Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: Ajpd4YCc+0Kpz5ash1vwkdmS0kap7cz+PiBPZy4/yR8=
Subject key identifier: 57:FC:D5:EE:00:91:19:E3:97:98:2A:38:CA:15:B5:8F:E8:0A:33:0A
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 0199FA6A34B13CA5F65E67D7C77CEFAECA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 0538
Signing time: Sun 19 Oct 2025 03:01:28 +0000
Manifest this update: Sun 19 Oct 2025 03:01:28 +0000
Manifest next update: Mon 20 Oct 2025 03:01:28 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: 4FkGw6e00a5b6ZFeHrjyI8WPB6PktvHKNemwA7Vw0V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:34:b1:3c:a5:f6:5e:67:d7:c7:7c:ef:ae:ca:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Oct 19 03:01:28 2025 GMT
Not After : Oct 20 03:01:28 2025 GMT
Subject: CN=57fcd5ee009119e397982a38ca15b58fe80a330a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:6c:e5:8a:45:7c:c9:2e:b0:a6:64:25:a0:
ce:8f:d7:d1:79:62:75:ce:e0:d4:cd:e3:53:c5:34:
7b:2f:c6:65:0e:d5:84:0a:34:f8:eb:3c:65:42:b4:
67:b7:6f:e6:7c:2b:42:aa:0f:a2:79:e0:72:f7:47:
3e:d2:a4:76:b3:9e:3b:27:d7:10:5d:4a:0f:e3:97:
82:2e:3c:99:20:fe:15:83:18:e5:87:e9:a6:57:4a:
8a:c2:99:9e:2d:d1:0b:57:db:87:9f:c1:66:02:c6:
2a:c1:8f:e8:73:8d:19:fb:56:63:cb:1d:0a:e0:81:
e2:ef:18:d1:f1:a3:af:2f:99:5f:de:52:51:fd:70:
f6:dc:a8:f7:84:50:1d:68:19:cd:e1:ab:78:41:db:
70:9a:82:89:5f:03:94:bc:82:3d:85:3e:80:ce:7f:
12:4b:18:de:18:25:87:79:05:04:77:56:a7:4d:b3:
07:45:31:33:f4:9d:34:a8:2e:e2:03:cf:aa:68:af:
c7:3a:bc:bc:4d:a2:8f:cb:d9:e7:5f:77:9e:66:f2:
40:61:ad:53:1b:15:fd:40:fa:6f:8d:11:ee:02:45:
70:07:f2:7b:1c:08:7c:9f:6c:92:3e:ae:86:f5:7f:
10:f9:5d:a3:49:37:ca:a6:c9:96:58:2e:db:03:21:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:D5:EE:00:91:19:E3:97:98:2A:38:CA:15:B5:8F:E8:0A:33:0A
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3f:e5:c6:fe:89:92:57:fa:c4:f5:22:6c:8a:2d:32:a7:e7:
5a:58:fc:6a:34:b0:17:e8:0c:ea:24:34:bd:3e:aa:78:af:19:
5f:7f:67:d4:94:1e:ad:7f:1a:a1:8c:64:19:9c:59:2e:f1:ff:
25:01:39:c0:a2:d2:c6:20:5d:0d:f6:d6:07:12:5b:08:8b:01:
76:87:7b:de:9c:46:36:cb:13:5b:96:7a:5b:1a:d6:50:d2:e0:
45:18:f0:3c:14:af:a1:64:e5:44:4d:a7:00:d8:c1:d1:27:32:
93:2a:fc:a1:85:77:f8:70:52:93:29:0e:45:ef:b4:62:71:d7:
81:59:52:91:e3:7a:24:e1:da:f9:fc:40:e1:1a:5e:63:60:99:
44:68:f7:c9:3d:7d:77:81:c5:3a:f7:6d:66:91:b3:99:00:fc:
5a:67:33:b3:75:4a:a7:68:ed:b2:09:b7:e8:c8:16:19:10:28:
2d:14:52:78:aa:06:04:7e:c3:b0:b6:ea:ac:16:c9:04:50:30:
68:7e:4a:52:1a:8c:3b:4f:80:18:f2:7e:ae:7e:c0:da:ac:43:
3b:3d:65:b1:5f:8c:d8:b5:6a:d4:c1:20:c2:1c:ba:5d:24:3e:
ca:c9:38:3d:4d:b8:32:8a:75:86:f7:b0:b0:95:3f:4b:f4:b2:
2d:a9:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:12 2025 by rpki-client