Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: uXGWtRAZU3TeluWlMxnyKdWji4qDeDUCT3PzZIDFTQU=
Subject key identifier: F7:F3:04:C3:48:7B:A8:38:C6:45:29:0A:2F:D0:3A:3F:4C:59:EC:CF
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019A1C503F88E22DB7A3645A12E803DA8C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 48
Signing time: Sat 25 Oct 2025 17:00:12 +0000
Manifest this update: Sat 25 Oct 2025 17:00:12 +0000
Manifest next update: Sun 26 Oct 2025 17:00:12 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: HI/9fIIARDrOlHGbMolX5/ookfpSBDO3UcqbcxEToA4=)
2: Xd7ijHjwtfXf4zZiE_HQf8TmqP0.roa (hash: w9B2n3G58lCmyJiIUIJesOdWt7RmGyJHNmHtEsf7LS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:3f:88:e2:2d:b7:a3:64:5a:12:e8:03:da:8c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Oct 25 17:00:12 2025 GMT
Not After : Oct 26 17:00:12 2025 GMT
Subject: CN=f7f304c3487ba838c645290a2fd03a3f4c59eccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:08:fe:d9:dd:3e:50:01:6d:23:7d:3f:29:
30:93:87:04:4d:1b:23:22:2d:12:24:d9:51:01:e9:
a2:92:c1:62:f2:65:82:51:88:c1:4d:b7:76:b1:af:
f0:26:e7:d1:90:42:62:08:a6:45:c1:8e:35:c4:34:
2d:fc:c0:a9:bd:6d:49:6e:22:48:d3:d0:a9:47:6d:
82:d7:f0:2d:32:da:48:0d:05:c6:96:9e:f6:44:e2:
ae:3a:17:a5:e8:3d:18:6b:b0:7c:fa:49:d9:35:5f:
f7:9c:13:57:a1:b4:f8:39:2f:14:78:12:5c:9c:5c:
b8:4e:11:c2:5f:fb:8e:93:ff:40:b7:de:65:bc:71:
41:66:33:b0:ea:0f:87:fd:63:c9:70:d6:21:eb:d3:
00:d6:72:7e:ca:0a:ca:70:be:45:85:6b:74:89:16:
f0:22:2c:07:9b:6f:71:3c:c1:e2:5f:45:e4:95:fc:
43:d1:dd:ea:a9:34:2d:7b:06:7a:16:57:ee:f8:67:
98:fd:d2:52:b6:33:c1:98:a3:0d:17:d3:9e:f4:1a:
68:91:97:8b:9b:02:c1:6e:26:c6:ca:b3:f0:68:3c:
e2:f5:5d:a7:00:6e:f1:fd:c4:11:9b:0c:40:b3:79:
e6:67:d6:51:75:26:e1:41:76:ea:e2:96:5f:40:41:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:04:C3:48:7B:A8:38:C6:45:29:0A:2F:D0:3A:3F:4C:59:EC:CF
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f7:9e:8d:ff:ba:5e:f5:1d:d7:a9:a7:48:99:71:67:f1:ad:
91:5b:75:bc:d1:69:47:52:09:84:79:1f:4c:5f:c9:0b:c4:1d:
87:9e:1f:2b:9c:14:66:41:43:3e:1a:ea:48:c4:29:3e:a8:06:
32:0e:aa:1e:c3:50:7f:67:bd:17:ca:ba:b1:1f:72:a9:6e:f0:
27:fa:6a:d3:a4:4a:89:b5:9a:f5:f3:16:b5:0e:fe:f8:34:29:
2a:ca:cd:a3:04:5b:d6:ce:bd:d3:9e:89:9a:64:f8:8a:e9:36:
6f:07:92:eb:5e:93:fe:56:46:a6:ef:c9:6c:ef:ac:1c:ed:30:
44:7b:59:ae:ef:c9:59:fd:1e:ee:9c:4f:69:79:8e:2c:0f:29:
2c:0f:8c:eb:d6:ee:2d:a8:d7:fb:1c:b3:ac:29:76:99:9f:ab:
ca:6d:50:00:40:d0:b2:13:23:b4:c7:5b:fa:8d:a9:9d:cf:9d:
a9:b2:b0:f5:90:eb:8f:7c:33:54:c0:ce:54:16:6b:66:f9:be:
85:6d:1d:07:ce:ff:b8:88:ea:ad:72:db:3b:c5:9e:00:f0:f9:
8c:5d:be:28:6c:f0:19:f5:4f:fd:e4:f6:aa:f7:bf:86:e4:20:
f9:d4:97:24:86:1e:60:32:af:df:e0:90:6f:13:63:43:8d:c9:
a8:d9:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:32:44 2025 by rpki-client