Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: 22eMt1yhK5fE/WaHDzxHfaaE91RbDuKjtttjaAoGFYk=
Subject key identifier: EF:DD:B8:9C:15:47:A6:50:0F:23:60:F4:CF:29:E6:9B:D2:35:AF:50
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 0199FCFD3D63A678F6E1B9BF1D915894642E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 1148
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: vCY4GJEEkQ1vMuTJ8k3bZkD1BbSQfVSY5I2JKdMUf3Y=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3d:63:a6:78:f6:e1:b9:bf:1d:91:58:94:64:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=efddb89c1547a6500f2360f4cf29e69bd235af50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:ab:9d:c7:66:16:96:9f:0e:2e:fc:89:de:
16:df:72:1d:72:d3:8f:d6:07:66:e7:7d:5c:6a:51:
f0:1e:20:57:c9:1a:54:e3:8d:3b:81:1d:76:93:7f:
d9:f4:8a:57:39:42:28:08:a4:ea:e3:c7:ef:ae:f7:
28:32:01:86:40:56:3b:f1:cc:51:ee:3a:bc:be:fb:
6a:86:27:e5:72:2b:08:26:8f:f0:ee:70:9a:82:6e:
4f:00:cd:d6:34:8b:77:68:65:f3:39:52:39:14:3c:
c0:4b:f5:05:97:3e:64:99:68:b4:49:ee:85:8a:22:
83:80:71:d4:64:84:85:ec:b4:ad:b6:ea:7f:ff:40:
d3:fa:b3:e6:86:88:10:17:fd:2d:36:3b:24:2c:ed:
8e:ad:ea:be:81:de:3a:ee:94:99:cf:92:53:0b:fd:
bd:96:56:a1:36:69:3a:30:36:67:81:c1:e6:00:38:
5c:34:5b:0d:4c:c6:e6:1d:7a:7c:4a:cb:99:63:e6:
3d:47:b6:09:e3:0f:8b:e6:82:7c:66:18:cc:1b:33:
18:dc:a7:25:0e:1e:48:e7:c5:f1:b6:f9:89:4f:e5:
e7:51:33:5c:1b:59:3c:6a:d1:3b:7b:fb:6c:8d:09:
13:6d:a7:02:b9:6c:41:67:80:3e:91:b7:b0:1c:85:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:B8:9C:15:47:A6:50:0F:23:60:F4:CF:29:E6:9B:D2:35:AF:50
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:74:d2:5f:46:1a:77:af:da:97:de:a2:91:84:ab:d0:20:29:
71:c4:70:cf:d3:82:bb:df:74:69:80:4f:85:b1:96:b1:38:02:
0c:e5:ce:0e:88:ab:3d:79:2a:35:73:f5:a0:7f:01:7f:58:eb:
52:4f:f7:e9:8e:3a:02:a0:10:f2:47:db:5f:f2:d8:f7:3a:6b:
45:e4:04:04:40:29:83:ca:6e:f9:22:1c:f1:bb:50:b4:3b:c6:
9c:2a:73:e6:bf:7c:d9:43:0e:8d:84:6f:de:e1:ed:33:43:92:
45:7e:34:b1:cf:9f:e1:e0:de:c5:d0:6c:ba:f9:b7:3c:e8:18:
de:f5:b1:8e:e0:17:18:42:29:31:0e:61:03:a7:1f:45:c2:f1:
79:e0:df:8a:38:7f:da:82:64:a6:5d:40:ab:e6:91:cb:ce:e7:
49:3a:18:69:bb:60:1b:e0:fe:77:f2:4b:3d:a9:7f:29:96:c9:
c0:17:43:09:be:fa:e2:98:3a:ca:31:95:f9:3d:83:6a:a3:1f:
79:99:9e:a9:27:ad:80:27:15:ef:a5:a7:3f:82:17:6d:d9:82:
d6:71:05:56:56:cd:34:c2:0a:9b:a1:a5:9e:b4:ac:6c:70:27:
5c:c2:9c:43:21:1d:47:39:4b:2c:64:9f:e8:23:c7:06:d4:c6:
3d:6a:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:50 2025 by rpki-client