Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
File: 8-hh3LY0GJOsTmMm723kNEHmaUM.mft (raw, json)
Hash identifier: shmx71Wl4dgX6KlZukK9OxbUsz4sx/WUF1OMen9fmXM=
Subject key identifier: 13:E3:03:14:2D:58:58:93:81:7B:45:1F:98:CC:EF:C2:1D:3E:ED:6A
Authority key identifier: F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
Certificate issuer: /CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Certificate serial: 019A71B82FDD4D12EDDD5B555D42268B4A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
Manifest number: 82
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: 8-hh3LY0GJOsTmMm723kNEHmaUM.crl (hash: 9NodvuRqv1oT5Nvg9/B91x3RmL4QFxamB5FgZE4SHVc=)
2: jAxXi4dUNmTHbgKfycTi4Xg81pk.roa (hash: BYka2JYpc3kzPhjSRnrgUiQAaeJD/015bVnwQgLkDLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2f:dd:4d:12:ed:dd:5b:55:5d:42:26:8b:4a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=13e303142d585893817b451f98ccefc21d3eed6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:d5:6a:62:d3:9f:4e:74:89:f7:70:a7:18:
0b:a0:61:26:5d:b6:18:6d:7f:56:41:98:bd:61:90:
e8:bf:20:a8:c3:9f:77:46:5d:ec:c6:a5:f2:75:12:
32:81:81:2b:88:d3:fb:59:1a:85:55:8a:00:e9:38:
3e:16:88:44:f8:34:66:6a:33:1f:7f:ab:3f:f2:9c:
b6:6c:77:e5:63:44:4b:8f:89:f5:d0:5d:37:5e:a3:
c0:dc:0e:52:80:77:83:66:22:03:ff:1b:c6:42:40:
e8:fa:bc:c1:be:9e:06:67:48:14:5f:82:79:25:3e:
04:7c:35:e1:7a:e1:49:80:9c:e7:49:c2:9d:b6:52:
0f:8b:b4:dd:9c:22:4c:9f:d4:aa:00:b7:14:68:be:
aa:82:b0:3e:13:7b:13:c7:4d:35:b9:24:87:30:49:
b1:c9:9c:65:6b:26:56:22:ae:e9:af:2f:d2:f5:54:
d6:2f:c3:50:8f:91:e9:3a:8a:0d:7e:34:68:32:21:
2c:fa:59:29:ea:b2:89:9e:f5:a7:d3:f0:7b:28:1a:
b2:90:4f:9c:7e:5c:f4:fc:c8:65:cc:93:6d:19:d8:
6b:0b:ba:cc:97:9b:41:86:0f:f1:ac:8d:90:ac:2c:
ff:94:d3:87:b3:7c:3e:a0:97:f6:8e:84:de:16:05:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E3:03:14:2D:58:58:93:81:7B:45:1F:98:CC:EF:C2:1D:3E:ED:6A
X509v3 Authority Key Identifier:
keyid:F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e2:e6:a2:83:4f:ec:61:6a:75:a2:c5:dd:3d:0d:c3:b1:a4:
8b:bf:50:eb:bb:62:8f:95:24:59:2e:30:2d:1e:0e:6d:b7:53:
8d:bb:ba:39:54:74:f4:0e:60:d5:f9:4e:0e:df:69:16:2f:12:
75:3b:75:4e:32:41:82:86:21:d5:9c:95:25:48:56:ad:c9:d7:
63:32:13:d4:fe:61:f2:bf:91:b1:21:d0:f7:5b:08:3e:96:15:
47:37:1a:44:4f:6c:5a:13:64:ca:a1:a7:cf:50:2e:e7:c6:38:
55:09:30:2a:69:d4:f5:9d:6e:1d:39:24:d4:d8:35:13:40:b8:
00:c6:ce:d0:db:cf:13:d4:11:4b:45:eb:d7:f4:7c:2e:b9:25:
6f:bd:bd:d2:8c:a3:93:9b:4c:f3:05:ff:fe:86:f8:20:a4:75:
84:3d:f9:65:62:3f:ca:fc:fc:4a:8f:52:bb:70:d8:e3:fa:7f:
93:6e:55:6b:65:b5:a2:b8:e8:47:16:e9:93:b8:79:7b:4b:b8:
cd:4e:2d:35:b7:10:76:6e:7e:29:35:e5:5e:e8:18:89:0d:04:
8f:af:8c:ae:10:4a:49:51:9d:f3:5b:b2:aa:72:7f:33:1f:56:
ea:82:40:9a:48:a7:81:36:d8:04:b8:b9:fd:d2:9f:6f:ea:e9:
07:cb:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:40 2025 by rpki-client