Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: G5XO6Pwtc/3BFSfVSarFvC3SLb6OvcS/Svh/KyYkKrE=
Subject key identifier: 2D:9B:9F:F8:ED:D2:F0:6F:41:CE:84:D8:C9:D1:87:C2:74:3C:BC:B6
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 019A711356ACEF30472A4A6F8F9F41900BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0B7D
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: zVQ4MYjFwRNGJwPUCcwBhTmkNTxdTFLme01eG2Nxz8Y=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:56:ac:ef:30:47:2a:4a:6f:8f:9f:41:90:0b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=2d9b9ff8edd2f06f41ce84d8c9d187c2743cbcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:8b:86:17:4b:fe:87:5d:45:83:1f:42:87:
cd:63:ce:4c:e1:81:c4:68:9d:55:bd:3a:15:3f:21:
b3:14:59:4b:2c:42:80:df:9a:cd:8a:61:a6:26:76:
6a:14:27:0c:58:ba:76:36:77:3d:30:02:49:8e:03:
ac:5c:56:44:20:92:d4:2b:57:17:b4:de:cb:b5:03:
d5:7d:45:0e:7b:10:32:13:e1:fe:cd:b6:80:c8:e3:
2a:36:ec:e1:3c:35:60:3c:5e:46:c6:fd:9c:93:26:
90:b7:7e:da:37:9b:77:28:7a:62:81:59:d9:0b:ae:
32:d9:a8:50:18:9a:40:5d:3b:90:cb:74:a2:04:77:
93:ae:06:6b:cf:9b:95:ae:98:6b:0b:61:e5:7c:b4:
92:36:de:9c:f4:40:0a:e3:d4:78:cd:0c:c0:2c:92:
24:46:21:9a:fb:ac:33:0c:a4:6d:20:b5:c8:92:a5:
e7:62:4a:ba:0f:26:45:20:67:3a:af:b1:cf:93:39:
b7:86:8f:17:04:6f:31:5c:ba:06:eb:b9:28:67:3f:
3c:c0:66:52:51:1b:ef:61:ff:5f:19:41:bd:6f:51:
c3:0c:69:40:92:f6:bc:18:bf:c5:85:e7:b8:a0:ad:
e2:3f:3a:69:e6:eb:0c:3d:a0:7b:d4:09:24:c9:11:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:9F:F8:ED:D2:F0:6F:41:CE:84:D8:C9:D1:87:C2:74:3C:BC:B6
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:76:51:6a:da:74:ba:23:47:e6:61:9b:b1:bf:fa:86:66:
0f:03:4b:8c:36:16:f9:57:2b:3b:ee:d1:bd:1f:ef:13:e2:28:
00:bb:38:f8:1a:e1:bf:d2:d4:28:39:4e:e6:d2:45:a1:d1:83:
d2:6b:55:88:cb:e8:ec:3e:26:79:b2:54:27:13:7d:10:c3:12:
c7:f8:20:02:af:5a:e7:92:bb:3d:49:59:a3:e3:0b:08:c4:d7:
e1:59:ab:2b:cb:8e:25:d0:b2:a9:94:42:4f:a2:eb:59:ef:62:
ab:f7:87:19:73:8a:a5:66:b2:4d:11:f5:53:88:84:22:10:fa:
32:61:68:51:23:b5:d4:fa:b1:ee:46:95:93:9d:dd:13:a7:4a:
51:78:3a:43:67:2c:cc:c9:7a:b0:c4:15:bd:09:d6:93:7f:d9:
f5:9d:0f:f1:21:2a:f0:e4:8c:04:16:5e:06:cf:ac:d4:6f:be:
52:89:48:47:c5:3e:fc:a1:fe:7d:36:31:11:fe:1d:b4:10:2e:
90:e3:d7:3b:c3:6b:11:fd:90:31:8c:bb:c8:70:c8:5b:11:98:
f1:15:7e:04:5e:33:af:9d:52:e7:7b:e6:96:66:a6:5e:17:ef:
3f:c2:0d:fd:f5:b0:7e:7f:f8:43:2b:09:1e:3f:48:e0:62:41:
9b:a4:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:46 2025 by rpki-client