Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: eTns4438XT5kNr1WygHzXrdHML/bADgcLRPfRau8/8E=
Subject key identifier: A3:FC:B3:82:49:8E:FC:7C:04:DB:27:F8:EF:E7:52:D9:88:E7:25:53
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019922C3561D1D871953DC5A68F33475A52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 05F2
Signing time: Sun 07 Sep 2025 06:00:50 +0000
Manifest this update: Sun 07 Sep 2025 06:00:50 +0000
Manifest next update: Mon 08 Sep 2025 06:00:50 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: +3Qy/rVoegG+6NjgU7SLENo5V3xWHVgVAVnt/maiPlM=)
2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:56:1d:1d:87:19:53:dc:5a:68:f3:34:75:a5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Sep 7 06:00:50 2025 GMT
Not After : Sep 8 06:00:50 2025 GMT
Subject: CN=a3fcb382498efc7c04db27f8efe752d988e72553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:28:0e:d2:b0:bd:40:ca:ee:95:60:aa:5d:
2f:57:0c:fc:31:25:58:22:e5:cc:a1:2c:fc:9c:cb:
6d:91:d7:8b:83:5b:c3:f2:db:01:40:d0:91:a4:b8:
ca:08:71:d2:e6:57:ef:0d:e3:24:51:c2:ff:f6:90:
3a:5b:7f:f9:dd:f6:95:82:90:38:b4:71:b2:53:a8:
ea:5d:ae:96:e2:1d:6e:53:60:c4:fc:1c:d2:cc:ff:
ad:44:25:48:15:e8:01:b7:b1:96:c6:f4:cf:90:c4:
02:e6:56:85:cb:5a:73:7f:ec:c1:5e:f8:fb:4b:45:
8c:c0:ba:22:b2:15:66:fb:b9:20:c3:9d:59:57:45:
b5:71:96:68:d9:f2:27:fe:c1:24:dc:68:10:20:13:
cd:5a:1b:b4:03:c5:c6:f7:36:51:4d:ef:8c:68:9f:
2d:2d:a9:d6:c0:56:10:88:cc:14:89:8c:13:19:28:
88:46:78:e8:16:54:bb:64:e9:e7:c4:2b:b2:d0:a1:
25:b8:11:2e:62:e5:93:d8:b1:c2:80:64:66:6d:2b:
fa:31:3a:0f:3b:82:b3:11:26:81:fa:5c:6f:63:4e:
85:96:92:cc:47:0b:2e:92:57:fd:c5:83:67:2f:6f:
d4:11:7b:9e:0c:b2:10:24:79:ec:75:1f:60:70:e3:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:B3:82:49:8E:FC:7C:04:DB:27:F8:EF:E7:52:D9:88:E7:25:53
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:01:76:57:9f:45:fc:4c:af:e3:c1:2d:92:98:bf:64:7b:18:
73:00:12:f3:1b:61:4e:73:ef:be:46:b7:ed:55:92:31:be:31:
12:e3:13:c4:81:0b:37:21:30:3f:19:2a:ed:37:3a:12:22:a3:
74:45:f4:87:83:bb:62:28:d6:13:f4:b9:d9:bd:fb:26:76:ed:
d8:6a:36:ee:d5:bc:08:d0:5f:6f:2d:12:0f:27:02:e1:fb:c3:
62:c4:62:77:10:db:8c:c7:12:71:f9:40:05:51:69:cf:27:81:
10:af:1a:fb:82:ed:6b:e1:d3:60:f5:7b:94:28:26:08:7a:f6:
40:a1:83:83:a0:65:f5:69:1c:e8:29:49:ed:de:65:b6:3a:44:
e9:4d:d5:27:7e:04:36:24:73:9c:fe:c9:b7:9b:30:63:d4:13:
30:c0:c1:5c:9c:22:c2:a8:02:1f:86:03:43:7a:f0:4e:22:88:
d7:ed:67:ee:af:bd:1b:82:b4:d4:b2:b8:db:ac:f6:bc:e6:a0:
ad:1a:f5:50:a4:9e:47:c2:af:f9:16:30:7f:39:94:cb:eb:52:
8b:6b:db:ef:11:f6:6a:9c:34:15:66:5b:92:43:68:90:c6:82:
f8:62:95:06:e8:0c:7a:c6:76:df:d1:1d:7e:fb:b8:c5:ab:76:
97:8a:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:03 2025 by rpki-client