Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: 7G14iPSSdF+3XTZYjLMkctRoXEE0jFtL+nRlkfBIkFk=
Subject key identifier: F8:0B:64:A6:64:C6:7F:E9:B0:6C:FF:36:E4:43:CB:3C:41:2A:76:3C
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 019A7338479E6A572A70D47D0D13A89CED1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 1013
Signing time: Tue 11 Nov 2025 14:00:59 +0000
Manifest this update: Tue 11 Nov 2025 14:00:59 +0000
Manifest next update: Wed 12 Nov 2025 14:00:59 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: wqRa/1m/hVCdec4j49I+jMXzcQD+Bjs8h6WMtZeRjsU=)
2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:47:9e:6a:57:2a:70:d4:7d:0d:13:a8:9c:ed:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Nov 11 14:00:59 2025 GMT
Not After : Nov 12 14:00:59 2025 GMT
Subject: CN=f80b64a664c67fe9b06cff36e443cb3c412a763c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:46:28:62:3d:a9:41:f9:7c:03:a0:3a:20:
12:92:55:62:c3:ab:39:ef:db:c2:0d:e4:2b:e5:64:
67:0b:53:bc:c6:e5:1c:e2:d9:21:ee:d5:ed:21:76:
0c:86:7a:af:f5:2a:7f:8a:4a:02:c7:07:8e:af:08:
98:3b:86:c9:34:28:da:c0:16:64:59:76:df:c5:88:
18:fc:8c:7e:fe:07:ed:35:8a:1e:be:5e:e5:5c:51:
94:78:46:52:f5:98:2f:e1:3b:88:28:1a:a4:0b:6c:
7d:cc:f8:e8:f3:82:2a:21:62:5e:fd:aa:1e:72:f6:
85:62:a1:dc:57:01:65:95:e2:06:a6:d6:29:1d:83:
f1:6e:63:d3:d1:34:0e:75:71:6c:20:58:fa:5e:2a:
51:77:3d:7d:dc:4e:fa:04:3c:81:49:87:ab:87:1d:
1a:03:e2:60:5d:0a:b3:b6:1d:9b:6b:90:a6:e8:ff:
f7:63:b5:ea:16:2e:25:a6:f4:8a:92:74:e2:db:70:
0d:5c:13:af:1b:c2:69:cb:a9:a8:a5:95:2a:7f:53:
a1:05:1d:ee:ed:43:3d:71:9a:37:e1:e3:5e:1b:e7:
ad:ba:d2:d9:40:d1:08:04:08:1e:83:07:ea:73:ce:
10:7d:b6:36:8e:33:41:94:72:42:c2:f8:0d:be:fe:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0B:64:A6:64:C6:7F:E9:B0:6C:FF:36:E4:43:CB:3C:41:2A:76:3C
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ce:31:2a:a1:04:91:10:43:02:4b:a4:2e:a9:45:0d:97:c0:
e1:ea:04:c9:31:b1:19:4a:49:51:74:cd:f1:9e:d4:39:f5:84:
4e:53:f5:7d:ff:32:08:f2:da:22:52:9e:bb:ce:b9:6a:f4:7b:
f7:53:8c:77:3b:7e:79:ad:a2:e7:ea:68:0b:ad:93:3b:48:b1:
cc:41:f3:6a:ee:9c:d1:e8:30:00:40:69:a9:4a:30:15:ad:48:
43:5c:48:c0:9f:17:b6:bf:6c:c8:d3:54:e6:da:1c:7d:e6:d5:
9a:ea:38:0b:00:68:5e:de:1e:10:0c:2a:e8:10:af:7c:a7:c0:
58:3b:02:90:5b:9f:fb:1c:83:57:e2:17:85:60:3a:67:21:5c:
f6:7d:1a:c1:75:d5:30:87:b3:ba:96:ce:c8:15:1b:9c:69:51:
cd:85:18:ea:a2:1c:ab:d3:82:42:54:9a:49:e6:fc:87:aa:bf:
f8:fc:01:4e:00:0a:3a:60:bb:47:be:0a:bb:c8:f2:43:56:2f:
6f:9a:4e:91:38:7e:0f:f8:25:d1:5c:4f:50:ec:92:be:50:a5:
20:78:e3:b4:bd:ef:ef:31:5e:ed:70:42:1d:e9:fc:64:ea:a6:
1d:af:96:72:f7:ff:e3:1d:43:72:4b:8d:9a:9c:3f:06:60:de:
2f:97:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:39 2025 by rpki-client