Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: 1ZmkmoRh1LWfsF1WJcU74+DDMOHwSVNMzR4p62tOrEI=
Subject key identifier: E9:EE:A5:84:B0:F6:F1:C7:1E:89:43:FD:3A:45:76:37:D4:45:E8:88
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 0199FDDA04C90F0A2D76E11F16818DD72A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 1419
Signing time: Sun 19 Oct 2025 19:02:27 +0000
Manifest this update: Sun 19 Oct 2025 19:02:27 +0000
Manifest next update: Mon 20 Oct 2025 19:02:27 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: /thqOUohOSjCIbVVrwlE6N5Zl50BvI9eXxQwTo/Z3h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:04:c9:0f:0a:2d:76:e1:1f:16:81:8d:d7:2a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Oct 19 19:02:27 2025 GMT
Not After : Oct 20 19:02:27 2025 GMT
Subject: CN=e9eea584b0f6f1c71e8943fd3a457637d445e888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:9a:65:1e:b3:97:f7:cf:a6:af:11:8f:33:
01:73:d3:58:fd:1c:52:43:52:50:7c:ef:6e:75:e3:
7e:c0:56:54:7f:40:f1:57:6e:5c:10:02:f2:c2:ea:
8c:09:d6:52:96:b8:32:76:67:90:10:e8:02:20:f3:
f4:5a:e2:15:2f:ff:37:c2:80:f9:fe:ff:fd:42:53:
5d:a6:73:bc:91:e6:c4:f1:0e:28:f2:62:ca:db:30:
94:86:89:e0:ab:60:2c:f5:36:bb:ca:ab:14:fe:a9:
6f:c9:b6:62:7b:f5:20:a8:a8:8e:c5:f6:75:fc:82:
56:b4:38:dc:e2:77:2b:49:d0:c6:56:85:e1:3d:a1:
5b:79:e8:73:81:f4:b7:0c:35:02:34:c3:aa:e8:2f:
a6:f9:5d:0a:78:f4:97:2c:c0:ab:f7:ab:0c:77:3a:
b1:f1:ea:2c:f6:01:53:fc:24:d1:55:6b:96:3a:0d:
03:d6:6e:fa:95:78:80:79:ce:58:61:84:0b:65:a8:
cd:3d:74:85:45:df:d6:af:e8:e5:6e:f2:95:00:4e:
87:d8:d8:98:6a:af:e8:ca:8a:0f:ab:b6:ef:0a:a4:
8a:d8:77:79:78:d1:3d:05:b1:7d:b8:d3:e7:f5:cd:
c3:d6:47:13:78:63:db:59:84:90:d7:e7:3b:32:35:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EE:A5:84:B0:F6:F1:C7:1E:89:43:FD:3A:45:76:37:D4:45:E8:88
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:8c:54:45:db:bb:c4:66:11:1c:ca:69:53:dc:ae:49:f7:
bf:d4:a1:fd:ff:3a:ef:0e:02:5e:5b:19:86:48:22:f1:3d:b6:
60:dc:f8:dd:72:eb:36:34:d5:59:5d:e7:83:a2:81:6a:49:be:
18:a3:f6:14:ca:87:41:48:dc:5b:15:1d:17:f5:f7:ae:81:06:
4a:7e:4b:59:2b:07:a0:12:1d:16:98:6f:b3:c5:4f:b8:42:22:
2c:29:02:9f:4e:d4:62:5a:0b:b3:9e:1c:49:1c:c2:12:c5:0b:
80:ca:31:a2:c7:74:7a:43:e1:a7:7d:13:d3:31:b3:88:16:6a:
a4:0c:5b:7b:d4:87:1a:50:b8:de:7e:10:59:68:24:28:62:63:
0e:32:5a:9a:a8:ea:26:13:53:d8:16:fa:b4:13:c6:5a:58:9e:
75:e0:02:b4:3c:4e:f6:53:ec:70:6b:74:c4:d4:f8:16:1b:9e:
8f:4a:61:0b:b7:91:01:09:73:38:7c:fd:c8:97:be:e0:27:aa:
a7:11:4a:e5:73:fa:06:02:bf:fe:88:f3:35:df:a6:66:a9:dd:
04:5d:f1:c6:29:6d:8e:7d:76:18:fa:67:d1:bf:c0:f0:63:94:
63:60:bd:c4:b7:43:22:6e:9e:35:e8:2e:00:ad:e7:c4:29:4e:
86:4d:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:08 2025 by rpki-client