Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: 6Jgrc+SiuGJ/ipBKBhVS4SZbjRC1BBBYDBsOUX/cSI8=
Subject key identifier: A5:5D:C8:8F:93:B8:E7:08:C8:3F:F4:74:B1:26:84:D7:83:FB:22:03
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019A70DC2732501B0535FC32546916B68B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0B0D
Signing time: Tue 11 Nov 2025 03:01:07 +0000
Manifest this update: Tue 11 Nov 2025 03:01:07 +0000
Manifest next update: Wed 12 Nov 2025 03:01:07 +0000
Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: 3xU5QYkK2QOQqsnQDTbU+cGXyEULXfgFNkZg5sEQipw=)
2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:27:32:50:1b:05:35:fc:32:54:69:16:b6:8b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Nov 11 03:01:07 2025 GMT
Not After : Nov 12 03:01:07 2025 GMT
Subject: CN=a55dc88f93b8e708c83ff474b12684d783fb2203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:2a:cb:ad:bf:ba:29:41:e2:91:03:0c:3f:
89:f8:3f:ba:a0:a0:92:63:ed:88:f3:c4:e6:a9:dc:
85:c1:40:0b:0d:e8:55:62:87:54:53:97:f8:50:6e:
7b:cf:e5:f3:27:f3:ca:f5:0e:54:02:79:9d:d1:0e:
75:b5:ff:6b:3b:e2:36:d2:df:f2:bb:31:c3:77:09:
5a:78:ef:b0:7f:35:be:78:21:e2:d1:bc:65:de:cf:
c7:67:aa:85:45:e3:dc:d6:71:4b:40:0d:ba:48:d4:
15:93:d7:b6:28:33:b3:0e:1e:84:84:23:22:8f:62:
29:a6:5e:44:58:21:fd:b7:93:1d:40:9c:a6:c9:33:
03:f0:15:1b:95:fc:3c:2c:65:f7:c8:b0:06:10:43:
f6:1a:c0:3a:a9:3d:1b:2e:6a:75:fc:f4:9c:48:55:
8a:61:80:55:73:cb:43:2a:23:47:1b:a3:0f:24:a1:
9d:76:a1:45:e2:60:5a:c0:bd:88:db:00:28:22:3a:
1a:5e:48:d2:fb:fa:d0:5f:c4:3d:84:1e:35:04:73:
48:55:a2:d4:a9:fc:7c:a2:c6:d1:66:4e:1b:17:9e:
ee:e5:8c:45:b2:1a:66:39:8d:dc:34:83:2a:ff:33:
5f:9f:bb:34:96:d5:89:a6:f0:2f:23:58:29:b1:5b:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:C8:8F:93:B8:E7:08:C8:3F:F4:74:B1:26:84:D7:83:FB:22:03
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ce:a4:85:2f:e6:d6:6c:51:e9:b4:12:1d:a7:f5:70:2a:3c:
39:fb:e9:8c:bf:e0:bc:bf:b5:f4:5e:00:c1:d5:92:8e:b9:3c:
85:df:e8:a6:53:10:a3:ff:2d:59:e2:9a:0d:28:47:06:bc:14:
48:9f:9f:ef:f6:4d:fa:63:5b:0d:95:a1:9e:4b:2c:fa:31:53:
0e:fe:a4:b5:c8:e2:99:95:1d:6b:f8:4a:97:44:ba:e8:3c:71:
38:27:9c:b3:f7:25:ce:c5:88:11:54:a1:7f:27:32:fd:a3:1b:
a0:68:b0:4e:21:5a:bd:93:db:14:1d:d1:e9:50:76:6b:e4:42:
50:19:f6:9d:94:05:88:29:f6:72:b0:d4:32:c5:fe:86:f8:73:
23:39:ea:c7:c4:cc:b6:0b:0f:02:01:2f:57:db:25:66:1f:65:
f7:37:ee:f5:1b:f3:99:04:ef:c3:c4:da:f0:6b:50:e2:ed:bc:
84:35:60:16:0a:67:d2:dd:d6:b9:03:98:a9:2d:b2:70:69:2d:
d0:c1:99:97:cf:73:fc:7e:f9:1a:31:bd:49:bf:df:f3:81:e2:
a8:3b:40:e9:0a:66:bd:da:ef:c6:b2:54:0b:0d:34:48:e9:a1:
67:b6:6b:98:d5:06:05:d8:1a:33:a3:18:a5:33:87:d9:ad:4c:
34:ff:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:16 2025 by rpki-client