Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: PwdX9c2KGRC/RzpCVApQ/1brARGaPtnZuUBd8azKkJU=
Subject key identifier: F5:91:99:35:CC:71:40:10:2A:A7:7F:D6:02:43:43:9E:01:A8:AF:85
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 0199FC5912B48855F18A068EA2185E23D988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0DD8
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: 3uWVfL5DoBStH50UQZLCj03gd79uY7mIKzN2mobC7pw=)
2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:12:b4:88:55:f1:8a:06:8e:a2:18:5e:23:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=f5919935cc7140102aa77fd60243439e01a8af85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ee:97:cb:4a:f7:2c:fb:d4:99:da:b9:7b:ce:
77:ec:c0:63:af:07:e3:e2:8f:13:63:ab:2a:67:f6:
c9:76:eb:3e:d1:d8:a1:01:80:65:98:38:a9:30:1b:
4d:a3:68:be:94:05:08:78:b0:d9:ed:36:20:a3:cd:
26:30:21:66:94:0a:5a:7d:7c:5b:55:5a:cc:5d:06:
9c:7b:cb:12:33:51:99:e3:b8:bf:bd:9c:83:dc:32:
d6:58:ea:f3:bd:10:6a:92:43:1d:29:81:3e:f2:61:
c5:c0:b8:14:c4:e7:fe:eb:b3:de:59:93:c0:42:01:
2d:7f:0c:eb:b7:15:01:74:19:26:bf:7b:8a:82:80:
a8:06:41:63:1c:e8:92:2c:14:f9:39:d7:14:25:1c:
7c:79:bc:71:65:22:09:cb:f6:77:27:a3:ae:fc:9a:
77:1f:1c:3a:f8:02:ac:42:27:e2:67:b9:23:7d:d0:
67:4b:1b:65:24:3d:7e:c6:9c:40:12:36:71:9b:ed:
1e:ab:f6:64:46:df:b2:a6:cf:da:53:db:7f:d3:51:
78:e4:4e:15:c9:e8:a6:89:00:75:40:5b:61:ad:15:
57:39:a7:1b:b9:5d:1f:90:9a:8c:03:52:d2:0b:ab:
09:92:94:cd:05:59:75:83:74:5e:b6:57:cb:16:91:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:99:35:CC:71:40:10:2A:A7:7F:D6:02:43:43:9E:01:A8:AF:85
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:73:ee:85:30:4d:e7:97:7f:34:c2:73:dc:c6:fb:a4:36:a0:
31:4c:e2:f9:57:7a:26:ee:ef:92:c7:8a:47:70:a2:25:93:41:
dd:33:76:cf:7c:2e:fc:89:0c:ca:f2:3d:aa:af:80:39:8b:ae:
47:01:da:7c:37:0c:d0:f1:ac:df:fc:73:df:5b:fb:9a:7b:b1:
81:db:4b:f2:4b:0a:48:e5:fd:a5:38:e4:fc:c1:7f:48:73:23:
38:27:a3:6c:7f:ab:7b:93:95:33:94:b9:c6:49:d2:96:80:6e:
6c:13:7b:4a:c4:e6:e1:8d:65:fd:84:37:cc:47:bd:2c:3e:5e:
42:6a:db:3d:25:54:cd:a0:34:5c:c6:32:42:26:c5:6c:79:ee:
15:6d:f4:c0:f8:04:5e:fd:aa:22:0b:bd:d2:16:0d:d8:dc:21:
21:9e:5a:d0:f3:91:93:49:40:2a:ca:e4:f2:93:db:dc:ad:49:
29:44:32:be:05:4d:88:10:b2:b7:e8:e0:8f:4b:26:57:c8:01:
f1:4a:05:29:e5:9b:7a:a5:34:67:b3:b0:0b:c9:c2:6e:da:fe:
08:4e:6b:0a:22:75:fb:b6:80:63:43:7a:11:ef:ca:7e:5c:34:
71:56:b3:69:4d:a2:e9:10:96:9f:88:ba:95:53:a7:38:ae:d0:
c7:a4:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:45 2025 by rpki-client