Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: oAm+0Hz+m50RZfRaekN3IIhc44WcUJexE1EtetULbu0=
Subject key identifier: 0A:8B:BF:48:61:87:44:D1:FB:74:4F:A2:3A:8C:CC:D5:67:FB:16:E0
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019A56E4C9496339AFA9BCECBE30905E32B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 06BC
Signing time: Thu 06 Nov 2025 02:00:25 +0000
Manifest this update: Thu 06 Nov 2025 02:00:25 +0000
Manifest next update: Fri 07 Nov 2025 02:00:25 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: eJChtbexL4ZabMAq7+ckHzkt4YCoazvqWMNzcMw3EKU=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:c9:49:63:39:af:a9:bc:ec:be:30:90:5e:32:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Nov 6 02:00:25 2025 GMT
Not After : Nov 7 02:00:25 2025 GMT
Subject: CN=0a8bbf48618744d1fb744fa23a8cccd567fb16e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:53:8c:f5:9f:f3:1f:9b:ab:dd:e4:cd:d7:
e5:46:b8:71:98:79:2c:e3:c0:62:2e:43:75:4f:32:
37:ba:7f:c6:36:9a:67:07:2b:16:ae:40:fa:bf:b0:
80:be:26:ee:18:0a:d3:ec:50:39:a9:8f:4e:b4:0e:
c1:13:b3:2c:4b:41:98:53:03:ab:d0:d7:da:14:44:
07:a2:02:a6:ba:72:25:d8:56:6e:71:28:6a:00:72:
6c:db:16:28:e6:0c:2d:f3:63:7c:fb:16:3a:5d:4a:
da:64:15:a9:fc:22:e4:eb:14:7a:98:7f:1c:ef:03:
28:16:bf:7c:6d:22:be:d7:20:a0:de:1c:8f:73:ed:
b2:26:75:8d:06:21:c9:c3:bc:54:36:77:39:33:21:
68:5c:d3:ec:de:8d:63:29:57:f5:c8:71:33:30:44:
3c:c3:e3:a0:68:4c:23:2b:28:d4:14:97:94:cd:e7:
6e:1c:bf:07:33:ab:74:ac:b7:6b:d7:b7:ba:56:ae:
50:92:f9:60:ec:1e:8a:66:7b:78:89:17:54:d1:7e:
e6:32:d5:31:e7:a2:df:82:73:8a:4e:7a:2e:dc:8c:
48:cd:68:18:b2:87:4f:18:83:5a:6f:31:63:37:31:
4d:03:7b:d8:d5:b6:31:64:d1:f7:5c:b8:8e:c4:e0:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8B:BF:48:61:87:44:D1:FB:74:4F:A2:3A:8C:CC:D5:67:FB:16:E0
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f4:ab:91:a7:d7:61:95:b6:e9:a1:c3:ae:02:ce:1a:6f:fd:
db:3c:c3:0d:ed:ee:41:25:b2:c6:a4:5b:e0:48:bb:f8:c2:c0:
42:94:07:e3:25:46:74:52:d8:51:63:cc:10:2d:0c:5f:f3:08:
5d:85:9a:57:29:49:63:8a:22:cb:42:ae:a9:7b:ba:0b:3f:87:
b5:0b:39:71:61:1b:1c:44:65:30:99:25:ad:ec:26:99:92:83:
e2:67:5b:2d:29:84:d9:dc:38:15:ef:bb:ab:10:2e:7d:87:cb:
bb:37:cb:5e:8b:01:bc:2b:b2:77:e5:3c:98:4e:97:3c:b0:e3:
49:cb:aa:3d:c4:19:dc:30:e3:1f:fa:dc:c0:80:a1:8d:53:ee:
35:45:06:c0:0e:1a:00:3e:6d:3f:f1:9c:fb:cb:0c:11:fa:4e:
ed:0e:ce:43:02:b4:44:71:1a:5b:f2:d9:e7:55:37:20:06:ed:
45:c7:cc:3f:4a:e1:16:bb:42:94:bf:cb:65:4a:8b:4c:5c:7d:
34:72:95:22:40:36:47:0e:28:64:e4:7e:86:10:82:be:92:20:
7e:0a:9a:2c:c4:26:1d:e9:85:4e:07:b7:3e:e6:fa:7d:ac:b5:
8d:53:2c:9a:fe:38:41:78:1c:8a:9a:d9:d5:07:69:7f:56:24:
8c:6b:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:09:28 2025 by rpki-client