Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: LsursBr/0ryBBQw+48O1qIVdMbDGxaPvfgPwVHMbdPA=
Subject key identifier: 00:61:AB:D8:DD:25:17:89:C9:8A:C5:0E:EC:E1:04:35:3E:99:3A:72
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 019A2C32BC5B5189317A1DA8FD23DB359E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0B08
Signing time: Tue 28 Oct 2025 19:01:53 +0000
Manifest this update: Tue 28 Oct 2025 19:01:53 +0000
Manifest next update: Wed 29 Oct 2025 19:01:53 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: BBCOY9+KqK/Dn1TE9ENdkbdqnyRphOK1Du1T8QCUIow=)
2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:bc:5b:51:89:31:7a:1d:a8:fd:23:db:35:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: Oct 28 19:01:53 2025 GMT
Not After : Oct 29 19:01:53 2025 GMT
Subject: CN=0061abd8dd251789c98ac50eece104353e993a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:94:35:fb:16:75:03:83:9c:4b:76:48:c9:
f9:44:1f:f3:53:27:3f:c0:61:5c:18:f1:fb:57:a9:
a8:ba:dd:57:8b:b2:a6:ce:3b:36:a0:c6:53:8c:d0:
a4:74:a2:23:0b:fa:a1:f6:42:61:77:a0:f4:62:f4:
0c:8e:08:8c:48:32:b2:96:38:40:3e:ef:cb:73:1f:
dc:db:58:8d:27:8e:61:85:35:d1:88:7e:65:26:03:
4d:67:52:1f:15:61:cc:86:33:3b:3c:fc:0b:2d:b9:
b9:95:cc:47:00:2c:75:25:54:2f:69:8b:4a:9e:4b:
79:07:42:b6:05:37:91:54:ff:25:25:da:80:5e:47:
24:6e:77:12:19:33:80:86:4d:04:f8:e1:2b:7f:bd:
84:e6:b4:48:d7:cd:c7:2f:12:d7:20:b5:05:7d:1d:
01:53:b3:71:f0:11:f0:51:8c:3a:a9:5e:a9:32:4c:
70:f8:d4:d7:d6:a0:ec:a9:8b:b1:cd:16:f0:a5:f8:
d6:cb:ce:29:ce:d5:2a:04:52:66:1b:ad:fe:64:aa:
30:4c:0a:74:e6:5d:02:6e:35:97:2e:32:1c:6b:7c:
86:5e:37:ec:18:20:78:3a:7b:66:42:85:35:d2:be:
31:ab:90:66:0e:56:63:b1:a0:2e:35:4c:44:83:2e:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:AB:D8:DD:25:17:89:C9:8A:C5:0E:EC:E1:04:35:3E:99:3A:72
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:28:60:47:c0:ea:da:df:79:54:00:9f:42:57:82:f0:00:34:
ac:29:1c:e3:35:a3:dc:d0:14:74:0d:5c:25:03:70:fc:70:8d:
b1:e7:68:eb:12:69:a7:97:7a:1c:37:9b:9b:68:9a:5c:38:b5:
57:dd:eb:84:50:86:ca:11:c4:a7:e5:79:9d:06:dd:6f:7f:8c:
60:f7:64:07:5a:ec:3e:28:06:15:8a:f8:d0:85:c8:44:3a:37:
8a:6e:6e:b7:3b:1a:27:53:b4:29:b3:91:7a:eb:83:a0:af:d4:
7e:31:41:cf:ba:73:77:11:55:9b:9d:ee:8f:d6:89:16:a3:a9:
c5:5a:f0:4c:61:88:c6:e8:26:fc:da:f1:71:f8:d5:92:4d:87:
3f:15:e2:55:ae:3c:af:ab:c4:e8:52:fd:88:5f:e7:37:a4:67:
cc:9b:23:88:8d:23:7f:c7:f3:02:31:a2:e3:75:e8:61:f8:22:
4f:b7:7b:4f:e7:d0:7f:20:04:0f:af:72:40:b9:60:e2:d9:0c:
ec:47:22:4a:8a:8e:4a:4f:b6:bf:e7:b8:6d:f3:84:17:19:30:
8a:75:e0:21:68:62:ff:10:93:d7:59:72:d9:6d:0c:cd:f6:09:
fc:f0:28:2e:ef:67:8d:2a:3d:ed:79:5a:1a:62:ca:1b:9d:35:
1d:c2:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:14:06 2025 by rpki-client