Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File: 8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier: uwrTrS4+JOW0Lh3/n1Eu8mrJ3PpfHGLBfBEwaXWPN+g=
Subject key identifier: 9D:E1:74:D9:C9:DF:FB:08:1B:3C:05:59:03:14:57:B0:9A:30:72:3F
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial: 019A26D3DE9509B383C3EF891C00C7A0FA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number: 16FF
Signing time: Mon 27 Oct 2025 18:00:10 +0000
Manifest this update: Mon 27 Oct 2025 18:00:10 +0000
Manifest next update: Tue 28 Oct 2025 18:00:10 +0000
Files and hashes: 1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: hRw9E3NRgtkY8satiBRohTQZDlMwJc0twnWcUp4tWgc=)
2: jV20P4i0v4psPgGy6zXjkv_uoCc.roa (hash: LRoq6PhnzYAWBMT+zoK5/SNdijqn8yZf6GzBfp4aJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d3:de:95:09:b3:83:c3:ef:89:1c:00:c7:a0:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Validity
Not Before: Oct 27 18:00:10 2025 GMT
Not After : Oct 28 18:00:10 2025 GMT
Subject: CN=9de174d9c9dffb081b3c0559031457b09a30723f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:56:00:46:86:0d:ed:ff:f3:04:3f:6d:7b:
94:3c:c7:ff:62:73:4c:b4:f4:e1:a7:00:7c:a7:3f:
07:5d:1e:14:12:b1:0d:28:1a:6a:3b:cd:29:71:05:
fa:20:8b:d9:5c:5e:f5:d7:7e:8d:f2:9f:ef:da:e0:
ef:41:54:4d:74:3f:e5:86:f4:23:e9:7d:0a:98:ec:
29:14:97:67:36:b7:2e:50:dc:0a:26:21:68:c7:70:
86:8c:e2:5f:24:66:77:65:ea:cc:2b:23:61:76:a9:
76:66:2d:d0:8f:8a:a4:11:35:bd:35:df:f4:c0:ed:
d6:3e:2f:2e:1c:8d:f8:d5:2a:6f:de:e4:16:90:41:
8d:f4:ac:dd:09:e3:f6:f6:c4:a1:33:68:2c:97:4c:
e9:2f:45:07:6f:c2:38:19:d5:c0:78:37:19:14:1e:
df:12:95:5d:bb:20:9d:b3:66:f7:30:25:6f:45:f4:
cf:0a:36:87:6a:7b:bc:cf:b2:5a:7c:29:c2:1b:f9:
c4:83:67:7d:3f:99:10:ed:60:31:60:6b:cf:cd:a0:
0c:c1:5a:a6:d7:48:68:a3:64:61:b3:5d:a2:f5:98:
5f:59:c2:66:ae:e3:bb:29:09:53:0d:57:b9:23:3e:
c2:fe:96:68:c2:81:61:6f:10:df:6d:27:81:c0:20:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E1:74:D9:C9:DF:FB:08:1B:3C:05:59:03:14:57:B0:9A:30:72:3F
X509v3 Authority Key Identifier:
keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:58:6d:23:a7:0f:d1:2b:22:7c:32:a4:4c:2a:1c:72:d7:a3:
fa:00:f1:21:68:9c:a1:41:93:34:3a:29:8a:14:b6:00:4c:5a:
05:0c:fd:5e:1a:70:fd:8c:e3:4b:4f:95:5f:f2:6a:65:16:69:
76:9a:6e:2e:9d:0d:68:81:ca:50:e5:0a:c2:25:34:50:b0:0a:
d1:b3:19:37:15:44:59:8e:a7:5c:f5:00:8d:06:dc:c4:c3:22:
63:9d:9c:14:84:70:69:51:c5:a3:04:41:db:b4:1a:4c:e8:31:
1f:fb:e2:0b:3b:6a:39:32:7e:c0:ff:83:ce:f2:a8:fe:5e:0b:
08:98:97:eb:b9:34:25:2e:3c:0b:ab:af:e4:38:3c:7c:19:89:
37:fd:dd:b4:29:cc:4e:c9:5b:1b:2a:05:43:5f:f8:70:e9:44:
0d:d1:0b:4a:cd:ce:7d:5d:dd:88:a0:c0:08:bd:fd:d5:d5:b7:
1b:54:82:0a:d8:8a:7b:c7:95:ce:e6:45:e9:6b:41:cf:d1:3d:
80:c6:4a:76:b4:30:83:50:a9:83:50:19:72:80:f2:d7:63:6e:
5d:62:09:6e:0d:f5:c3:50:0d:82:45:c1:05:cc:6d:72:84:30:
1b:84:d6:47:1e:49:86:51:5c:e2:bb:25:30:1b:70:d5:93:e9:
81:4a:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:35:43 2025 by rpki-client