Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: mo2eZZGap19Z7ZrG7IYs8iEylbDy+/afHCHrQkBM+6o=
Subject key identifier: 83:77:71:CC:7B:24:08:BC:70:0E:B9:05:E4:5F:FA:AD:11:2A:B5:21
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019A71132623182271F572E2DE4C688AB506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0890
Signing time: Tue 11 Nov 2025 04:01:11 +0000
Manifest this update: Tue 11 Nov 2025 04:01:11 +0000
Manifest next update: Wed 12 Nov 2025 04:01:11 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: PVs+ESlRzo722nzk6e9Z59fpV3BkPdU9ysuGiNrXq0o=)
2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:26:23:18:22:71:f5:72:e2:de:4c:68:8a:b5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Nov 11 04:01:11 2025 GMT
Not After : Nov 12 04:01:11 2025 GMT
Subject: CN=837771cc7b2408bc700eb905e45ffaad112ab521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:4c:0c:59:67:98:fc:5a:76:29:f7:57:10:
1a:e4:72:74:7b:f4:7e:45:e8:a9:2b:fc:ed:cc:1e:
a3:0b:18:3e:54:28:59:42:5f:89:bc:04:b3:89:95:
15:f7:e7:99:45:1f:e6:15:f4:dd:d5:59:cd:ad:32:
9a:47:6b:84:bb:7e:6f:c7:81:4c:7b:49:ea:1a:01:
03:95:ba:bd:4e:08:01:b3:a2:12:48:b6:a8:fc:35:
4d:82:66:15:fd:f2:cb:31:7a:cd:dc:00:cd:bf:c0:
bb:8e:09:f3:bf:3c:d0:21:1c:d6:7e:6a:bb:3f:0d:
ff:c6:2c:79:4a:73:bc:40:f9:b0:4c:9a:82:3e:17:
ef:6c:9a:36:31:ba:fb:e2:7e:54:96:f4:58:f5:f2:
f1:b4:6a:d6:40:dc:4c:ab:3c:49:14:51:06:a0:2a:
ee:6b:b9:c8:76:39:33:c4:a1:25:d5:25:1b:68:8e:
cb:a3:fb:0d:00:42:e0:0c:4d:da:43:7c:27:ee:27:
45:b9:7a:70:2d:25:33:ed:cc:b2:e3:01:c9:f1:dc:
0c:c7:d9:24:ea:30:26:f1:8e:5d:01:c2:5c:62:76:
af:8f:a8:d7:14:67:83:00:d0:c9:eb:49:cf:62:ad:
98:0d:1a:54:65:88:5f:07:43:6e:3f:a5:b5:5d:8f:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:71:CC:7B:24:08:BC:70:0E:B9:05:E4:5F:FA:AD:11:2A:B5:21
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f1:f7:83:bd:f2:9d:21:f3:fd:7d:d1:0e:fb:b8:09:9c:9f:
16:ff:6f:c5:20:df:86:b5:f9:95:06:72:62:3e:b4:c7:b8:b8:
3a:5c:1c:8d:26:e1:f3:21:dc:b7:54:b0:69:fa:0c:6d:f5:84:
3d:fb:0a:f1:e1:f6:4d:07:9a:4c:1f:bc:11:6a:d8:a6:be:29:
12:75:3f:73:57:d8:72:24:3d:1f:28:c9:19:f2:a2:f7:8e:d8:
e4:ba:24:e9:6d:2b:56:ed:d7:91:e2:0e:86:50:9e:67:00:c6:
1d:a0:b2:42:1d:dc:12:2f:34:38:e5:3b:47:78:b8:2e:9f:53:
44:2a:74:b0:22:2e:68:8c:e2:75:96:93:d8:ac:87:89:d6:f7:
e5:27:c7:f9:e4:ec:c2:2f:b9:e5:ed:d7:30:b0:27:f1:75:f5:
ec:42:e8:84:7e:cc:09:68:e2:46:20:9e:3b:ca:1c:02:3a:ba:
8e:54:8a:c4:3f:df:d9:7b:b9:6c:7b:34:23:93:eb:b2:4e:ca:
f8:8e:1b:93:52:91:2d:5e:fb:0d:e9:8b:22:b5:d3:76:f1:a1:
16:94:28:f0:0b:61:53:f4:d8:ae:f9:a5:9c:0d:ef:e2:9c:de:
2d:07:95:d7:40:fb:32:f8:60:f6:d5:7f:eb:73:97:ef:35:59:
6d:e9:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client