Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: FSOxMRTgb61ODd25ASKRCkntL8dCI9YzF4u9AKdnNIA=
Subject key identifier: C9:C3:3B:6E:71:B3:9A:58:A9:88:16:58:6A:2B:91:15:44:9F:74:D7
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019A194F378D02D5127DA4A7C0A4D00F2B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0E5F
Signing time: Sat 25 Oct 2025 03:00:13 +0000
Manifest this update: Sat 25 Oct 2025 03:00:13 +0000
Manifest next update: Sun 26 Oct 2025 03:00:13 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: L810/RTq9Av/jzNn/EGpw4Ln+FbclDZNC62OzY6RYIU=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:37:8d:02:d5:12:7d:a4:a7:c0:a4:d0:0f:2b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Oct 25 03:00:13 2025 GMT
Not After : Oct 26 03:00:13 2025 GMT
Subject: CN=c9c33b6e71b39a58a98816586a2b9115449f74d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:02:79:8a:09:e9:aa:d9:94:a1:64:99:23:
62:ab:45:33:de:b4:da:e2:51:c4:e8:79:de:09:88:
06:dd:26:e5:b5:62:4c:f0:a7:46:94:e6:77:d6:3a:
9b:cf:78:74:54:b6:da:4a:30:da:f5:2d:dd:46:9d:
29:8a:2c:16:11:b5:15:6d:8c:7f:3a:ba:62:50:40:
d5:57:11:63:e5:c6:35:c1:a3:66:8b:47:32:b7:dc:
e9:07:82:93:20:a5:b6:bc:8b:49:b3:74:69:d9:37:
20:d2:a4:3e:6b:4f:d3:01:cf:47:d2:38:08:5f:fc:
f5:14:3c:e0:a7:f5:f1:4f:a6:12:6b:51:bc:01:5e:
3d:17:dc:62:95:91:8b:e3:06:6b:3a:60:e9:28:f1:
2e:8e:f3:82:03:1c:e8:c7:73:f6:4e:dc:8c:50:d6:
7d:ef:11:15:79:37:4f:ff:4d:06:6a:6d:24:7a:10:
c9:55:71:50:47:58:75:87:ac:f8:d4:f2:6e:3f:a4:
96:97:fc:c3:0f:fc:93:21:8c:f7:92:90:18:90:86:
cc:aa:4b:7c:e2:22:10:2f:61:57:84:b3:ac:f4:88:
68:e5:df:79:e4:f9:9b:5f:14:17:cc:26:2e:77:02:
b9:ac:ac:91:52:7c:47:a3:f2:2f:60:14:3b:c3:05:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:3B:6E:71:B3:9A:58:A9:88:16:58:6A:2B:91:15:44:9F:74:D7
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:85:97:e6:3b:c3:65:34:92:b3:0f:a1:e5:80:71:74:a0:c5:
86:11:3f:bb:96:39:cc:85:23:29:be:19:85:44:e3:53:21:1f:
bf:e9:1f:e6:40:b1:be:95:c9:f8:22:de:b4:e5:2e:91:ab:7a:
2e:d2:03:71:f4:ad:a4:da:c9:6a:16:50:e9:76:05:4a:2e:a5:
19:98:e4:a2:60:55:30:37:69:eb:23:70:c8:f1:43:62:23:00:
8e:bf:48:1f:45:0b:04:22:a2:28:b6:b9:ff:37:7f:03:29:4c:
e6:5c:c7:59:dd:6d:2a:82:9b:52:48:2c:6b:88:39:95:81:48:
db:da:86:00:72:c6:67:b5:1c:95:c2:c3:50:a5:e7:08:a0:28:
a5:7b:ca:4a:ad:bb:0e:c8:95:d7:77:3e:24:7b:2a:9a:41:d0:
4c:6c:05:5e:20:1c:df:35:2e:f4:a6:bc:87:bd:19:c0:d3:66:
22:3b:d0:59:30:77:2a:a5:c7:d2:6b:6c:07:b1:6f:6f:e8:fe:
df:f0:fc:e4:c7:72:83:d5:be:ae:3f:5b:08:18:1a:9b:e5:93:
a4:27:af:5f:6d:26:06:a7:7d:a8:10:ca:6f:81:41:ec:9f:47:
12:17:76:70:4e:1e:85:4a:9c:1f:d2:05:52:36:e4:f0:60:2f:
f7:15:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:56:33 2025 by rpki-client