Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier: 9J3RQ/YdPzRAL0/ZXDJxYWo03puBVNOi/3wQkcnLahI=
Subject key identifier: 08:5B:AE:D3:0C:36:78:52:FD:FF:00:8A:2B:BB:AC:A2:61:16:5F:0B
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial: 019A2176E21AE2E3943A48AA34A0A16F3A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number: 0551
Signing time: Sun 26 Oct 2025 17:00:30 +0000
Manifest this update: Sun 26 Oct 2025 17:00:30 +0000
Manifest next update: Mon 27 Oct 2025 17:00:30 +0000
Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: WA5ByCvxA4OnUiy03gXFjoQtgKN4AealYkDdYYzgjzQ=)
2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:e2:1a:e2:e3:94:3a:48:aa:34:a0:a1:6f:3a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Validity
Not Before: Oct 26 17:00:30 2025 GMT
Not After : Oct 27 17:00:30 2025 GMT
Subject: CN=085baed30c367852fdff008a2bbbaca261165f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:d0:05:21:17:87:de:3a:62:4a:99:68:2a:
d8:96:f2:87:bc:57:c0:f4:d5:9e:f7:c5:25:15:71:
0f:52:7e:3a:57:be:c5:be:57:4c:73:32:a1:13:6d:
bf:7d:50:0d:7e:90:34:4b:43:75:5d:b9:26:75:5d:
be:7b:a7:fc:b7:e7:e0:40:d1:fd:3e:a3:8d:fd:6d:
f5:86:a1:79:74:5e:a0:e9:bd:6b:0a:d0:04:22:5e:
c2:ff:ad:89:20:dc:6f:95:4d:f3:60:6f:b6:79:7a:
45:8d:5c:39:c0:aa:a1:db:fc:40:01:04:18:6b:5c:
5a:9c:f2:1a:0e:aa:de:37:5a:31:9f:13:50:0b:92:
54:a9:43:8e:a2:be:17:3b:d6:16:58:92:c1:b7:a2:
b5:e1:10:c9:22:7f:b7:c6:a4:82:d6:85:a5:8a:44:
eb:91:6d:a1:e4:6c:ce:f7:1c:4c:21:44:6e:92:74:
3c:c3:94:49:a0:e1:be:e0:92:58:19:3b:30:22:36:
2f:fc:69:1b:76:1b:88:f8:30:90:ec:81:4d:a6:71:
81:ec:0e:fe:66:22:ec:8d:7e:51:a6:4e:2d:fd:d9:
a4:97:42:3f:18:1e:4b:95:be:b1:fd:5b:6d:04:b5:
9b:f3:2b:af:a0:7a:4a:48:de:9b:8a:23:8d:7e:03:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:AE:D3:0C:36:78:52:FD:FF:00:8A:2B:BB:AC:A2:61:16:5F:0B
X509v3 Authority Key Identifier:
keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4f:25:84:09:0a:c1:c4:22:a1:f8:ac:7a:66:91:fa:25:9f:
10:83:54:9e:51:1b:dd:bb:c7:ab:4e:d7:c4:4b:eb:4f:74:a1:
4c:c6:c3:74:31:a8:a7:c8:57:cf:c2:03:30:6e:2e:2a:d4:b6:
a0:b8:ea:06:92:e9:b1:f3:9b:b5:80:e8:46:45:4d:40:54:f9:
c2:85:ce:ed:46:d8:5f:c5:39:91:05:6c:3f:16:c9:7c:9a:11:
53:45:de:81:8d:cd:1d:cf:ac:a4:2b:a4:88:2f:9c:fd:98:d7:
73:20:30:ab:54:24:f4:60:40:f1:c4:42:c1:41:a4:f7:e6:20:
f2:08:35:0a:24:15:ad:5c:d7:dc:b6:24:c8:a5:38:cf:c5:de:
7f:fa:f0:49:21:78:6a:5d:32:1e:78:19:94:77:9a:f8:02:d4:
e2:85:4f:51:54:7f:de:e4:a8:73:b6:df:5f:4e:3d:ed:a1:4d:
89:5f:88:30:54:83:ff:f9:14:72:f2:88:79:e0:67:c9:49:90:
dc:3d:cb:b6:bd:ca:31:29:90:f2:f9:1f:6a:c1:b5:2d:07:e7:
44:d9:fc:28:61:4d:a6:60:46:d8:d2:8b:10:55:b3:bf:01:25:
1e:db:df:a1:54:c8:d0:a3:c9:d2:c5:b6:f8:a2:1c:28:25:34:
58:fa:c4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:57:33 2025 by rpki-client