Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: 2tJI7Bc529O0SdU/aRNz26uAZ6nIZFYrKUkTqNqITdQ=
Subject key identifier: BB:9B:94:80:14:5B:81:62:65:D4:06:56:78:D4:30:D0:5D:5D:68:C6
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 0199FCC62BFC5D53418B75C2F823AEDFCC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0D6E
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: HMTfNfTQ56kVR9pzK7IZMHLFyOLrwXz3acyAWDeyZB4=)
2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2b:fc:5d:53:41:8b:75:c2:f8:23:ae:df:cc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=bb9b9480145b816265d4065678d430d05d5d68c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:81:07:97:24:3f:f5:9c:83:2e:90:06:90:
77:c9:a0:96:95:99:23:13:81:84:28:fd:fd:e0:2b:
1b:7a:8a:05:2e:dd:80:04:e9:93:89:54:b0:a7:fa:
4a:7a:77:8e:3f:e3:5a:07:23:0e:5a:73:14:85:2e:
74:83:38:83:22:a7:db:e4:4d:14:42:cb:2b:7d:35:
0d:85:9e:72:37:f1:60:ce:c2:db:bc:4e:89:c6:df:
1a:88:0b:9f:7c:5e:f7:0a:44:0f:aa:39:9d:47:77:
1f:a8:9a:84:98:8c:69:02:af:6d:12:0c:af:a2:69:
f4:01:4e:70:24:00:9c:62:33:15:de:08:3f:6a:33:
5f:94:53:ce:62:76:6c:54:98:c8:ed:d2:1f:61:24:
6c:89:49:b8:5a:6c:ee:e1:3f:73:f4:74:a1:65:19:
37:72:15:54:4a:7b:fc:7d:cf:57:6a:36:b1:a7:23:
a4:3b:40:b5:46:41:3e:34:18:9e:11:61:9a:61:6a:
30:44:86:89:bc:69:db:10:81:3f:fb:bf:27:4a:ab:
2b:68:8b:eb:18:fc:cd:53:87:27:fc:a2:d0:76:37:
97:7c:de:e7:93:9a:88:27:b7:df:64:71:8a:70:50:
bc:b6:e2:a8:4e:5b:fa:12:13:3d:b0:67:ee:d4:cb:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9B:94:80:14:5B:81:62:65:D4:06:56:78:D4:30:D0:5D:5D:68:C6
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d9:0c:60:1f:5b:0f:01:80:b1:a1:5f:ba:20:0c:b7:87:31:
2f:82:8a:1c:7b:cf:95:bc:b5:e2:ef:01:60:fc:64:ba:f6:4b:
fa:5b:3e:2f:c2:69:81:b3:76:be:5d:fd:7e:d9:33:3d:32:21:
64:6b:0c:d5:57:a8:c6:76:3d:0d:65:69:30:e9:05:d3:76:47:
d4:0a:5a:74:09:46:b2:fd:ca:93:d1:2e:0b:4c:f8:83:cb:00:
a1:bc:ad:9d:86:0c:77:99:a9:ea:3c:2c:5f:f1:19:be:01:2d:
4f:8f:f6:61:8d:c8:4a:08:5c:0c:58:d4:e6:ed:c6:13:e4:1e:
14:f2:90:fc:ff:78:01:af:f6:8a:d5:95:12:df:a3:15:fc:f0:
7d:ae:7e:0d:56:bf:27:e3:c9:ae:9c:d1:0d:d8:25:c3:a0:84:
73:94:7c:12:c6:30:62:35:51:8d:31:e5:37:08:cd:69:cc:98:
f1:61:f7:8a:c2:8b:89:d1:9f:7c:69:e2:1e:0a:fb:00:d1:9d:
fb:97:e9:a7:44:de:70:23:89:a2:a0:4c:b2:b8:c5:bc:81:fe:
47:9b:a1:c3:6d:43:d5:e2:a5:5e:58:c2:b8:47:ce:9c:89:91:
c2:13:48:bc:d4:a2:01:df:b8:8b:be:38:12:d1:2b:25:37:65:
e4:36:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:05 2025 by rpki-client