Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: NBqOhE0wqhhaBGngPjaQirf0/An4aqvDHeogh1uQFfY=
Subject key identifier: 86:51:0B:54:E9:18:A4:21:21:36:7D:5D:9B:96:44:63:3B:54:5C:6D
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019A71B8513DFFAF155291E9E155836192A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: EXCESsqxoP0w3Jce63pB3g4qjdRc0uJFnKaJ4Mu6N2o=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:51:3d:ff:af:15:52:91:e9:e1:55:83:61:92:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=86510b54e918a42121367d5d9b9644633b545c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:08:fe:7a:11:66:21:2b:32:4d:72:2c:a7:
92:44:04:6c:be:0a:4b:b0:68:32:30:b7:9c:7f:12:
5a:89:a2:1c:0c:90:3f:bb:68:92:9d:95:34:b5:1c:
5d:a6:a4:6e:c5:3a:62:43:d8:45:08:04:ba:60:14:
23:00:8e:3f:b8:ab:ef:7f:09:0a:8f:17:06:0f:da:
b2:6d:e6:65:b3:14:6c:d0:2a:7b:34:06:d2:59:86:
a5:ca:f2:02:03:77:73:9e:81:cf:23:7d:6d:e7:07:
6a:e8:ea:11:13:e0:06:59:e8:26:a2:03:fb:6c:da:
52:82:82:30:d3:91:54:68:ed:81:ee:e8:87:7e:5f:
31:e8:3e:7c:79:86:83:fe:16:d3:27:6d:dd:9d:de:
f7:0f:f2:6d:ec:a7:a6:36:00:93:3c:8d:83:57:37:
ed:f8:3b:4a:f5:8a:a1:40:b5:5b:9f:40:fa:6d:73:
28:0d:fd:bc:07:39:ee:9d:fe:95:76:dc:18:85:5c:
c7:a2:d6:2e:0c:80:6c:49:89:8a:66:91:39:ea:d3:
7c:30:9d:e1:3a:4f:89:fc:4a:15:31:ad:ab:4e:3f:
32:dd:60:50:d6:8f:3b:0a:ff:07:55:c7:3b:2b:1a:
d7:8c:a4:51:21:98:24:e9:e2:00:27:cf:c4:1a:a4:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:51:0B:54:E9:18:A4:21:21:36:7D:5D:9B:96:44:63:3B:54:5C:6D
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a5:2c:0b:f4:4d:54:26:45:8d:24:59:4d:dd:d5:14:6a:df:
5e:5e:30:d8:98:e7:e1:bc:fd:fc:14:70:5c:a7:8d:a4:51:23:
4f:97:5e:60:a7:1c:9c:36:4e:7c:39:9f:bf:aa:b4:bb:18:bf:
51:bd:c8:89:9b:68:20:5c:47:00:ca:47:53:29:bd:a6:0d:86:
f6:50:cc:6e:73:a5:9f:e3:4b:af:7d:03:0a:bf:5e:fb:97:d2:
5e:1c:62:d4:52:66:0d:14:ce:40:65:5b:da:0b:81:a9:1a:e7:
83:8c:bb:4b:fa:46:66:df:a6:cd:77:7c:c1:bb:9e:40:e0:a6:
95:6d:f7:19:f8:b3:9c:5a:c7:10:e9:d0:09:79:c1:11:ce:72:
59:a4:aa:54:a9:ae:74:65:a4:3e:aa:77:e5:ce:90:0a:51:c2:
72:d6:1a:90:d8:e3:9e:59:2c:c7:42:e9:b0:96:66:66:d5:f8:
ec:cf:0f:bb:42:e3:0b:3c:b0:4f:85:18:17:63:28:fc:4a:ae:
ce:f3:43:bc:a7:9e:5b:d4:0f:51:24:03:38:67:17:a0:49:f5:
38:38:d0:53:98:0b:ef:29:27:e6:c7:fb:ce:38:6f:75:6d:b3:
42:7f:39:d5:5f:8a:21:8b:95:fa:2e:f0:a5:63:b3:c1:eb:c9:
d5:23:91:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:44 2025 by rpki-client