Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: 8KtsFBnO6rJj/IVN0hW1V01xI/Vs5/Bey7X0z1Q6VY4=
Subject key identifier: 12:51:FA:91:56:38:4F:50:9D:03:66:7C:06:3B:B7:08:A7:5F:97:F9
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019A1ACFBE1E2C47A9685BEED1AF0A1237AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 019C
Signing time: Sat 25 Oct 2025 10:00:13 +0000
Manifest this update: Sat 25 Oct 2025 10:00:13 +0000
Manifest next update: Sun 26 Oct 2025 10:00:13 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: ncD89yeV4FuPNx+auDs4IlueOb8+XDoqHTBLNQ7xuwo=)
2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=)
3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:cf:be:1e:2c:47:a9:68:5b:ee:d1:af:0a:12:37:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Oct 25 10:00:13 2025 GMT
Not After : Oct 26 10:00:13 2025 GMT
Subject: CN=1251fa9156384f509d03667c063bb708a75f97f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:e4:d9:94:88:c6:ef:54:ad:51:ae:d8:c2:
8d:f1:d7:fe:b7:4a:3a:be:36:c6:0b:68:81:51:42:
f4:84:5f:ed:ee:d7:3a:df:5a:d2:5c:2b:16:1f:ac:
4d:40:07:bc:0d:96:8d:b2:b7:68:11:89:58:13:15:
35:dc:20:92:16:26:36:b0:c7:ec:69:47:22:3f:6e:
16:1b:a7:24:88:da:fd:ed:6b:3c:94:db:b6:2a:03:
3f:24:4c:4f:7e:ab:6c:e3:f1:52:19:88:07:a4:36:
f3:0a:6c:7a:85:6b:c3:a0:e5:f4:4a:86:f5:08:1f:
ba:f8:02:24:14:ab:6b:8c:97:62:b2:e4:5c:e1:99:
5f:c3:9e:f0:20:60:13:77:38:c4:ea:9d:ef:ba:0d:
7c:9b:ed:f8:c9:08:b8:ea:32:8f:ef:0a:b8:f0:e2:
57:5c:c7:70:5a:93:a3:ea:bb:5b:8b:07:c6:95:c1:
ac:7a:e5:d6:62:44:0b:ea:d8:df:e3:fb:7c:dc:04:
0c:91:62:07:d3:83:07:84:cf:d5:59:8f:02:3e:be:
e5:1d:67:47:fa:cb:fb:da:6d:e5:9b:73:e0:0b:73:
d1:78:e1:6d:55:40:ab:00:7d:78:62:a7:00:d5:79:
76:28:0f:3e:f8:d8:f2:ef:37:9c:48:54:4a:95:b8:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:FA:91:56:38:4F:50:9D:03:66:7C:06:3B:B7:08:A7:5F:97:F9
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:73:c6:62:49:54:12:29:db:e2:00:27:cb:26:d4:f8:d1:fa:
97:52:ef:4c:3c:36:13:ab:2f:3b:9d:bc:22:42:66:83:a0:56:
1b:b7:20:b1:01:88:a2:2a:36:08:61:ac:a0:46:0d:54:6d:c9:
41:79:94:c9:34:c8:f1:d4:6e:2c:be:1a:29:1e:a5:e6:b3:4b:
e0:70:33:5f:39:d7:8a:9c:61:28:0f:d8:3d:37:27:c3:23:68:
a0:cd:47:4d:97:46:f8:8e:ae:b4:e0:6b:35:5e:ed:20:87:18:
eb:a3:0e:6b:de:83:90:b7:eb:ad:54:25:01:ab:72:77:03:5c:
fe:d1:f7:b7:40:40:9d:3c:08:a7:d9:90:c4:da:58:5a:98:33:
28:f3:af:16:94:c8:47:0d:4a:07:3d:4c:79:6d:ea:ad:22:58:
8b:cf:49:d8:b5:91:fc:5f:f9:05:e8:83:6d:68:0e:61:88:e9:
89:e7:17:52:ab:c1:1f:b3:d4:b5:80:2a:18:3d:c3:66:a0:aa:
7a:9f:db:ad:ee:42:73:7d:b7:02:b7:b2:9e:04:64:e0:ad:2f:
36:95:42:f8:4d:cb:3d:0f:75:cf:a1:82:1b:94:cc:b9:e5:46:
e9:43:72:14:5b:b2:1b:ad:19:87:af:20:b9:25:ef:c4:ca:14:
6d:6b:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:57:32 2025 by rpki-client