Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: 148qrUScogxGLWQxjJFvCnnsQuH1HPj1O3InkYJ/1R8=
Subject key identifier: 37:E1:D1:38:FC:33:A0:17:02:50:40:41:98:E7:54:FA:D3:0E:3E:23
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 019A73018B8720B85928331F9D35E9060957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 0682
Signing time: Tue 11 Nov 2025 13:01:12 +0000
Manifest this update: Tue 11 Nov 2025 13:01:12 +0000
Manifest next update: Wed 12 Nov 2025 13:01:12 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: +qTwMAeH6sHcNJ3r3oSavlWXKQcNsSN7Q3431+lZKe4=)
2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:8b:87:20:b8:59:28:33:1f:9d:35:e9:06:09:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Nov 11 13:01:12 2025 GMT
Not After : Nov 12 13:01:12 2025 GMT
Subject: CN=37e1d138fc33a0170250404198e754fad30e3e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:ac:7a:8a:42:6d:b3:a9:0b:92:cc:c5:4a:
ec:bd:48:32:98:9a:43:85:51:a1:b3:63:c5:db:52:
e6:5b:b4:83:0a:43:22:dd:1d:44:7f:e7:d1:5e:99:
26:be:e8:b9:cd:31:0f:01:36:e6:e7:5c:c1:dc:cf:
7e:ec:97:54:b0:c0:65:25:a5:a0:ac:eb:33:1b:42:
cd:d6:37:ae:22:6f:6d:42:d0:ef:e2:40:0c:c3:a2:
27:30:fb:56:e9:3b:04:36:6d:38:41:5d:da:53:4d:
fb:25:53:4f:a3:b5:ff:5b:22:c6:6f:66:8d:19:49:
25:bc:35:c5:8f:d5:b5:a3:a6:ca:61:2e:0b:4f:14:
2b:ac:0c:78:8d:ad:18:91:1d:0f:ad:ce:56:10:b8:
5d:c8:c3:bf:c4:fb:99:7e:d4:a2:16:79:b2:72:2d:
5c:b1:88:00:41:31:02:37:c2:9d:3e:6a:a3:7c:2c:
17:f9:57:51:2e:cf:59:a1:89:6d:3e:f6:87:30:cd:
00:50:20:02:e8:33:59:cd:77:92:dc:97:d0:b7:86:
11:e3:7e:9a:db:94:c0:84:36:b8:19:09:88:4e:7e:
d0:57:95:a1:7f:3a:1a:df:6f:5f:3b:6a:c0:15:1f:
ef:b4:10:d1:a5:ff:b2:05:87:4b:1e:59:81:b0:e7:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:D1:38:FC:33:A0:17:02:50:40:41:98:E7:54:FA:D3:0E:3E:23
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:38:cc:81:a9:94:e9:e7:74:41:65:f3:40:86:91:71:49:0a:
45:4c:ce:c3:ee:1a:a3:d3:dd:82:47:38:db:28:7b:fb:85:a6:
c4:cb:dc:3a:89:77:9f:39:80:c0:a6:39:76:ed:0e:43:53:2b:
7a:ec:cb:68:84:78:25:e4:46:fc:83:16:ce:5f:27:62:21:44:
72:75:60:a2:8a:15:b2:f0:60:9f:a7:85:cd:73:f5:b8:5d:fd:
fa:7c:a4:4e:ca:8f:a4:3d:e9:f1:f7:8e:b7:9f:c9:cd:76:b5:
9a:ad:7a:70:7c:3a:7e:ea:11:60:53:5b:fe:63:1e:6a:9a:07:
d0:e9:e8:f1:fd:94:e6:04:bc:f5:8b:37:82:55:23:b9:1d:63:
13:84:29:77:69:31:48:5f:d2:bf:5e:f9:ae:82:d7:71:de:02:
be:3f:01:80:9d:35:3c:75:1b:72:10:6a:b8:48:b9:f1:1c:b6:
0a:75:87:d5:00:4d:b1:4c:0e:f3:0a:27:8d:d6:2a:04:da:81:
43:68:4d:82:e0:fc:ae:9b:27:7f:07:99:81:67:37:1a:49:12:
e7:3c:14:85:dd:93:83:4a:a2:94:14:af:1e:4e:1e:f6:64:9c:
4a:9b:8a:27:e9:50:4e:97:58:92:e7:17:f3:68:56:c8:34:88:
13:62:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:47:02 2025 by rpki-client