Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: X49jrAORBEWODMGQbtC5aYzcjg7DaQ1I6ftYPmxt42o=
Subject key identifier: F9:46:A2:E4:C4:39:42:E6:98:18:92:53:C7:1D:0F:EF:02:8A:84:CD
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 0199FD342EA2481839F0481EF12E909F849E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 0645
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: uaRTr4zGSyHfz6AqyQYJJji2xDsWEHEXF+qczSqymHA=)
2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2e:a2:48:18:39:f0:48:1e:f1:2e:90:9f:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=f946a2e4c43942e698189253c71d0fef028a84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:43:1f:2f:fe:b3:79:4b:ce:15:46:1d:d4:
c0:18:74:a7:4e:31:fc:5a:f6:72:df:60:53:81:7b:
f0:26:be:db:86:f1:3d:04:6e:5b:ce:c8:38:b8:0d:
48:8e:f4:93:d4:a4:1e:5c:76:5e:8c:39:67:11:68:
34:1e:71:49:34:bc:d1:b6:57:ce:b0:03:b4:94:76:
9b:38:82:c2:bd:3e:91:4f:92:5b:5e:53:67:00:c2:
5b:7f:d5:9c:20:e8:eb:1f:8d:ac:52:a0:51:dc:22:
be:44:09:1f:b7:c6:9d:a6:2d:4b:bc:44:74:99:3b:
2a:74:b6:b2:6c:b4:51:8a:9c:14:3d:46:e6:62:41:
ff:02:98:0c:34:37:f9:bf:19:b4:8c:c8:0d:27:8d:
03:00:e4:b3:4b:ba:be:3c:cf:67:8e:96:e1:5e:71:
9f:b4:f9:7b:52:42:94:48:4c:16:50:51:07:8a:03:
50:9a:39:08:8b:e5:78:f2:bf:5a:83:95:a6:8d:09:
d4:5b:b5:e7:fd:af:8a:82:2c:af:6e:e8:7d:5d:b6:
6e:07:20:0f:12:26:0b:05:75:12:7b:c8:15:e2:d2:
f5:fb:26:8c:8d:47:74:6d:8c:7c:aa:66:ae:99:e9:
c8:df:38:1b:b7:39:87:9d:9b:82:8d:9d:c1:fd:20:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:A2:E4:C4:39:42:E6:98:18:92:53:C7:1D:0F:EF:02:8A:84:CD
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:02:5a:cf:81:b9:d0:a6:4b:22:85:84:0d:87:6c:1c:96:fd:
f7:57:07:98:3a:b5:f8:54:1e:fb:bd:f5:ac:bf:59:c1:8f:a3:
17:bf:dc:e8:7e:ce:ef:ea:fc:07:5b:21:02:40:33:4f:11:6c:
2d:68:5c:a1:3f:46:5d:db:5e:0a:ee:3c:cc:46:85:e5:5b:f0:
2e:0a:d9:dd:71:7c:9e:a3:be:ce:12:ce:15:60:89:f7:43:fe:
53:e1:b6:f0:a4:c4:35:1d:b8:ca:84:56:0b:db:8b:3c:1c:ed:
2c:b1:57:1f:1c:d4:9f:ad:67:f6:e9:01:2a:9a:9c:c3:d8:03:
b3:96:f5:48:21:8e:f6:7a:a7:be:9e:c9:8d:85:d8:13:4e:1d:
ec:e1:c6:98:80:96:17:76:7a:66:ff:5e:bd:a1:af:7f:91:a1:
75:d9:c5:db:03:ef:7e:c9:8f:61:3e:68:01:75:35:d9:87:b1:
35:4d:41:8b:bf:3c:79:49:f4:3a:06:f2:e9:17:19:03:36:f5:
ee:d0:84:06:c2:a9:3a:10:19:8d:f5:4c:4b:98:ee:79:16:e1:
2f:a1:6b:e1:ca:ca:54:3e:90:95:6c:f2:17:f5:58:f6:52:55:
8c:b8:83:f6:ef:8d:9b:fa:48:ef:7b:be:16:dd:46:53:92:ec:
a1:de:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:29 2025 by rpki-client