Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier: UKr4I53M063PFoqqmZ9iXWj5bYq1tTmgrGJriNuR+6E=
Subject key identifier: C8:BF:37:02:E4:ED:81:A5:D3:0A:3E:2E:04:89:2C:5B:2A:47:C8:10
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 019A0B938BC72ADE47C436DB9464D95011A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number: 0E6E
Signing time: Wed 22 Oct 2025 11:00:10 +0000
Manifest this update: Wed 22 Oct 2025 11:00:10 +0000
Manifest next update: Thu 23 Oct 2025 11:00:10 +0000
Files and hashes: 1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: wf7OZkeO//x/ozf1Z9GQC+TIuL+39h3m+X7ap7R8MGo=)
2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:93:8b:c7:2a:de:47:c4:36:db:94:64:d9:50:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Oct 22 11:00:10 2025 GMT
Not After : Oct 23 11:00:10 2025 GMT
Subject: CN=c8bf3702e4ed81a5d30a3e2e04892c5b2a47c810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:4b:00:a9:13:4a:a3:31:8c:74:85:e5:fe:
f7:7a:12:89:cd:4d:64:2e:79:5a:a7:45:fd:39:bb:
f3:3e:1f:62:a7:01:19:e1:f9:c7:65:ba:ed:64:98:
40:f9:fe:7d:6e:b1:f7:00:42:af:86:26:1f:ca:44:
41:11:da:be:4c:7a:1d:d4:a5:1a:37:a1:ce:7e:e9:
1d:31:5a:f7:d3:a7:e5:59:77:c6:cd:93:ee:ff:7b:
10:f3:1c:9f:43:a3:2e:4e:a0:87:8f:74:a1:33:3a:
cf:4d:f7:4e:91:cf:bc:f6:e0:f1:49:8f:c3:7a:28:
cb:da:69:b6:da:f1:35:69:5d:5d:61:3c:67:a3:00:
57:fd:c5:99:c4:02:5f:56:ca:c0:73:d4:c4:9a:77:
39:35:93:7f:1c:57:4e:56:e5:2f:02:62:5f:f9:6b:
74:8e:bd:be:40:63:bf:d3:c1:12:6b:8a:6b:16:d6:
2c:a4:68:a2:81:03:70:f2:e4:89:51:9a:7b:da:69:
37:91:83:46:3f:f6:2a:da:b2:c7:b0:dc:65:8a:a7:
49:31:f0:92:8e:7a:0c:a0:b9:d0:aa:f3:f2:4e:da:
e3:12:46:d5:2f:b9:0f:cf:40:35:6c:a0:7c:0f:c2:
70:60:45:34:86:1a:50:c1:72:4f:43:b8:a3:e4:70:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BF:37:02:E4:ED:81:A5:D3:0A:3E:2E:04:89:2C:5B:2A:47:C8:10
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:85:0b:21:98:bc:0d:a0:6a:69:e0:6c:3d:a0:bf:3c:78:3b:
be:54:cf:1b:57:0f:e1:92:8b:06:00:e5:0a:a5:85:23:b7:17:
e0:ae:16:4e:08:ae:5b:3c:11:35:74:50:d9:82:6b:2c:4f:55:
90:46:01:bc:ef:2e:bd:dc:dd:c0:cf:b9:af:80:d1:9b:74:b0:
6f:c9:bb:3d:91:18:19:83:7d:f4:26:08:04:96:f3:b0:6e:3e:
2d:16:f4:e1:1a:76:99:83:57:04:ba:56:1d:c0:52:c9:de:6f:
6b:48:e4:98:4b:2b:0c:7f:22:3c:e8:23:90:c4:47:85:00:83:
f2:2a:12:0a:14:e4:9c:83:e7:21:41:0e:28:be:c2:a2:e0:f7:
59:3c:23:36:74:c3:6b:5b:59:47:ec:af:b5:22:92:69:93:13:
1a:e0:7e:d6:dc:7c:8c:08:3e:78:75:50:90:fa:bc:10:c3:f3:
2b:5c:34:03:41:50:c7:ea:8a:b1:b4:69:f0:29:ef:3b:21:ba:
93:ed:ac:71:72:01:06:f6:14:8d:27:e5:25:75:68:9e:c9:7e:
a1:22:a1:da:25:07:b9:ab:a6:a3:7b:2c:fa:54:0d:ca:1b:40:
9c:9b:71:f3:f5:00:93:0f:4e:35:1f:99:a7:08:38:0f:9f:dc:
19:cf:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:16:56 2025 by rpki-client