Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: ZxLdNbz8tNiUmbmDMaQJoEMA2dxLd0GXQ90ZZvtAoCI=
Subject key identifier: 07:17:8B:BD:68:25:F0:83:05:14:0C:97:58:AD:09:DF:0F:A2:A7:B3
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 0199FFC7B605A536152267723E854615F05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:41 +0000
Manifest this update: Mon 20 Oct 2025 04:01:41 +0000
Manifest next update: Tue 21 Oct 2025 04:01:41 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: Q4fzX44am2TrxdoWRMzMsIt8MJfSUQTdjIQ5LQoN3Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:b6:05:a5:36:15:22:67:72:3e:85:46:15:f0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Oct 20 04:01:41 2025 GMT
Not After : Oct 21 04:01:41 2025 GMT
Subject: CN=07178bbd6825f08305140c9758ad09df0fa2a7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:43:6c:1b:5f:62:ee:84:8c:27:16:8d:95:
d9:72:8c:ef:a1:02:49:d3:dc:af:a3:08:9c:21:db:
01:8a:ca:b0:05:c4:5d:d4:72:71:a0:18:d0:6c:d8:
08:2c:85:5f:ca:96:9e:3c:fd:b4:9c:0e:00:3b:93:
32:2d:a4:3f:4a:0b:ef:fe:3f:dc:8d:13:51:22:86:
b1:1c:42:ee:08:e0:da:77:80:6b:c5:1f:9f:02:b3:
cc:76:24:39:29:da:4d:28:d6:39:e6:8f:cb:c1:40:
f9:7f:ee:c3:48:e5:05:61:20:16:53:15:dc:8d:95:
00:f5:40:6d:56:57:7f:20:e5:34:4f:4f:81:e4:ca:
b5:f6:d1:cf:3c:4c:e7:38:94:1e:19:b3:64:fe:b7:
09:5c:92:b3:65:83:db:96:25:46:b3:1e:d3:d4:11:
b1:54:7d:bd:b6:de:44:b6:41:98:b9:83:c1:b3:a6:
3a:9a:e8:4a:77:72:db:7a:a2:ee:42:4e:34:f8:99:
50:4e:7a:e3:9d:2a:d0:c2:92:65:7e:9b:da:c6:22:
a8:e0:fd:df:b6:5c:2f:ff:1d:2d:50:5e:dc:01:1a:
5f:6a:b1:2b:fe:b9:2f:ca:50:a9:ad:c7:90:a7:e3:
61:c8:75:c8:25:42:bb:b2:2b:21:49:a9:68:49:0d:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:8B:BD:68:25:F0:83:05:14:0C:97:58:AD:09:DF:0F:A2:A7:B3
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:13:b6:2a:70:33:02:2c:b3:87:14:db:1c:49:3a:47:d3:67:
6a:b0:42:44:65:71:63:e9:d1:ff:82:27:82:5b:24:70:e4:63:
4d:bc:15:2d:22:2e:1d:8b:8a:eb:ed:41:1b:d9:36:b6:9b:39:
17:71:8a:4d:99:e8:43:fd:0f:2a:b4:41:3d:4c:92:e8:f1:79:
12:93:c0:93:87:46:91:70:bd:97:58:29:45:0e:d2:7a:ea:bc:
83:d8:d4:59:a1:8b:52:59:cd:e3:c3:78:9c:28:81:e0:84:7a:
45:49:1d:9b:6c:1b:ca:69:ab:3d:13:40:fd:47:e4:16:14:5a:
a8:f3:15:76:bc:17:51:43:c6:38:3b:dd:c4:48:db:8a:46:3d:
ef:23:f9:d3:13:95:13:94:cd:d1:91:c0:2a:cf:62:5f:5a:52:
70:5a:37:75:01:74:c3:18:ff:23:45:88:50:e3:ca:a2:4e:a7:
14:06:8c:0b:3b:1c:92:eb:90:db:ef:4e:33:91:31:ec:13:6f:
f3:68:88:4f:93:e2:bb:f2:0c:c6:37:14:18:ca:6a:f1:b4:e7:
58:ff:b0:5c:ff:83:f2:43:da:2f:55:2c:55:4a:0f:bc:7c:97:
05:ce:2f:6b:ef:05:43:14:84:ec:98:bb:3a:90:01:8c:c4:c7:
bb:f3:30:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:33 2025 by rpki-client