Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: 8GN/eXRxVBm9Dh2XQBn9IGwblR5AVFuP2wTR0L7GrTM=
Subject key identifier: 5B:BF:69:80:D4:48:1F:65:45:22:4A:EB:3F:B0:23:0D:49:2E:0E:22
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019A71B8ADE7396B3F693FE37CDCC7163AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: 262pzbdA+cDaWrotHmhjirUMooVuOWYrCIQvr0XTHWI=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ad:e7:39:6b:3f:69:3f:e3:7c:dc:c7:16:3a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=5bbf6980d4481f6545224aeb3fb0230d492e0e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:7e:b6:8a:fa:ea:a3:99:27:5e:c9:66:4d:
4f:82:52:09:07:85:6f:5f:10:c7:45:04:e2:9b:d9:
3a:e1:2c:9d:de:03:94:5d:26:74:e9:29:5d:06:83:
df:f6:25:52:56:2a:ac:70:33:b8:33:12:f0:68:ce:
7d:66:4f:58:9f:76:ba:4b:0c:d3:0a:45:0d:e5:90:
45:df:6d:25:4f:78:6a:58:d9:64:40:6a:e3:91:f7:
40:9d:48:c8:2a:00:aa:d2:ce:b6:5d:47:9e:0c:51:
8a:33:09:7d:86:c1:a8:a6:d9:39:d4:19:38:22:d5:
4e:fb:c7:c9:a2:73:7e:24:e1:46:30:cc:7d:08:bb:
bb:73:9e:4e:7f:dd:ff:16:30:ad:bb:44:16:fd:a8:
58:28:4b:90:4f:65:b5:a0:e3:4f:43:75:29:5e:ca:
d4:d8:92:a4:a0:33:1c:ae:45:de:54:a5:d1:9f:b5:
98:56:cb:99:ef:78:60:5d:f7:a7:5c:75:8a:ff:6e:
67:ca:8a:de:81:60:06:a1:6f:c4:e6:92:e9:ad:45:
12:b2:8d:17:d0:4c:8b:c1:64:29:50:08:65:33:40:
6b:f8:f1:ba:76:92:a7:a9:7a:59:0f:d5:8d:96:ae:
3a:99:c3:3e:6d:3c:66:70:43:0d:f8:5c:ee:57:d4:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BF:69:80:D4:48:1F:65:45:22:4A:EB:3F:B0:23:0D:49:2E:0E:22
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2b:9b:45:6a:30:f3:9d:5a:66:8d:22:1b:76:19:ca:9f:72:
59:03:27:3d:a7:b6:4c:7a:28:d3:6b:10:2c:5f:2a:f6:d6:96:
26:ed:72:34:99:14:97:95:47:3f:61:30:e7:a8:9e:9e:bc:0c:
b0:de:21:28:8e:15:ae:9e:b8:dc:8d:76:dc:51:7c:c0:1c:83:
7a:03:c0:39:a9:3f:c4:b6:ab:ee:47:49:05:e5:a9:32:01:9a:
ea:40:e1:9a:94:22:c0:80:10:c0:f0:81:97:bc:5e:66:ba:2c:
c6:e0:34:36:59:27:a9:4b:b5:7a:d9:f0:6c:ca:63:dd:e4:3c:
88:d3:94:ad:fe:cf:6a:aa:fe:4e:2d:ce:6f:6d:6a:2a:8f:31:
a0:a7:c8:2c:fc:22:c4:9a:d6:1a:d6:f2:a6:ea:0e:5d:88:26:
51:3b:ab:3c:6a:18:9c:c7:1f:0b:e9:b3:6d:12:60:68:4b:1e:
4e:32:12:5a:fe:17:39:cf:c0:ea:1f:4f:48:ea:64:17:a3:53:
63:4d:3a:34:d4:63:93:4c:30:b2:9a:e6:72:c3:aa:f3:54:4f:
27:e2:35:6b:e8:c3:50:b0:b6:3d:27:26:fa:74:38:ec:a3:83:
16:82:a1:56:c2:d1:1b:c2:29:50:b8:4e:5d:cf:f6:ca:17:50:
57:67:30:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client