Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: iJWEo5GmNCjjQuQIqfECq2oBeWgE4gTGxum3NPaV+dU=
Subject key identifier: DB:9E:48:08:A0:6B:E3:0F:4D:1F:6D:08:3D:A5:04:DA:F4:F8:88:5A
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 0199FB7C86D3E8F3ED96B593ECAD9B91FD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: tZ3g31Czx1DaXAkG9pXLICn90lgeWPK18JiHajGyGqk=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:86:d3:e8:f3:ed:96:b5:93:ec:ad:9b:91:fd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=db9e4808a06be30f4d1f6d083da504daf4f8885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:c5:0c:63:c5:f8:e3:1e:12:7a:09:2a:03:
69:86:aa:d9:a3:a6:24:64:a1:8c:a7:f0:ad:37:86:
04:dc:7d:6b:b8:c1:34:1f:dc:90:54:e5:42:3c:ba:
55:f2:75:6d:b5:30:72:40:88:5f:7f:aa:3c:55:13:
f4:f1:30:75:87:e0:92:5a:dd:d2:54:77:44:dd:97:
3e:e6:9f:7e:86:f2:02:c7:9f:97:20:49:7c:dc:76:
7c:10:77:95:b9:b5:5f:e6:c7:e8:de:b6:d6:8a:a6:
f9:9c:df:6d:15:f6:ca:22:af:fa:83:2d:b8:38:1f:
29:4f:3a:84:88:42:e1:6b:c4:03:fa:80:1e:12:7a:
21:25:29:d0:40:e7:94:b3:4c:6d:6a:fc:8b:78:80:
84:7d:18:76:41:bc:57:f4:03:d3:dd:b7:70:f4:7f:
6d:a7:89:38:49:55:69:8a:cb:f3:ba:3d:cb:8a:99:
00:99:79:3a:10:1d:7c:97:ae:ae:08:1d:d7:d3:13:
70:3e:3d:a0:4a:7f:76:fe:e3:7a:9c:9e:16:c1:a1:
d5:23:bf:ef:00:ff:12:1d:30:82:ff:d0:c7:df:38:
82:5f:6d:e7:20:e7:10:ab:be:37:35:04:75:01:44:
55:18:e4:38:0c:de:f0:7c:af:bc:33:c5:7e:21:13:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9E:48:08:A0:6B:E3:0F:4D:1F:6D:08:3D:A5:04:DA:F4:F8:88:5A
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b0:d4:52:e9:f5:13:ce:87:5a:0c:5f:2f:0a:54:00:ad:58:
4f:68:08:5c:ad:c7:6c:b7:b5:8d:bc:71:22:92:29:97:4d:30:
19:68:c7:f8:cc:53:cc:15:8d:c1:8e:69:ee:55:ec:ee:50:e3:
71:d3:e1:47:45:f7:2b:b7:72:ae:a8:17:42:1e:39:5a:ff:30:
65:b0:1a:5d:c3:7f:a2:9c:58:b3:1e:d3:a4:64:eb:0a:98:ff:
4a:00:a4:57:99:aa:3b:c7:ef:78:27:8a:bc:86:1c:5e:98:25:
6b:ea:78:21:11:1b:5a:67:5d:51:15:c6:86:0e:a4:67:03:91:
90:b0:ac:89:77:79:ab:cf:06:59:de:3a:5d:a5:eb:93:41:92:
d5:e3:ab:0c:4c:ee:db:d7:59:9e:2b:2e:30:d7:62:a6:83:8a:
9c:f6:3e:a9:81:e2:e6:4f:32:12:32:62:17:06:9a:c0:64:a9:
d3:7c:20:b5:c0:ba:95:54:69:9f:95:66:83:ed:9a:04:ac:56:
e5:fb:78:ee:7a:1a:08:8f:e1:eb:35:68:fe:de:fb:03:cb:18:
26:17:ab:50:9a:a9:0c:ec:21:55:1e:22:90:69:7c:18:df:ed:
48:04:84:6b:13:91:d1:fd:a4:e4:3a:64:b1:03:13:62:3d:a0:
83:f4:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:16 2025 by rpki-client