Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: tvOrrEYaO2kCTtuqrhkdytdWQ1JXIKv34VUWkeNzR8k=
Subject key identifier: 2F:D5:F7:DC:3F:79:2C:04:AA:87:06:67:C6:15:A8:12:D5:41:12:82
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 019A71B780DF48E25D5F3BE1AD7442328E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 0408
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: 4Yfyy9YQFSfNIrszTpKZ2UFqsmtB5/mG/XRSeRkRRE0=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:80:df:48:e2:5d:5f:3b:e1:ad:74:42:32:8e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=2fd5f7dc3f792c04aa870667c615a812d5411282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:0e:4d:ec:ab:15:f4:e9:b0:40:95:4c:e0:
6c:0c:0f:ab:01:64:f6:8d:2d:ba:07:f5:b6:67:a2:
01:22:59:fe:7d:df:4a:8c:d2:19:23:3d:66:02:74:
4f:9f:7b:e0:ba:c5:3b:39:87:84:e6:35:0d:91:d2:
d8:4e:f5:1d:52:67:42:52:df:d2:e6:eb:73:21:f1:
cc:68:b7:1c:25:74:bd:6a:b8:79:75:7c:ab:3a:38:
66:33:8d:71:dc:49:ad:52:ef:3a:d2:cb:a0:a8:4e:
ac:25:2b:f4:0d:5b:6c:9a:46:cd:5e:74:4f:85:24:
2c:9c:d8:74:91:ad:bb:80:e9:e0:b1:2c:9d:72:f4:
5b:c0:49:f1:ba:60:b0:1f:65:19:76:39:bf:c5:c2:
55:02:89:5d:1d:7b:8b:ae:6d:a6:3b:fc:f2:ab:e0:
c6:8d:0a:35:78:52:92:e9:de:47:3b:c7:9f:c0:28:
a2:f0:26:85:ea:8d:4e:79:b2:08:1c:95:cb:f0:0e:
17:d2:96:59:c6:2d:de:cb:f4:54:1f:e9:b8:e4:a7:
86:1f:43:8d:67:9e:e1:87:1e:d6:14:5d:c5:f8:a8:
ae:b4:c0:00:ce:bb:ca:d1:8d:84:38:4a:f8:08:96:
f2:d2:93:0b:1c:f1:fc:06:67:cf:4d:e9:7f:30:bd:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D5:F7:DC:3F:79:2C:04:AA:87:06:67:C6:15:A8:12:D5:41:12:82
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4d:60:0f:b9:8f:e9:69:a7:58:17:8a:00:6d:f5:6d:f4:22:
10:9d:1f:1c:2c:95:70:39:0f:29:53:7a:e8:4c:2f:f9:10:92:
67:79:7e:7e:fc:bd:98:6e:63:a2:03:85:0e:70:e6:d9:06:df:
e6:f5:74:62:7f:ca:db:b3:57:60:98:83:17:ee:73:d7:fc:3d:
a8:7f:be:df:0e:11:4e:45:1f:68:71:5b:57:c8:d1:30:92:1e:
d1:e7:c7:46:2f:93:68:53:8e:99:00:6c:06:d4:7c:6b:fe:39:
27:1a:a2:19:21:cb:f1:0d:ca:1d:e0:d2:f8:22:43:7f:7a:d4:
4c:f3:b4:80:ae:b3:48:4d:3f:4b:d5:c5:b3:92:66:b4:51:aa:
d6:d8:12:2e:e4:9b:41:2a:ca:f9:f7:6d:78:f3:29:0f:1e:28:
a7:77:b4:fa:dc:f5:bf:f7:97:4d:ac:ce:fd:d6:ab:51:d3:d1:
16:e5:4d:75:49:8b:09:24:c8:ca:c2:ef:f0:52:71:f0:38:34:
2c:4e:8b:fe:6f:fa:59:c3:9f:d8:14:12:7c:cd:11:44:bf:9e:
1c:b2:50:86:31:d3:fa:c5:31:f5:39:4e:b8:30:02:da:38:be:
e7:c1:53:e3:66:37:2b:00:e6:9d:c6:ea:32:1d:21:72:f5:d7:
98:02:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:23 2025 by rpki-client