Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File: V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier: 9irhSTQZn/izZfEoGRdzxDCwpytP5cqpKfKAh+5EKbA=
Subject key identifier: A7:97:70:84:D3:F4:C8:37:08:CC:11:C6:B3:6D:D5:B0:73:72:97:FF
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial: 0199FC215B4FAC595C6BBB54930FC6608A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number: 0D0E
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: AG66dFbv5NnwlU9PKt6BlTzlwpRHp68JstDkfhdlPVE=)
2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5b:4f:ac:59:5c:6b:bb:54:93:0f:c6:60:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=a7977084d3f4c83708cc11c6b36dd5b0737297ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:3f:85:9f:52:58:49:bb:e1:e6:ad:b4:c6:
5d:27:08:11:55:a1:a1:d7:14:3e:01:9e:3d:dc:7a:
30:7e:50:9a:68:3d:ad:ed:61:7e:2e:0a:7c:2e:04:
3b:d4:61:c2:e2:d0:da:3f:34:13:56:29:02:11:ec:
d9:40:dd:b1:89:38:22:0b:f3:cb:7e:4d:e2:7e:0d:
cf:52:26:11:c1:9f:52:fd:db:7f:02:7a:a4:be:68:
29:df:d2:c7:34:4f:7e:24:44:23:09:f0:af:b8:8a:
92:ad:b7:a1:d2:02:20:ae:8d:86:00:24:e4:bb:f7:
d6:4a:e5:3a:b4:cc:99:b7:30:c5:01:ec:60:c1:a8:
e8:c6:6b:a9:19:2e:ad:47:98:47:10:7e:b9:f2:53:
cd:d4:e9:9a:58:27:6b:6c:2a:cc:a8:3d:28:59:97:
0a:cd:a1:3e:e9:44:73:ab:ab:36:c5:f1:97:65:af:
d5:4f:f9:f0:f8:46:7a:73:8d:d9:3c:b1:7e:4d:d5:
e5:d6:2c:ec:e8:08:b6:be:94:c0:ff:18:94:c3:41:
c9:07:80:7e:b6:3f:e3:f1:77:b1:d3:b6:cf:bd:16:
aa:45:0a:b2:b2:0f:c9:95:74:2c:f4:74:fb:09:e9:
80:ca:1e:3b:a8:1f:aa:e5:2b:e8:1d:31:53:30:c3:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:70:84:D3:F4:C8:37:08:CC:11:C6:B3:6D:D5:B0:73:72:97:FF
X509v3 Authority Key Identifier:
keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ed:8d:cf:aa:a8:1c:b0:65:f2:45:33:fd:be:2d:73:48:09:
61:e9:3a:35:65:24:fe:5e:a0:22:ed:51:9c:e5:7b:ad:58:1a:
f1:09:f3:2b:b3:7a:c8:5e:69:d5:d5:8e:5f:6a:3c:f3:5c:9c:
f9:c0:b8:60:a3:43:67:44:55:e9:39:ff:12:d3:fb:53:92:81:
21:fb:f5:7e:48:2c:fe:f0:fc:e7:2e:d4:74:82:e3:54:c2:df:
ec:ca:1e:4c:bb:64:95:06:5f:dd:d2:d1:56:16:35:a8:07:77:
54:c4:4c:46:85:b9:89:ff:17:65:7f:f1:04:4c:48:1a:82:5c:
74:73:8f:c6:fd:87:58:92:cb:c3:cf:16:81:af:40:76:64:87:
19:95:52:4e:18:2d:bc:d9:d5:8f:6f:f9:f4:83:95:ef:c2:91:
fa:76:9a:05:cf:7a:28:2c:f0:1c:a7:05:3a:cd:e6:e6:35:38:
53:fb:e6:da:db:ea:ea:3b:24:44:bb:e3:89:ef:a5:9c:d6:43:
fc:95:b5:0d:24:c9:1a:c7:23:0c:ae:d3:ca:85:60:11:3f:ea:
9c:e3:82:9a:bf:83:df:90:b4:81:f6:70:19:78:d7:42:ad:53:
af:5e:f3:2e:38:0d:ca:18:6e:c9:25:d2:78:a5:56:6e:d0:26:
b7:b6:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:08 2025 by rpki-client