Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: 3rZe/M0JIdis3x1KHv2SJrBWI6FBAbA9PvtZW/XDcMs=
Subject key identifier: EF:60:A5:95:62:A8:2F:A2:B2:2D:60:FB:DA:3D:D4:60:68:4D:C2:44
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019A239C1CCB83E6D811637B38A78EFF45F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 115C
Signing time: Mon 27 Oct 2025 03:00:24 +0000
Manifest this update: Mon 27 Oct 2025 03:00:24 +0000
Manifest next update: Tue 28 Oct 2025 03:00:24 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: 8cYKfxaYRqK3pzMvYFDTTPrg6boUSYdIWb9RcgFWDCc=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:1c:cb:83:e6:d8:11:63:7b:38:a7:8e:ff:45:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Oct 27 03:00:24 2025 GMT
Not After : Oct 28 03:00:24 2025 GMT
Subject: CN=ef60a59562a82fa2b22d60fbda3dd460684dc244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:cc:c4:e6:46:15:66:b0:b6:a7:17:58:67:
04:b1:58:b5:6f:be:8b:6b:69:d8:42:35:99:1b:17:
4b:3e:7a:dd:36:06:bd:f5:7b:83:34:67:87:d1:d3:
f9:fd:9f:16:96:f7:4d:43:f6:4f:d7:a6:c3:67:ca:
e3:cf:26:b4:d4:bc:b5:29:45:0b:8f:c1:57:1c:e9:
78:dc:30:21:26:a2:64:93:35:47:c2:42:16:5f:c8:
bc:8f:d9:14:f9:19:88:a8:d7:93:8d:ce:7e:2c:16:
2e:27:7f:44:48:c7:ef:c7:be:ad:50:88:1e:1a:e7:
23:3e:d3:5f:75:42:29:4d:fd:d3:f9:34:4f:0b:39:
36:5d:e4:0d:d5:d8:98:87:50:4a:81:89:77:71:a1:
4b:3c:fb:2e:69:02:3a:47:55:39:00:e2:3a:f4:3f:
ff:14:54:4d:d8:f9:2e:3e:0d:1e:43:79:0f:29:94:
14:7c:e3:61:ff:11:86:72:c4:33:f4:19:f4:b8:fe:
3e:ac:e8:74:cb:ee:cd:29:65:43:f1:54:c0:f0:81:
de:5e:d1:d0:e1:6b:40:e0:70:55:e8:f4:78:84:02:
42:2a:50:77:d9:07:fd:13:50:32:69:3b:53:9d:e8:
ff:a0:68:a2:6c:29:14:b1:b7:a2:4d:e0:97:88:dd:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:60:A5:95:62:A8:2F:A2:B2:2D:60:FB:DA:3D:D4:60:68:4D:C2:44
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f2:8d:8b:61:82:1a:e0:29:a1:11:79:26:9d:42:4a:e0:b3:
d1:5e:f0:8a:1c:9b:6a:30:2b:91:f3:2b:f1:7d:9b:cb:27:b9:
c2:1c:43:a7:4e:a6:39:21:e6:fd:23:62:1f:7c:d5:a1:e0:0c:
9c:6b:e0:d4:3f:a4:19:4b:22:77:14:14:d1:09:dd:ea:b5:fd:
25:29:75:b7:78:4b:0c:5c:23:fd:1e:74:ce:e7:31:9f:05:5f:
fb:54:e6:f6:2a:4e:2a:fe:95:65:55:b9:8f:72:9f:5b:c0:93:
52:d2:b2:78:05:e1:1f:7c:04:82:ee:55:a9:c6:18:16:b7:13:
81:d1:29:96:fc:e2:c2:2c:95:4d:de:3d:5d:d8:1b:9b:34:ef:
ef:e0:a6:2e:ce:21:a2:41:78:3d:52:52:de:c0:6d:a4:bf:31:
5d:b6:c6:cd:72:66:08:c1:cf:e8:11:c8:90:7b:03:5a:24:49:
94:e1:11:da:17:79:d0:e9:6c:c3:d3:0b:d9:f7:ea:bf:81:69:
b7:a5:19:e6:be:7e:d9:c9:83:d1:8e:e5:aa:62:dd:f5:d1:fd:
9d:87:ad:9b:38:2e:45:95:b6:a0:e7:02:37:ac:8e:7c:ac:4c:
94:43:54:b8:ba:a1:4a:c4:ab:49:b3:80:a9:c7:70:84:d6:9d:
f0:ff:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:56 2025 by rpki-client