Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: NweStw6y6/QpcX732gN8nTcaDltDsoFVdaQabxZRA54=
Subject key identifier: 9C:18:C4:8F:83:BB:90:04:75:33:F7:84:22:3C:B8:9C:F8:1C:CA:1A
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 019A02FE9B2F8DA7A1E8A837D4B4D1ED4D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 067D
Signing time: Mon 20 Oct 2025 19:00:31 +0000
Manifest this update: Mon 20 Oct 2025 19:00:31 +0000
Manifest next update: Tue 21 Oct 2025 19:00:31 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: 27EVrCiOI9webl1zzAZLyzUrHU/joA3dmNxesP3xFow=)
2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:9b:2f:8d:a7:a1:e8:a8:37:d4:b4:d1:ed:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Oct 20 19:00:31 2025 GMT
Not After : Oct 21 19:00:31 2025 GMT
Subject: CN=9c18c48f83bb90047533f784223cb89cf81cca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:75:ee:11:fa:b0:90:b2:c4:f6:c7:8d:2b:
48:63:ed:ad:d7:f6:67:84:63:ee:53:e4:20:0b:84:
59:95:2f:6b:31:2c:ba:0c:be:f8:f5:5d:e4:39:a8:
29:40:53:3e:cc:92:ef:bc:67:a9:f6:47:8c:5a:b2:
4e:1d:fa:67:4b:c4:8c:0f:a3:d0:46:f8:8d:53:ff:
76:07:d6:f7:24:88:0e:01:c5:c4:6c:7c:3d:45:1c:
d0:26:8a:e4:03:a2:13:f4:d2:82:5d:fb:8f:3e:f3:
74:2c:08:88:9f:3a:d8:b0:59:4b:1b:a2:66:eb:ab:
25:bb:1e:d9:34:52:04:33:d1:7a:01:19:dd:a3:fa:
5e:33:10:6a:12:03:41:29:2b:b8:ff:f0:58:b3:e8:
c8:a1:10:d6:91:14:4c:de:d3:84:73:58:5d:48:37:
55:03:0d:03:cb:15:8e:f1:91:5d:bd:5d:16:1b:aa:
c8:2a:5b:bb:fe:50:56:0f:41:ba:5f:43:68:8c:97:
58:50:ca:cc:d8:f1:a9:62:e7:9b:58:b0:cd:23:77:
e0:6c:15:be:10:52:92:cc:e8:bf:da:1a:a0:d3:ba:
7b:91:26:ea:3f:fe:1d:4a:37:c0:c7:4a:e2:ca:0c:
b4:34:be:57:fe:88:f9:c8:d3:e0:8a:68:04:29:38:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:C4:8F:83:BB:90:04:75:33:F7:84:22:3C:B8:9C:F8:1C:CA:1A
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f8:fd:04:88:53:07:e2:ab:8b:10:b1:50:43:5b:8c:ea:0a:
4e:0c:2b:46:a8:1e:be:98:eb:6e:85:31:42:3f:f8:50:88:a6:
f6:49:fa:5a:1f:fc:28:35:2f:78:23:c7:f2:f7:a3:42:8f:02:
ad:1a:78:0c:fb:92:d1:11:66:46:9d:87:e0:e6:df:17:07:1a:
91:92:f6:f3:77:6f:0f:1e:fe:6c:21:ca:dd:1b:1d:b5:80:b0:
2c:9d:b6:ed:2e:12:dc:75:b1:9c:2c:59:44:25:25:4c:cd:e6:
dc:d2:02:f2:c1:4f:4d:22:26:5d:e0:70:8e:75:a0:0f:41:46:
e7:09:c5:fe:cc:67:b8:22:ac:35:91:86:b5:d3:61:5c:10:f7:
4e:93:32:b3:c2:b0:bf:5c:22:cd:58:7b:bc:94:7d:b2:42:5f:
82:52:10:61:2c:db:82:c6:fa:62:36:c1:69:7c:bd:e1:28:dd:
db:0a:d2:98:f7:a4:d0:5c:89:8b:93:67:c6:79:9f:36:e4:b2:
7a:2d:ca:99:6c:99:da:a6:06:2f:00:b0:83:de:a8:57:4e:2b:
bf:d0:9d:a3:b4:d8:95:11:d4:73:d5:bd:40:e4:5b:ad:07:ab:
ce:0c:af:f7:a4:57:fa:2a:d2:bc:11:87:18:b3:43:e3:86:ae:
3b:30:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:47 2025 by rpki-client