Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: 37hUuk8PTJugJIF/fpS04QO5Oyh9hCzpJi+4mH8CLrI=
Subject key identifier: 54:DE:A3:34:71:73:38:52:5C:BE:6D:87:C3:13:EE:16:80:BD:D2:E2
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 0199FC8FBAF8F4F867112C4FAF7471649A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0D4F
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: GGsua7B++aCNv14R2CDuEbILRisON6sTpnOXtG39W4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ba:f8:f4:f8:67:11:2c:4f:af:74:71:64:9a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=54dea334717338525cbe6d87c313ee1680bdd2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:55:ea:73:1b:44:c2:d7:1c:d0:6b:37:f3:
87:c5:87:a0:fc:e7:2c:88:fa:e9:c9:f3:e3:c7:a5:
da:d3:86:3c:f5:25:f6:21:8b:4a:08:8b:78:26:0d:
66:9f:35:d2:d5:bf:ee:29:c6:f2:1e:2f:11:02:6c:
62:80:a9:fc:f8:f1:0a:cd:7e:ba:64:18:18:d2:41:
bf:7f:5d:20:4c:7b:45:50:47:d9:45:83:e8:64:f1:
b5:79:c6:0d:5c:f3:5e:13:6c:6d:45:34:7b:38:40:
ac:5b:7f:a5:ce:c9:67:09:25:de:e2:90:39:4f:83:
78:e1:34:7f:71:ed:a8:cf:25:2e:ca:45:b3:3e:95:
22:57:5f:e6:47:61:bb:d3:cf:84:e6:6e:83:3d:79:
b0:6f:6d:82:8a:c8:95:69:98:72:60:c5:df:a2:a8:
6d:0c:fe:5d:b0:a6:bc:79:29:52:85:38:70:9d:83:
8d:25:14:e2:a7:0a:b0:7a:e9:1a:93:7e:e7:a8:e3:
21:71:ad:6c:61:dc:7b:ff:ff:49:5d:d1:70:5d:90:
74:19:7a:b0:1d:0a:13:a2:79:7b:7f:c2:3f:7b:01:
47:40:07:84:eb:19:43:c6:ac:ba:80:a6:09:b9:d7:
2e:fd:32:55:07:89:50:3d:05:1c:25:ed:fb:61:c4:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DE:A3:34:71:73:38:52:5C:BE:6D:87:C3:13:EE:16:80:BD:D2:E2
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:38:d9:fa:25:6b:23:da:35:5d:d9:7d:8a:65:82:25:bc:37:
fe:31:17:cc:cc:07:08:5e:e9:26:4a:3b:b0:fb:07:b0:db:42:
28:06:0a:79:cb:93:1f:5c:c6:48:d8:f0:1e:f7:d8:53:92:6f:
6f:85:f8:82:20:be:6d:4e:31:01:87:5f:cc:ee:f3:da:8f:7a:
a3:4e:6d:e7:b5:2a:19:a7:d0:ae:7a:d2:24:24:d1:eb:9e:76:
24:9a:5e:bf:1e:8d:d4:1d:6f:e9:1e:7c:07:5d:61:dc:4e:26:
2c:ff:52:23:c8:f2:81:07:5d:40:21:49:48:6c:a1:80:d5:8a:
73:b5:d0:20:e8:23:95:32:d0:d9:22:42:5a:28:8a:b8:a6:22:
81:dd:d8:82:47:27:c6:3c:b0:1f:3d:2a:87:d7:62:af:4e:74:
78:cc:da:76:39:ee:23:d1:6c:fa:92:2a:51:7a:8b:63:77:b5:
6b:80:d0:22:2e:71:d1:61:c6:25:d3:49:82:b9:49:01:fe:16:
3d:9f:d4:a2:6a:0c:95:24:bb:c1:c6:20:ab:45:f2:3d:9e:da:
7f:87:29:ba:05:54:01:bd:e6:f0:70:4c:1f:fd:b1:a6:0b:5d:
0a:20:a9:bb:e8:3f:61:2d:0d:2c:3f:5f:c2:08:b8:19:14:23:
aa:4c:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:44 2025 by rpki-client