Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: w9bGXefh8pOkGVqzl+tOwU2h7tH4Iju3H6Y8MaVMkHI=
Subject key identifier: 79:F7:F8:7C:6D:96:3D:98:43:68:01:A2:1C:2E:F3:20:3C:26:F1:BC
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 019A725C58E3E3B1B8FF771CFE32E9D35BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: siGAFY7b9ScamNoF5Os3BHdIaHH6mRp2/zjqikZllqc=)
2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:58:e3:e3:b1:b8:ff:77:1c:fe:32:e9:d3:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=79f7f87c6d963d98436801a21c2ef3203c26f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:e3:83:8b:f0:21:06:ca:b9:9f:7b:67:1d:
3a:a3:a8:0b:e6:8f:28:19:ce:3c:ba:b3:a6:97:65:
81:ae:4c:21:e9:a6:d3:fe:99:d2:89:68:bb:24:60:
5f:12:c8:a0:52:9c:23:d1:0d:65:3a:b3:04:55:c7:
50:4c:98:bf:6a:49:0d:07:36:5a:1f:c7:96:e0:b4:
05:34:3a:a7:47:2e:9d:66:95:b3:c3:34:81:61:49:
0d:ac:da:48:e3:8f:13:ef:e4:b3:e3:0a:bd:59:32:
fc:d3:d3:38:8e:8a:2f:7b:6c:ab:da:f1:7a:89:40:
b1:7f:de:ac:16:36:01:c0:e9:57:fe:81:6d:c5:ea:
25:44:ad:68:99:19:06:ff:e2:5f:7f:7a:0b:57:25:
c4:03:20:ba:03:5a:22:d1:6a:76:2a:be:18:69:7d:
d9:b0:92:29:69:78:3b:90:e9:6a:19:11:e5:b8:0b:
67:71:4d:bf:ab:ca:38:86:50:55:a2:4d:22:4c:4a:
89:bf:8c:e6:98:1d:38:cc:57:25:b8:d1:d8:7e:4a:
8e:fe:de:9e:40:05:7a:24:2b:c3:1d:ea:30:3f:a0:
36:15:e4:40:26:8a:04:08:88:5e:fa:87:4a:7b:5b:
a9:04:85:c6:19:5e:ce:6f:e8:68:06:a8:13:52:33:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:F8:7C:6D:96:3D:98:43:68:01:A2:1C:2E:F3:20:3C:26:F1:BC
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c9:2d:af:92:38:64:3c:b7:7e:3e:72:de:84:dc:3d:03:e0:
a1:4c:6c:79:d8:ad:98:56:4e:36:83:d6:51:61:09:3e:f9:ad:
ee:d0:36:b9:0e:85:71:08:3f:80:e1:b1:1a:89:f3:2f:ba:b7:
78:f5:77:6e:70:96:04:b5:f9:83:1d:0b:bd:a9:df:0c:a9:ca:
03:53:1e:5a:d1:05:1b:47:3a:34:87:53:7b:5d:b5:73:20:3a:
8a:a8:83:14:1f:da:c6:ec:76:52:3d:23:ab:32:e9:f1:4d:87:
38:7e:04:11:cd:0f:05:41:ac:df:c4:06:97:17:12:6d:47:7e:
fe:c4:22:22:3a:59:a5:4e:ed:8e:05:3a:3f:7b:2a:88:e3:54:
13:85:de:2f:71:46:93:78:ea:55:d0:2d:89:8a:8f:75:37:3f:
0f:de:7e:bc:e1:24:9e:24:0f:bd:5f:f6:ac:02:e2:74:03:27:
4f:f2:6d:d2:3b:ab:09:05:21:e9:f5:9d:d2:40:20:c2:4f:9e:
62:85:79:f2:3f:d4:f2:5d:2a:53:cd:da:2d:5f:b7:54:e6:a9:
8b:93:f0:42:47:60:5e:5f:a5:1f:51:fe:e8:91:cd:68:06:3f:
b9:3e:d2:d3:3f:e6:44:70:b2:9a:0b:dd:83:71:c0:d5:a9:a6:
25:98:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:11 2025 by rpki-client