Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier: 1aXovhV6JL7YzJNfjVMmRnY4gQjJl4rKNmPZpYMKxeE=
Subject key identifier: A4:1A:BA:AE:20:E8:7B:6E:48:F1:20:89:E5:6B:26:1C:48:C0:EC:D1
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial: 019A71B77C72F6CECBA7E54E35FFF9913728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: hs76B324givnWc4QzS7xwVQCouPExsHpYUXI5ZMZ26E=)
2: f0RuL1swXlvp41CLCru-Mt1TNyc.roa (hash: rkjC9/AqAR3AXAOW7ubyDoWQhwKzvm+Iu5S5RZdguhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7c:72:f6:ce:cb:a7:e5:4e:35:ff:f9:91:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=a41abaae20e87b6e48f12089e56b261c48c0ecd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:56:27:3e:8c:e5:88:54:ea:b7:58:0a:7e:
43:3a:c0:37:84:a7:eb:89:98:c2:99:10:8a:0d:2e:
07:45:f0:a0:43:88:c3:72:9d:e2:f5:f2:0f:a8:be:
5f:1d:86:3c:9b:57:36:3a:4e:4c:87:92:e4:45:60:
e5:f0:92:8b:ee:41:3d:20:96:94:0f:2f:bb:20:be:
87:dc:e9:76:3c:b8:c2:a7:f7:a5:35:76:54:6b:70:
92:1b:da:0e:94:43:c1:b2:49:46:13:04:d7:75:99:
0b:e7:a8:84:d8:33:04:93:b6:c1:b5:01:b9:ae:67:
6f:2d:20:d6:8f:13:1a:6e:ea:0e:12:4f:bc:a0:4f:
67:9e:58:5c:56:56:39:ff:cd:8f:5b:8e:d4:72:d5:
fa:d6:cd:b2:b4:a9:98:6b:3e:2d:0b:f5:f1:62:86:
7a:7b:20:5c:1d:89:46:74:20:12:ff:cb:df:14:5f:
f4:ef:b6:a1:7a:49:ed:09:a6:df:97:53:36:17:7a:
55:90:4e:e6:b6:6a:8f:52:13:3d:30:a6:d4:88:21:
af:08:81:f7:a8:d5:e2:74:6e:52:b6:38:08:32:50:
f0:96:4d:95:f5:d7:69:18:2b:bb:36:1f:9a:08:50:
9f:d4:85:0f:47:20:be:06:db:c7:d2:6a:a1:3e:40:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1A:BA:AE:20:E8:7B:6E:48:F1:20:89:E5:6B:26:1C:48:C0:EC:D1
X509v3 Authority Key Identifier:
keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:36:f8:51:45:dc:19:bc:a1:84:92:85:f8:e1:fc:56:0b:
90:6d:98:00:d2:9a:1f:05:4b:8a:b5:cc:ee:8f:5e:66:db:18:
1c:12:11:d0:6a:db:0d:76:d6:7d:e7:86:08:5e:df:f0:87:69:
ae:19:91:b3:c8:c4:78:2a:36:46:79:fd:98:63:08:05:82:86:
02:f7:4e:55:82:81:65:cb:40:43:d8:01:ec:0b:1f:33:c2:8a:
d1:03:6f:ee:33:e5:82:96:5a:c5:23:31:82:ff:23:00:f3:6c:
97:d7:23:49:8c:e9:0a:c8:b9:c2:f8:f0:bb:db:08:68:ff:0e:
69:e0:c5:06:ed:fc:80:ff:5b:b5:64:5a:9d:c3:74:55:fe:95:
c8:b1:ec:90:11:ef:b1:40:99:3f:0e:df:4f:cc:75:c1:64:04:
93:90:e6:83:c1:0f:e6:8c:8a:4b:a0:f4:86:46:68:40:12:66:
7a:ef:10:2b:69:90:cc:5d:cb:c1:f7:43:3a:3e:3e:d8:d7:be:
25:a4:20:9f:3c:45:2d:f1:51:ee:02:b5:2e:f0:03:50:29:19:
c2:6e:97:2a:03:8d:8c:fb:16:da:ce:ed:ab:74:bf:6a:37:5d:
72:c5:0b:f9:20:d5:93:43:89:ae:cc:24:10:63:98:0a:ec:e1:
e7:f2:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:29 2025 by rpki-client