Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
File: 8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json)
Hash identifier: jYt0reUCMTnk9NCWICg8MxkAJYx5LO8P70kTWpxndKs=
Subject key identifier: 54:6C:5A:43:02:04:CD:21:21:AD:40:5C:51:85:FF:A8:49:D0:D2:EB
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 019A28547796BF9C785E82236141FE5AE2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
Manifest number: 164B
Signing time: Tue 28 Oct 2025 01:00:15 +0000
Manifest this update: Tue 28 Oct 2025 01:00:15 +0000
Manifest next update: Wed 29 Oct 2025 01:00:15 +0000
Files and hashes: 1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: EnWjbe92d9KAj8Yb9qhZhspz7PLQzW0xqJU5xFg7a/4=)
2: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (hash: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:77:96:bf:9c:78:5e:82:23:61:41:fe:5a:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Oct 28 01:00:15 2025 GMT
Not After : Oct 29 01:00:15 2025 GMT
Subject: CN=546c5a430204cd2121ad405c5185ffa849d0d2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:68:30:d7:c9:b2:52:23:b2:0e:1e:fc:86:
b2:2a:ba:cd:f5:3a:b7:b2:8a:4e:00:da:23:33:ad:
eb:1c:df:e0:7f:a3:f2:88:75:cd:ae:03:48:08:6e:
ce:64:5d:69:cf:f5:90:86:6f:cd:ec:9b:34:b3:d8:
a1:a4:0f:c7:7e:4f:9b:70:56:b1:75:73:96:19:a1:
8d:d3:b4:2b:c7:5e:3b:a6:c5:c0:c6:ec:5e:59:61:
91:e6:3d:fc:70:f5:1e:16:8e:d3:20:71:fc:33:68:
6c:0b:9d:bd:20:85:2f:76:68:15:18:22:86:23:44:
96:3a:55:d1:ff:1d:1e:03:78:0a:78:b0:d5:ed:47:
22:c9:1b:ec:59:26:56:23:84:04:51:c4:f0:ca:7b:
13:51:30:6e:58:01:70:f3:77:e6:d6:3c:80:e5:d0:
e0:28:48:d3:f9:10:3c:3d:7e:10:97:4d:de:7b:f5:
58:6e:e5:1c:18:69:fc:38:84:1a:85:17:23:c7:62:
1a:1a:80:ac:b7:93:c4:77:aa:9b:f0:32:a7:72:1f:
c8:b2:4f:e0:f4:0b:28:c4:d0:a8:a7:ea:a0:57:b5:
a2:f5:31:e6:cf:f9:74:ff:4d:90:dc:f2:68:48:17:
3b:53:c8:11:44:84:87:dc:14:4f:b3:db:de:51:0d:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:5A:43:02:04:CD:21:21:AD:40:5C:51:85:FF:A8:49:D0:D2:EB
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ca:e4:c2:9f:64:22:50:e2:a7:e4:fa:3c:a1:95:d9:82:af:
4e:4a:e2:43:0a:04:1c:47:49:1b:c0:c1:3e:17:2a:c0:57:84:
da:16:7c:5b:7b:98:48:d8:06:46:2d:ea:21:40:12:79:16:04:
92:3e:01:ed:27:14:72:86:61:fe:c9:d3:ce:f3:d6:ba:da:78:
be:6f:74:7b:ac:6d:0c:75:2b:56:26:b7:fe:a6:41:42:17:9b:
53:3c:a5:24:3e:3a:39:cf:3c:8a:69:4b:bd:a6:8b:8b:c2:97:
6d:a6:a7:bc:45:6d:cf:96:15:71:36:74:16:4b:a0:cc:18:e2:
1f:09:bb:30:74:a0:72:63:75:dd:d3:02:3f:dd:d1:1d:f0:dd:
c8:90:0e:7f:13:a2:2b:73:7f:ef:11:b1:98:b9:cb:5b:29:de:
57:97:a3:d6:ea:b9:80:bf:78:25:35:20:5b:80:ad:ff:7c:48:
97:e4:64:b2:07:6f:a0:53:a2:87:02:96:08:06:05:d7:20:1f:
83:f6:9e:65:78:91:a4:b2:70:b0:69:f6:4b:63:9b:72:02:3c:
87:92:8a:4b:c4:bb:d6:a9:ec:4b:b1:3d:f0:b8:89:f9:f5:1d:
2a:da:20:1f:50:c1:53:56:1e:22:e9:d9:1d:ca:4c:e6:9b:a5:
01:61:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:51:40 2025 by rpki-client