Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: Bp1r5Gfn3cvJnPyiDvPh1eUfRTmJVguwRyG0L93iJIk=
Subject key identifier: 17:B1:10:FD:77:F7:C8:C2:05:9C:19:F6:9B:8F:EC:8D:7F:62:F0:CD
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019A454D9AB80FDD96A26C8398541F64EA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0887
Signing time: Sun 02 Nov 2025 16:01:45 +0000
Manifest this update: Sun 02 Nov 2025 16:01:45 +0000
Manifest next update: Mon 03 Nov 2025 16:01:45 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: jQNieMfrNOcCEXD1CaujVj/rqNYSXkT2GGm4COJoG3Q=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 14:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:4d:9a:b8:0f:dd:96:a2:6c:83:98:54:1f:64:ea:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Nov 2 16:01:45 2025 GMT
Not After : Nov 3 16:01:45 2025 GMT
Subject: CN=17b110fd77f7c8c2059c19f69b8fec8d7f62f0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:31:14:65:ce:1c:05:3d:91:84:5e:5e:54:
17:d5:4d:ac:bb:01:fd:2e:f2:de:24:fa:41:2c:17:
29:b8:27:98:a5:ac:8c:64:b2:04:e9:d0:03:cb:81:
a1:ef:00:dc:6a:3f:04:d8:48:1d:86:d3:55:aa:e1:
13:db:41:3c:58:cd:0b:c3:d7:18:90:e8:00:c9:de:
e6:e1:f1:ed:5d:89:db:d2:d5:43:c9:69:9d:57:34:
f6:cd:c5:f3:61:d6:c1:50:27:a5:59:7e:4a:02:8c:
ab:70:6d:f4:3b:2f:bd:a6:b5:b1:ce:03:50:07:fe:
ba:31:61:04:63:e8:98:7e:f2:83:0f:77:f6:f3:82:
24:de:5b:87:bb:b4:06:0f:eb:29:05:96:b4:f4:e8:
8f:a6:69:2b:33:53:06:4b:5a:f0:68:e1:12:69:a0:
aa:30:af:cc:cd:68:ff:0d:51:8f:af:d0:95:dd:72:
60:ab:14:73:3e:80:e4:b4:cf:6c:ba:56:1c:8e:9b:
03:1b:2c:ab:d5:49:44:86:b9:99:36:b8:c5:6c:af:
3d:bb:12:f5:28:3a:00:cc:8c:3f:6f:a9:14:36:ba:
c1:bd:71:db:1e:62:86:86:b4:50:1f:a2:b5:b3:d3:
ca:48:fb:55:c1:7e:45:bf:88:aa:aa:eb:21:d0:af:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:10:FD:77:F7:C8:C2:05:9C:19:F6:9B:8F:EC:8D:7F:62:F0:CD
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:38:b8:47:2b:fc:7e:5f:76:47:cd:8a:28:fa:62:bf:98:
2d:8b:2c:95:1c:ae:5e:22:a0:d3:25:f4:a5:78:4e:8c:73:db:
51:07:ae:c3:1b:1d:a7:db:cd:3c:3d:49:06:ad:8b:e2:af:90:
a4:3d:49:ee:97:52:7e:97:fb:0c:74:89:c0:41:cc:56:80:44:
49:31:df:d5:37:80:87:ff:01:10:4f:9f:be:b5:be:30:fb:79:
21:39:ec:97:1b:e6:97:b1:9c:0e:03:b1:36:e6:8b:45:b0:c3:
58:61:19:54:41:fa:98:ac:29:65:45:c9:d1:28:d0:65:56:ce:
00:2b:ff:d2:f2:9f:93:b3:b5:05:f6:3a:2d:60:bc:6d:25:e8:
5a:b6:e0:93:44:97:e8:3e:60:fa:70:c9:cc:e8:87:03:78:56:
26:b0:65:43:15:57:51:35:43:b4:19:6b:22:05:2d:7f:f9:5a:
08:0e:b4:c4:03:6a:2d:c5:5c:e6:47:09:7f:51:50:ea:b5:d0:
a7:11:c1:92:ef:4b:70:23:35:2d:aa:13:90:dc:61:8c:4d:44:
29:ac:2e:25:24:a1:91:5a:d4:4c:b9:12:4d:08:63:a9:3a:e8:
74:d4:a7:42:9f:13:9c:f1:01:d3:99:89:31:8b:14:e2:0c:1b:
b6:e0:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 19:37:04 2025 by rpki-client