Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File: 8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier: PhSJHK8WY7ZKWorp5rrEj//zDFyKs+ZSsMk8oYjegCE=
Subject key identifier: 87:FE:64:AB:7D:44:0C:94:89:80:A3:D9:CD:FF:A7:1F:EC:65:E0:53
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer: /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial: 019A71B85C4B509C22C0F182EB230402689B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: n7np9tIVaVv9MM4cTtfhFHR3hf8lzTUIGGiCB0L5K+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5c:4b:50:9c:22:c0:f1:82:eb:23:04:02:68:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=87fe64ab7d440c948980a3d9cdffa71fec65e053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:5b:7c:e0:f4:ef:7a:a4:40:b4:76:50:29:
1e:30:67:35:48:0c:17:dd:48:3f:b2:79:92:a1:c0:
cb:c3:f7:ce:b2:cc:ad:b9:d7:af:87:c2:dc:65:d3:
d7:ed:d0:9f:ae:5b:be:83:dc:18:5b:0e:5c:89:fb:
84:9a:57:23:e0:94:d8:b8:f6:3d:96:f8:cd:a8:08:
59:23:ea:61:2a:b1:a0:dc:fa:2c:ab:4a:bf:f1:40:
e7:4e:14:52:b2:43:4e:36:79:e7:c9:9c:4b:39:66:
79:fd:5f:ab:f7:32:b1:40:aa:95:f3:ab:3c:68:02:
d7:1e:f1:60:79:82:e8:2b:0c:8c:77:fa:d8:12:61:
2e:72:71:f2:3c:c3:6b:ac:af:9c:fb:21:4f:89:37:
30:07:21:8f:59:0c:66:ef:3b:03:be:d9:bc:18:a2:
c8:35:34:06:8c:ff:cf:c5:e3:11:f6:5c:d6:2b:ec:
e0:45:86:e8:8e:29:d5:1e:24:a1:34:11:b1:e9:d5:
08:49:17:d0:f8:40:b0:6d:8c:73:d0:7b:ae:81:46:
6c:e4:b4:b7:b0:0d:d9:83:96:2f:ed:d8:47:b5:f6:
31:0f:3c:06:9d:fb:6a:ae:53:9b:ea:ae:1f:a3:d7:
b8:0c:a7:d2:58:4c:c2:b3:eb:e2:65:d0:8e:24:8c:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:64:AB:7D:44:0C:94:89:80:A3:D9:CD:FF:A7:1F:EC:65:E0:53
X509v3 Authority Key Identifier:
keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:47:10:f5:36:ae:8a:03:f2:f6:c3:2e:2f:2c:e6:f1:47:e2:
d1:64:6a:62:59:8c:af:a0:5f:28:fe:50:fe:bf:94:25:12:9e:
59:0f:25:f2:e6:79:84:9c:96:66:b0:89:3f:7b:a0:bf:f0:5a:
29:e6:11:91:9d:f9:81:6e:0b:67:c8:41:2c:2c:e2:e7:30:52:
5b:a7:bb:6a:f7:3c:07:f5:71:d4:21:36:54:ff:4f:53:2d:52:
ee:e0:e3:d1:4c:b4:9a:80:78:bf:c8:f0:23:a3:94:08:27:60:
ac:b1:85:b2:f0:94:ad:ce:3d:08:2e:f7:a2:7f:82:6f:b6:9b:
17:3d:dc:b3:38:de:f1:69:39:cf:9b:1d:16:2f:c0:38:ac:99:
28:79:75:90:d4:42:15:d5:0a:b3:70:a5:88:df:c7:f7:97:6c:
ce:43:79:59:d9:c3:b9:cc:19:93:cf:fe:08:9f:5b:f8:46:fa:
82:ae:f3:e5:d0:12:c8:07:aa:17:b9:f4:52:ff:03:fa:ce:cb:
da:2e:d4:d0:e5:df:36:2c:ab:6b:95:cf:39:e8:f2:82:48:5c:
a1:cc:f9:8a:b5:18:90:c2:8c:58:54:6e:01:63:0b:78:61:f2:
57:ff:25:a8:86:b9:21:c8:d1:c2:c1:c3:4b:28:75:ab:af:3c:
a2:87:a3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:10 2025 by rpki-client