Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: BFpmzA2znaISVOuJUxTgnv6g7y+AxIl1Ds3hw3wM2vo=
Subject key identifier: C4:21:67:A2:84:FD:E4:40:D4:40:99:7F:FC:B9:5F:03:54:41:3A:51
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 019A1317A88E8D5FD563E37F6B4924373F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0BE8
Signing time: Thu 23 Oct 2025 22:01:48 +0000
Manifest this update: Thu 23 Oct 2025 22:01:48 +0000
Manifest next update: Fri 24 Oct 2025 22:01:48 +0000
Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: UaC78hoaCb1Gm+7eSDbl8dABJqJTFIahnEIsb+BOPbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:17:a8:8e:8d:5f:d5:63:e3:7f:6b:49:24:37:3f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Oct 23 22:01:48 2025 GMT
Not After : Oct 24 22:01:48 2025 GMT
Subject: CN=c42167a284fde440d440997ffcb95f0354413a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:03:83:e0:31:ab:e3:98:ca:56:0b:73:69:
4a:8a:a9:bc:6c:52:66:7b:31:b3:26:1e:75:8e:be:
23:b1:37:3e:51:88:e4:b4:45:9f:d0:84:93:17:c3:
c6:48:6a:34:14:10:33:c5:42:50:5d:53:92:45:52:
f8:a2:b5:45:79:eb:df:39:00:23:53:3e:ad:2d:cb:
15:fc:3a:b7:32:d2:ce:3d:54:82:c6:c0:3a:16:25:
cc:1c:c9:f0:eb:6d:97:05:d0:1f:77:f8:e1:de:5f:
a8:c3:82:fb:e1:4b:c0:f3:44:fb:15:39:01:b3:8d:
2a:b3:26:57:7e:db:44:75:69:f4:d7:68:00:1e:a3:
3f:f0:83:be:2f:d4:b2:ac:2c:e5:59:ee:fd:62:cf:
3b:41:79:54:d4:72:b7:b6:3c:cf:ca:c3:29:3b:80:
14:fa:bb:fb:58:8d:58:c0:45:16:5e:4a:c1:41:62:
6d:60:93:9e:56:ee:bf:78:2d:5c:57:79:38:31:1d:
71:73:87:22:5d:ad:07:8b:23:e1:71:42:c2:8f:1c:
3b:89:b4:18:df:b0:6a:45:ef:46:53:66:61:c9:cf:
53:f2:da:e9:e0:51:30:d8:fe:e1:5b:8c:a7:0c:77:
a1:51:fc:f2:8a:f1:2f:90:50:ae:89:a7:17:49:65:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:21:67:A2:84:FD:E4:40:D4:40:99:7F:FC:B9:5F:03:54:41:3A:51
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:32:1f:41:e6:b4:f2:01:3d:d8:11:15:28:4e:b3:09:d6:c2:
3d:45:04:a8:2c:d9:76:da:ab:c3:96:84:e9:0c:6a:fc:c0:49:
77:27:3d:34:0a:be:d6:6e:b1:00:48:bf:66:35:c5:05:27:7f:
cf:88:69:19:0d:11:cd:a2:ff:4c:8f:1a:8b:7d:75:11:aa:7a:
d0:cc:e5:97:39:84:7c:05:aa:39:42:d4:d3:f2:89:dd:38:49:
10:18:ab:c9:04:cf:63:c0:64:3d:17:72:2b:a5:1d:e2:25:17:
31:6d:d5:28:02:11:ce:77:0f:b7:38:fd:34:8f:41:f4:1c:57:
fe:b9:f6:6d:84:47:e8:27:74:a1:a3:da:de:d0:ef:c9:81:e8:
53:b8:83:70:60:a1:d6:76:85:ee:89:d1:39:b2:b6:02:d7:bb:
3c:17:0c:16:ff:a0:7a:d8:93:d4:c7:21:e9:e4:69:3f:a9:c1:
6c:3f:38:15:11:25:d3:79:45:ea:5f:9a:c2:2f:4f:64:ca:fc:
1e:f4:ef:38:bf:0c:ea:33:8a:87:05:02:08:96:c7:8e:09:c1:
11:dc:b3:b2:36:df:f3:c9:c1:6e:28:d4:23:b4:06:04:02:8b:
71:fa:2d:8b:b8:76:81:18:9c:81:11:4c:1c:9b:6f:a7:fe:f7:
59:47:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 03:37:41 2025 by rpki-client