Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: d/mxrRBzDDE3Y2TC1IuWmtKDsqy8iuQup6VXIn6F0kE=
Subject key identifier: E5:AF:3F:71:FF:B5:6A:DD:D8:C4:1E:E2:28:9C:F5:4C:4B:01:FF:C0
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 019A025996C79D35DFC453FDEE9774D49E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 08F1
Signing time: Mon 20 Oct 2025 16:00:16 +0000
Manifest this update: Mon 20 Oct 2025 16:00:16 +0000
Manifest next update: Tue 21 Oct 2025 16:00:16 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: A8XsExUEDfktk2Tuk3Hi51mGE9juxwEWGIal+r2ellQ=)
2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:96:c7:9d:35:df:c4:53:fd:ee:97:74:d4:9e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Oct 20 16:00:16 2025 GMT
Not After : Oct 21 16:00:16 2025 GMT
Subject: CN=e5af3f71ffb56addd8c41ee2289cf54c4b01ffc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:87:bf:ae:bb:f2:d8:57:d0:89:84:22:22:
60:36:61:a7:f5:43:2c:d4:09:5e:7b:95:40:eb:85:
5d:a7:4c:e6:a9:83:d4:1c:67:4f:91:91:0c:c9:2d:
d8:69:ec:70:4a:4f:3a:da:98:09:d7:5a:59:f2:d0:
41:11:29:f6:07:ab:85:b9:0f:8e:49:81:81:be:2a:
b5:24:8e:24:15:08:d2:57:a3:73:24:0e:af:3f:a7:
e9:2e:08:a8:f6:e6:81:be:6b:17:72:b0:86:d9:ba:
4a:d9:67:37:0f:b4:73:23:f6:79:8a:b0:36:31:6a:
77:6b:bc:3d:1c:91:19:e1:23:d5:36:ea:4e:fd:f3:
e7:87:54:ce:47:5e:27:b7:fe:66:4d:0f:96:ac:33:
1e:41:87:fe:9b:45:60:a9:45:f5:1f:cc:b3:c3:7a:
38:2c:23:a9:b9:c5:bf:fe:88:d7:21:5c:40:ed:fc:
29:5c:40:c9:7a:58:5d:a9:58:a1:ce:fe:8a:71:60:
e4:79:55:32:b4:29:bd:db:fd:1d:00:97:71:6f:09:
e6:30:24:da:05:e3:44:60:29:9a:c3:d2:9c:a3:0d:
4c:c4:04:89:9a:38:e9:9a:ac:a1:e0:6e:ac:a4:e9:
a8:e8:88:3c:8a:f3:50:1a:29:8c:2a:7d:96:de:ee:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AF:3F:71:FF:B5:6A:DD:D8:C4:1E:E2:28:9C:F5:4C:4B:01:FF:C0
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:41:03:3c:1a:4e:c8:22:13:50:8c:89:af:76:77:a8:b1:5b:
96:19:d9:fa:0c:4e:f5:af:78:4d:b4:ed:bc:e2:51:ac:38:c6:
9a:00:85:31:ba:7c:82:71:cc:6b:64:32:09:1e:b8:a3:dd:18:
ca:44:7f:64:23:28:67:de:9a:a6:bb:de:d3:f3:d4:7b:dd:be:
21:0d:c4:e6:1c:1d:39:d3:37:5b:ce:37:1f:1d:5a:c5:5d:38:
b4:e7:14:49:92:65:23:ab:a2:8b:55:af:09:1e:b9:9a:88:10:
88:51:4e:81:18:90:c4:bc:f6:0b:04:54:74:af:32:56:e4:d7:
f6:ab:9e:b8:76:8a:f9:5d:4e:e9:0a:e7:c0:b8:ca:57:d1:7a:
b5:17:13:c9:36:a1:aa:5d:c3:cf:12:86:f1:a9:ee:d1:fc:dc:
31:91:1b:e3:d0:db:de:cd:0b:cb:7f:49:a2:fb:c4:40:7e:7b:
26:1d:c2:a7:80:7a:37:ef:f2:e4:52:74:c0:61:37:85:89:9c:
ff:d6:3b:59:dd:36:cf:50:d4:3d:d6:27:7b:b3:e0:c2:e3:d0:
a9:54:1f:39:26:8a:18:39:db:ab:60:ca:cc:26:1e:d7:13:b2:
9f:8f:44:e2:87:b8:5c:9a:f1:b0:01:c8:e2:89:83:d3:73:1b:
bd:67:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:01:14 2025 by rpki-client