Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: oL8c3k5ImlwABJZf/2RVJNeYdxtkdeeg0nWYndgfDfY=
Subject key identifier: EE:FE:48:30:99:7D:FC:30:A2:1C:56:CA:0D:0A:27:9D:E1:58:7C:26
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019A22F7111DB299FB202ED20B9676537969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 07B7
Signing time: Mon 27 Oct 2025 00:00:08 +0000
Manifest this update: Mon 27 Oct 2025 00:00:08 +0000
Manifest next update: Tue 28 Oct 2025 00:00:08 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: 6hC1o/QHSyjlcgDv6M1HBlkr9tnl7kMirci8vA06pnU=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:11:1d:b2:99:fb:20:2e:d2:0b:96:76:53:79:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Oct 27 00:00:08 2025 GMT
Not After : Oct 28 00:00:08 2025 GMT
Subject: CN=eefe4830997dfc30a21c56ca0d0a279de1587c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:11:36:61:da:e7:0d:57:fb:d0:71:ba:12:
7e:21:5c:18:a2:db:19:00:bc:82:af:4a:b2:87:d4:
37:72:f9:1b:fd:66:4c:9a:6f:d9:47:4e:fa:c4:82:
1c:25:e5:0b:3c:58:d9:5d:e9:c1:1e:2e:f6:f0:49:
98:74:83:b0:59:16:f7:62:7c:66:42:9c:5d:34:4f:
43:1c:de:e1:ae:09:f8:42:6e:bc:1d:d3:07:2d:32:
b3:f1:fd:31:d9:19:34:19:50:5d:0e:ba:ba:5d:d8:
f9:63:80:49:c0:95:ba:a1:05:5f:e4:a0:ff:d1:63:
3a:0e:c7:69:83:24:ec:88:a6:77:d3:bf:75:ba:0c:
6b:b4:01:0e:6a:bb:9e:94:f4:90:61:b3:a8:7c:84:
ac:76:48:bc:c3:14:2e:5f:9b:ef:e0:eb:b6:79:0e:
dd:cb:ff:cd:2b:2e:cd:1e:08:f5:f1:4d:b2:fb:5d:
ca:45:4f:f0:da:e7:29:1f:13:96:05:a8:a2:e2:ab:
f6:8b:1f:68:59:96:92:0e:f7:6b:50:10:b5:ce:4b:
89:c7:dd:68:22:21:2d:6d:72:d9:89:70:c2:2d:5e:
a6:02:75:70:68:73:d9:9b:8f:e8:68:f8:4f:4c:1c:
01:29:14:50:0c:1a:62:fd:8b:dd:24:79:fd:70:51:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FE:48:30:99:7D:FC:30:A2:1C:56:CA:0D:0A:27:9D:E1:58:7C:26
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:35:7b:17:9e:4e:3d:95:a5:dd:54:90:07:eb:45:4b:cc:e3:
4e:3b:5f:4b:98:d7:08:97:df:49:b8:17:b5:93:3b:8b:d5:1c:
c3:1a:53:6a:7f:aa:bd:26:44:f9:26:06:f1:26:5d:77:58:4f:
86:ef:6f:b3:38:56:16:ba:0c:04:bb:a0:d2:ec:30:23:6f:cb:
21:79:a5:e6:a9:6c:ec:2d:ee:7a:4f:fd:fd:57:03:af:c1:dd:
d4:22:95:9f:90:66:00:45:2f:49:b1:f2:9e:07:ae:83:a2:c2:
59:68:84:8b:f0:3d:12:f5:ed:87:d7:ca:29:34:fd:a3:af:57:
76:0e:89:c5:4b:1e:c8:44:56:58:c1:7a:6e:04:a9:11:73:df:
86:e9:ff:b3:d6:c4:37:e4:c7:5d:77:d7:74:52:a2:56:d3:32:
c0:28:b6:99:90:0b:20:9a:ea:64:8e:9c:6b:7d:6e:55:8d:6d:
ae:42:47:1b:6c:7e:c7:c0:38:35:ab:9a:cf:c0:36:c9:1b:2f:
50:76:e7:72:55:6a:3a:fe:77:7f:79:1f:a5:5c:ed:5c:aa:bd:
06:6a:83:af:7a:d8:bc:51:1a:2a:39:0e:43:3b:a8:86:92:f7:
96:fc:af:82:7c:1c:80:02:bd:af:81:63:4a:80:f6:0a:f7:14:
5f:94:e4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:22:55 2025 by rpki-client