
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
File: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json)
Hash identifier: UseU6AS0ruGCRZCH3s4Tfc9yM8E93Q3oxba+mH2dkbg=
Subject key identifier: 48:DA:0B:59:11:65:EC:7E:B2:17:BF:80:14:BE:7C:D9:7C:BA:DC:B8
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Certificate issuer: /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial: 019A2365900CE5C3FC217C23963C1AD1E75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 02:00:49 +0000
Manifest this update: Mon 27 Oct 2025 02:00:49 +0000
Manifest next update: Tue 28 Oct 2025 02:00:49 +0000
Files and hashes: 1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: kxmZnsO43QCJOm8Dgcve/woSCp7r/jSlqeeHhZu04Bc=)
2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:90:0c:e5:c3:fc:21:7c:23:96:3c:1a:d1:e7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Validity
Not Before: Oct 27 02:00:49 2025 GMT
Not After : Oct 28 02:00:49 2025 GMT
Subject: CN=48da0b591165ec7eb217bf8014be7cd97cbadcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:c7:99:04:6d:8d:9e:28:29:80:79:db:15:
c7:25:4a:3b:e6:b2:e3:0a:b9:f9:43:9e:fc:5b:5f:
49:43:59:d6:ac:8a:0c:cf:47:5e:2b:7c:35:43:94:
9e:8f:76:05:11:80:88:b5:aa:a2:af:9a:3d:32:f1:
07:c1:1f:fc:e6:78:19:57:e6:bf:e0:55:24:bf:a7:
54:7f:d1:b6:45:18:f6:78:83:3d:f6:88:b2:7c:57:
5f:19:f2:c1:b3:aa:a9:81:78:c9:22:7f:3a:a7:34:
ed:d0:ce:16:b7:cb:d2:fd:5f:ea:3d:01:34:61:4b:
0d:99:f9:d0:52:e0:15:62:08:89:24:8b:9e:19:f9:
2b:5b:a7:c6:4a:03:20:a0:35:1b:ec:6f:ce:1d:98:
1d:34:e9:fe:56:2b:aa:aa:52:ea:98:07:8c:b0:c0:
be:25:ba:33:d1:76:a4:3f:85:ba:f2:58:ed:b0:55:
32:1a:8d:9d:51:7d:e7:84:47:53:f0:86:b0:89:18:
de:57:3a:ee:69:51:c7:fd:bc:a8:fc:5e:a3:8b:73:
2c:b8:d4:4d:d2:0f:ae:9b:8b:3c:01:6a:2c:b2:6b:
b8:b8:02:24:d9:cc:ea:92:f4:f7:10:d4:1f:e4:8b:
8f:4b:fe:99:06:8f:de:1e:f1:f9:0f:7e:8a:65:4e:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:0B:59:11:65:EC:7E:B2:17:BF:80:14:BE:7C:D9:7C:BA:DC:B8
X509v3 Authority Key Identifier:
keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:aa:15:f5:7b:07:d5:bc:62:0b:3b:05:a0:65:27:cb:24:89:
43:4b:83:1d:95:cb:a6:10:4b:02:8f:23:d3:2e:4a:1c:84:ef:
3c:15:d4:e2:5e:48:8e:b7:6a:74:9f:db:45:87:7c:0d:1f:9e:
8d:fc:da:59:ae:7a:47:e3:ab:36:9c:cf:00:e8:90:22:09:24:
86:88:8a:88:ed:13:ff:17:f5:02:6e:07:ee:e8:3e:dc:03:98:
1f:fc:99:5e:7d:35:8e:44:92:61:b1:11:3e:5d:56:33:af:3c:
5c:22:e4:a0:66:d4:94:10:c5:0d:36:af:90:1b:12:6d:3f:84:
d7:ed:31:c9:6e:05:04:aa:12:be:75:a7:d5:f6:8c:24:81:fd:
30:98:68:8b:ad:cc:3b:41:15:03:8b:e2:7e:4e:aa:9d:a1:07:
fc:b4:66:dd:44:1b:63:60:f1:f7:49:47:87:74:77:3d:24:f8:
49:fd:06:98:d2:0a:75:cc:34:65:26:7f:23:13:fc:76:aa:85:
d1:72:09:31:51:4b:22:9a:8e:02:70:31:2e:38:ba:af:26:17:
d0:e5:ca:49:61:48:92:82:e9:70:05:21:75:f8:c0:88:7f:c4:
a1:00:6e:07:c9:e5:42:ba:70:01:33:b5:e1:41:8e:0b:82:db:
0f:a6:2e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:18 2025 by rpki-client