Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json)
Hash identifier: WhxNQi5+tezYh8daGQOSD35oB+pRhobJdupkSKRfBQE=
Subject key identifier: BD:20:84:3C:46:22:AF:66:E6:50:60:05:77:6B:00:38:1F:D0:BC:A1
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial: 019A70DC7C9D789A394B81D5D3868BE7149D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
Manifest number: 02DC
Signing time: Tue 11 Nov 2025 03:01:29 +0000
Manifest this update: Tue 11 Nov 2025 03:01:29 +0000
Manifest next update: Wed 12 Nov 2025 03:01:29 +0000
Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: 7sh3PBu4NTFMyZmyd1AbdYo6r4bIB+N6v6x3Ey3TJi4=)
2: vAn1hXUKdqSNmKMN5EpP_udaSvg.roa (hash: KSkyWrBwmDHasLhukMvu07oX0o0MiqrtLLWwQJGc7Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:7c:9d:78:9a:39:4b:81:d5:d3:86:8b:e7:14:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Validity
Not Before: Nov 11 03:01:29 2025 GMT
Not After : Nov 12 03:01:29 2025 GMT
Subject: CN=bd20843c4622af66e6506005776b00381fd0bca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:a1:c4:58:2b:26:07:68:83:57:19:25:7e:
b4:69:35:17:f5:a3:3d:da:18:38:d7:2c:0f:ca:d3:
60:07:08:20:10:85:13:b7:f2:53:ad:03:fc:6d:2b:
53:98:53:18:4c:07:72:3e:0a:4d:1a:4e:fc:a6:80:
3c:b6:6d:77:01:af:d6:01:ba:83:3d:6f:ad:35:74:
04:55:73:86:df:c2:c4:47:d7:ca:37:2a:1b:15:aa:
14:48:92:83:0d:b1:1e:04:fc:11:47:e8:aa:e0:7e:
77:14:60:ea:d7:3d:e8:8f:f0:34:b9:a3:98:c9:6d:
f4:3a:8d:ea:27:5c:f5:f1:2b:b6:5d:17:59:19:db:
bc:4c:14:c9:d5:23:0a:52:e1:24:26:38:95:98:9b:
d1:44:37:5c:13:26:c9:c6:7d:56:e4:03:c6:b8:d8:
a1:ed:1d:5e:a9:7a:ca:2e:aa:31:db:00:b6:e7:2a:
e1:26:63:5d:f3:fa:73:df:7c:05:40:94:13:ad:2d:
a5:cd:29:91:ed:4c:68:b1:59:a9:a0:5a:f0:64:50:
aa:3b:24:b5:b5:fa:75:8c:8f:8d:87:52:c3:99:35:
ca:5e:80:84:bf:59:b1:be:cf:2c:91:17:1e:f3:04:
47:0c:dd:0c:53:e8:37:92:0b:e9:29:9a:44:1a:6b:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:84:3C:46:22:AF:66:E6:50:60:05:77:6B:00:38:1F:D0:BC:A1
X509v3 Authority Key Identifier:
keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3f:f0:19:64:a5:34:58:a3:b7:a5:d6:d2:16:98:5c:fa:14:
cb:c1:83:bd:a8:7d:d8:d5:30:b9:9d:90:a6:f2:b2:45:35:3b:
6f:ec:5f:5a:fe:60:5d:84:e9:4c:42:5b:28:46:c3:69:58:6c:
72:42:d3:1d:fa:d4:23:1a:42:42:a7:9f:b7:24:6e:25:e0:b9:
48:da:b0:2c:ff:b4:1b:c3:dd:77:ac:59:ad:e5:77:7f:cb:b8:
e7:6d:71:4e:66:fc:84:2b:38:f0:05:3b:8d:04:5c:0e:cf:f4:
ea:27:f4:55:c0:9c:5b:07:be:64:00:8e:73:c6:be:ac:97:d8:
2d:92:b7:38:f4:c0:e5:3c:e4:71:7d:5e:53:b7:91:4f:0a:9c:
1b:17:c9:be:4b:85:8f:21:dd:29:e7:f2:b0:49:7a:aa:78:bd:
d8:85:4a:4d:52:4b:ae:c0:9a:ec:c8:ed:1f:ed:4e:ce:65:65:
ca:8e:ca:7d:90:45:85:89:bd:2d:7c:23:19:7c:13:f7:bc:ab:
06:67:0b:d9:ab:07:0f:51:b0:38:03:4a:82:4f:ae:72:cd:93:
e8:6a:48:1a:46:fb:12:6f:b0:1c:43:81:77:19:d0:e6:39:9d:
90:11:ae:ef:eb:b6:99:07:4c:74:b1:67:7e:3a:22:28:40:fe:
fe:88:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:05:08 2025 by rpki-client