
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
File: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft (raw, json)
Hash identifier: 2TJkHjG4GfXCPm41f0yae2LVLOuuNQnIFcE6589sYKA=
Subject key identifier: D1:89:61:C9:4E:8B:D7:76:F3:20:6A:6A:95:18:FC:0D:24:30:32:57
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 0199FC584505677F9FB1ACD3B64D067061FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
Manifest number: 1556
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl (hash: BKK1qgUIbrtiFhGaB1FYsZVkibtLquQorE8XhHIhzK4=)
2: S5nBS_Wv9TcvwJjisC52Dydzz1I.roa (hash: 7QqWqkhVmADmdh9/MVjrKD0YsIPlDm2w/Jsh9OhtMQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:45:05:67:7f:9f:b1:ac:d3:b6:4d:06:70:61:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=d18961c94e8bd776f3206a6a9518fc0d24303257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:cd:22:9a:24:63:d6:78:75:b2:b8:a5:76:
9c:37:f8:28:71:ff:88:3b:36:81:fa:ef:74:75:7f:
2d:07:07:56:d4:2e:81:fd:3b:1b:75:0a:98:e4:3d:
e3:c6:41:9c:6f:3f:f8:e6:2b:c9:89:c7:8b:14:16:
a6:85:81:99:52:38:1c:a9:c7:fd:fd:ac:40:c9:8b:
ec:42:d7:84:89:86:1d:a0:76:00:6e:e1:03:2a:a7:
26:9f:46:ae:a1:33:ed:1e:e7:6b:47:74:21:e9:78:
ad:7a:4e:f2:24:07:6a:4e:2b:55:42:64:52:29:82:
97:e0:72:52:86:4f:8d:4c:2c:5c:1c:b7:9c:92:2f:
09:79:ba:5e:f7:a9:64:5c:11:af:ec:36:ec:13:16:
68:5c:20:0f:2b:5c:be:b6:61:cb:9d:ce:b3:0c:5d:
1b:16:3b:ec:ac:71:e9:a2:5d:ad:4f:69:05:83:1d:
14:2b:0d:cd:d0:f8:5c:9a:b1:af:3a:40:a7:b4:66:
3c:31:70:13:b8:0e:57:a9:1f:df:e5:fb:63:a6:5c:
3b:bf:0a:35:4b:3d:c1:a2:77:0e:69:04:df:ec:6c:
8c:b5:98:45:79:0a:97:81:8e:66:80:0d:65:ab:18:
11:04:de:fd:a4:c3:b9:e9:3d:a5:31:fc:9b:6e:df:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:61:C9:4E:8B:D7:76:F3:20:6A:6A:95:18:FC:0D:24:30:32:57
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:82:04:50:66:dc:8b:3d:0d:36:84:6d:5e:9b:b5:2c:ca:fa:
ab:06:84:25:49:32:a7:b4:a5:b4:1d:b1:08:ae:99:07:62:09:
6b:87:98:ab:4a:2f:99:2c:40:11:d3:e7:2d:0d:bb:be:39:34:
9e:c0:f3:d8:41:2b:7a:e2:9b:78:16:e4:a7:90:1b:64:e4:1c:
0e:c5:a1:ee:85:9c:87:10:bb:86:e3:e5:7b:7a:10:b4:84:65:
fe:24:8e:b6:1d:70:d3:ce:24:3b:a8:c7:3f:78:2d:fe:5d:5e:
a7:3f:6b:6c:3c:4d:41:1d:e9:a1:18:72:9f:e9:d7:cd:c1:9f:
9d:23:d0:f7:9c:dd:b8:56:25:08:54:71:32:0d:af:4f:dd:cd:
16:26:d2:41:db:d2:97:2a:6f:46:33:63:2c:ca:f2:d5:42:38:
fb:94:dd:d1:a6:d7:31:c4:36:a5:1b:d7:5a:8d:e0:09:55:24:
d2:e9:31:48:cf:21:62:8f:c1:e9:aa:d6:1e:6a:00:21:4f:c9:
68:f6:37:26:29:ef:26:65:bf:66:12:e0:b9:1c:19:4b:7b:cf:
f0:0d:c1:8a:da:b3:af:2e:cb:a4:1a:28:f0:93:e5:a7:df:00:
b1:e1:a2:4d:e8:87:57:74:98:91:01:be:22:30:83:79:c0:40:
fb:05:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:06 2025 by rpki-client