Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: AW9JXNTWB9z5qCO3ahgPz7pSS6UnBkNc8LI4N3yqmTs=
Subject key identifier: 51:4F:5F:E1:29:3A:BA:98:9B:9E:E9:B6:E5:12:A2:44:8A:92:95:74
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 0199FF2299C71D9CC378905CF460340CD802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 01:01:21 +0000
Manifest this update: Mon 20 Oct 2025 01:01:21 +0000
Manifest next update: Tue 21 Oct 2025 01:01:21 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: TOqNj47UUXJ3agaJIlannyoubwFbgD37O8Wy2fs0jrY=)
2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:99:c7:1d:9c:c3:78:90:5c:f4:60:34:0c:d8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Oct 20 01:01:21 2025 GMT
Not After : Oct 21 01:01:21 2025 GMT
Subject: CN=514f5fe1293aba989b9ee9b6e512a2448a929574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:bc:24:75:0c:fa:fb:60:38:c0:fe:42:e1:
ca:8e:c5:7c:45:b0:af:63:69:fa:ce:eb:8b:85:4e:
a5:eb:53:94:0f:03:e8:83:e7:56:91:14:e4:3c:ad:
e3:9a:1f:ae:45:06:c1:6d:ef:dd:d6:d1:17:8b:9e:
bc:5d:b1:ca:5d:02:64:ba:0c:08:3f:86:66:c2:d9:
2e:60:b4:0b:28:33:27:87:f7:23:ae:4a:15:fe:9f:
0b:e0:92:07:a1:40:53:19:4e:4b:30:af:40:6c:33:
6e:80:e0:58:07:c9:48:0f:14:c2:75:e7:c6:ec:df:
06:f3:ea:ed:e6:18:df:68:70:cd:3c:a1:ce:26:8d:
06:d7:08:2c:7c:cf:fd:6b:69:2a:dd:78:11:5a:2a:
21:09:b6:f9:37:65:58:ae:f7:64:07:04:3d:b1:c6:
99:dd:bb:5f:04:1f:8f:4f:45:23:7d:17:02:64:e8:
aa:bf:96:92:ee:11:33:fe:1d:45:23:ee:23:35:f8:
37:e7:8c:32:d4:da:65:c4:3f:f6:d3:ec:a4:32:e1:
d9:5b:f7:ae:cb:a3:a9:e0:6e:14:fa:1e:3f:b4:2b:
f4:b9:92:cb:ae:01:41:a9:fe:9d:dc:06:9a:68:03:
28:8f:4c:ba:b2:03:7b:e9:f7:49:51:0b:09:69:59:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:5F:E1:29:3A:BA:98:9B:9E:E9:B6:E5:12:A2:44:8A:92:95:74
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6a:6f:12:e1:0a:32:70:df:53:21:0b:44:0d:0e:3f:2f:f9:
ff:b1:d7:fd:55:cb:54:5c:71:53:d4:a8:3c:51:0a:ac:8c:11:
78:0e:ec:f1:e8:36:b3:67:49:e5:a9:ee:fa:1b:e2:b1:4b:a4:
f7:a4:1f:81:a3:a7:91:c6:8d:3e:ce:1c:bf:f2:b2:f0:07:91:
87:0d:43:b6:e5:fa:6e:45:22:69:4d:45:cb:0e:6d:48:f6:28:
5f:c0:53:b8:05:86:49:9f:d4:e6:77:c1:66:51:3c:33:29:b8:
88:9e:b9:0b:3f:a6:f0:a1:67:33:5c:5f:f5:76:88:87:b4:37:
69:27:bf:60:d8:ec:e8:1d:f4:4a:55:f6:16:eb:0e:cc:d6:78:
7a:35:de:8b:6e:d7:87:35:74:b4:86:18:64:1b:cc:35:b9:69:
74:c7:a8:bf:a0:e0:5f:59:e4:dd:c6:ab:d5:62:64:eb:af:f0:
63:93:eb:bd:1e:cf:47:f6:74:9b:8b:42:3a:67:bf:8b:ea:12:
eb:ba:0e:ae:a2:f1:0f:a1:6f:c7:a4:85:0a:d4:b9:ba:a1:2b:
e1:9c:56:92:ee:33:b6:6d:6a:4a:ba:80:2e:6c:94:3a:a7:80:
fb:2e:9e:4d:9e:66:03:f1:14:41:cb:bb:a6:50:72:3d:23:b0:
6f:c1:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:22 2025 by rpki-client