e6:ad:
e7:40:6e:59:a7:7b:46:b3:b6:d3:66:12:a3:e4:f1:
8d:cd:09:dd:ff:05:e7:9a:69:71:c3:b3:4e:74:c8:
d4:26:77:98:e1:90:12:f3:82:24:41:ad:0d:db:21:
7f:35:2a:81:ec:68:cc:5f:bc:e5:be:70:d9:65:95:
e0:95:cf:21:f4:fb:01:6e:43:db:df:6e:1d:61:a9:
8f:4a:dd:26:2a:82:ae:4f:41:88:2e:eb:94:e0:d4:
50:7b:8c:9d:cf:92:8e:0e:74:ac:51:a1:fb:7e:64:
e4:0f:dd:df:0d:2b:bf:25:98:ae:44:5f:42:da:6e:
96:7d:a7:d6:62:39:2c:d9:c1:1f:b6:aa:13:dc:ec:
71:21:49:16:a7:91:ce:f7:7a:d3:83:59:7b:c9:88:
e4:4b:cf:c5:cd:54:b8:12:74:c5:37:de:3a:1f:3f:
72:f3:b0:ec:8c:6e:da:a1:c3:d5:1e:f0:fc:49:5a:
5b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:7E:67:36:A2:B2:B7:8D:60:D6:0A:30:D3:EF:6B:19:F7:DA:11
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:2d:73:d9:c8:a8:b5:68:b9:3c:14:ea:33:a3:c6:59:ef:
80:71:f5:66:8c:aa:2a:93:35:25:67:c3:58:a4:32:47:5c:78:
a8:7c:fb:5b:d3:50:70:a9:be:79:f4:38:1b:68:ab:c4:89:29:
4d:df:88:a0:f5:f4:f6:e7:39:c0:9d:8a:7b:bf:26:7a:37:c1:
82:04:42:df:21:55:8b:64:a5:70:8b:f1:95:af:89:f4:eb:48:
0c:ee:a7:70:8d:96:29:6f:7b:fa:6a:fe:97:9f:aa:4a:9e:12:
35:39:47:e8:6c:69:1d:c3:6c:ae:84:51:b9:12:78:53:b8:41:
6b:0b:d0:c7:f1:c3:e8:5a:57:fa:70:be:63:1d:32:c4:a7:83:
a4:c3:52:7b:1c:90:17:50:f8:31:7d:d9:3d:1e:28:45:3f:44:
14:e1:76:64:f6:eb:27:cb:00:df:8e:64:14:f9:91:ff:f0:8a:
3a:3f:78:0d:a8:45:47:fe:37:27:fc:79:1b:e0:a7:fe:b5:1a:
29:21:76:31:d5:ed:38:c4:e6:5c:3d:7c:ac:24:d0:d5:26:60:
79:21:94:af:5a:98:d0:86:e3:f1:73:db:9f:bb:f2:9c:fa:78:
b7:3e:ea:d9:ef:79:44:80:64:5d:57:24:3e:97:b5:99:4c:fc:
84:f1:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:58:04 2025 by rpki-client