Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: 7wxLKUpBIMFfbyfbEGBG/5lAh/lcFEE39wXRdmP5yGw=
Subject key identifier: 9C:6C:16:28:55:78:07:BE:C8:AC:09:1F:2B:91:9C:D1:96:1F:B5:F7
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 0199FB7C7100B440FDE3D71E8A9173303A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 10F2
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: qCdNksglAcGMmUtn9wSeNOufZ6Tb/fXHwFiu8KJkRmg=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:71:00:b4:40:fd:e3:d7:1e:8a:91:73:30:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=9c6c1628557807bec8ac091f2b919cd1961fb5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:db:2f:74:69:33:d3:b0:cb:84:e0:2a:26:
32:8e:40:4a:4e:5a:dc:73:6d:3d:bb:1f:4e:c0:62:
11:97:6b:7d:81:b1:1e:b8:0c:d3:65:ff:a0:20:71:
c3:e1:de:db:06:77:38:13:11:d3:76:5b:8c:0c:33:
3f:13:0e:33:bc:38:a3:cd:9d:f4:ea:c0:81:ee:87:
c2:86:57:fd:48:4d:30:1e:cf:7f:e3:9a:66:74:d6:
03:1e:40:78:2e:94:36:ee:bc:f4:59:92:12:61:7a:
a9:4e:3a:1c:9e:18:f7:fe:51:27:aa:1c:9a:43:30:
0d:da:5a:b8:ce:47:32:f3:9b:74:44:e0:a3:6d:8d:
ac:09:79:93:65:f8:fd:56:7b:9d:60:12:05:c5:b3:
19:21:7e:df:e0:19:3b:db:7b:6d:02:f9:e7:5f:90:
b3:8a:38:29:45:79:d8:87:12:4e:be:cb:70:f5:93:
18:2e:54:4f:f7:29:b5:53:46:57:b8:fc:f4:4b:2f:
db:19:2a:63:df:af:de:b8:72:a1:ae:b2:95:99:e6:
8a:6f:e7:26:22:7d:65:13:71:57:be:4f:0a:e4:a1:
18:c2:1a:7e:d3:29:c1:fc:dc:7d:55:69:37:5e:75:
94:28:9d:69:6c:2a:35:8f:d0:99:49:d7:89:7d:db:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:16:28:55:78:07:BE:C8:AC:09:1F:2B:91:9C:D1:96:1F:B5:F7
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b5:c7:c5:67:c8:86:82:de:bc:8d:b3:fb:6a:bb:28:81:29:
dc:9c:10:22:27:cc:2c:9d:0f:67:cd:10:41:80:1a:67:f1:6a:
73:44:fd:16:ab:c9:3f:66:a5:66:6f:f8:0b:41:82:b6:e3:00:
57:e3:56:5b:76:79:6e:6d:60:5d:a3:a4:82:9f:34:af:ab:dc:
ae:80:b9:95:5f:f0:a2:5b:6c:9b:45:a6:55:a3:8b:5f:51:d3:
b0:64:5c:55:80:6e:d8:cb:ab:3f:9a:a4:ce:15:c8:62:af:11:
ae:85:f0:7e:0d:22:2d:0c:9a:b0:4c:cb:5b:3a:b5:ac:2e:65:
bb:35:6f:83:1f:23:93:31:4e:e6:31:33:2e:90:cd:26:35:c7:
87:c6:6f:b6:a3:1f:d4:f5:26:a9:3c:5e:40:11:ad:bf:43:0f:
aa:b5:94:4f:f9:fe:f3:99:9f:e3:d5:95:7a:41:7d:f2:8f:8b:
8b:9b:ea:46:36:4f:49:e4:0d:ac:28:a4:2c:ea:b4:89:a6:9b:
b9:48:ae:85:4b:b2:5d:85:59:99:bb:97:9c:d8:24:a2:b2:d4:
12:f3:4d:e9:9b:b1:2f:b7:14:01:d2:3e:55:62:cc:39:8c:9f:
9e:f3:bf:c9:0d:ce:ad:a9:fc:f3:b8:07:0f:70:d9:d8:6a:bc:
9c:0d:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:24 2025 by rpki-client