Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: F5BtHH+v7IknFu4z3OCEyYfhgyAgDEOzQ0bw1zdfzHk=
Subject key identifier: F5:4B:39:EA:50:3A:61:56:40:AB:63:76:9E:88:BB:5A:19:03:7E:F0
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 0199FB7CE6D9D4653F22D67615A175BBB015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 0460
Signing time: Sun 19 Oct 2025 08:01:30 +0000
Manifest this update: Sun 19 Oct 2025 08:01:30 +0000
Manifest next update: Mon 20 Oct 2025 08:01:30 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: vdAipXXxYjUfuIhc3Pg+aVqgbHPUe4prgyIARTpspDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e6:d9:d4:65:3f:22:d6:76:15:a1:75:bb:b0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Oct 19 08:01:30 2025 GMT
Not After : Oct 20 08:01:30 2025 GMT
Subject: CN=f54b39ea503a615640ab63769e88bb5a19037ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:a2:91:85:13:82:cc:81:03:a0:ca:ff:4e:
29:d0:51:bb:42:e7:ad:b0:ee:24:e3:19:a0:a8:83:
e5:0a:43:90:25:21:ff:b5:ba:a9:56:22:e0:1f:3a:
f5:4d:69:d7:0c:e3:f5:3a:dd:08:fb:f2:93:df:d3:
cd:12:9a:c3:62:63:29:f9:b1:10:db:5f:42:01:cc:
83:9e:94:ed:da:ac:5d:7d:af:05:6a:8b:24:e9:33:
75:a9:b6:a3:13:65:f8:d3:6d:38:c6:07:c2:48:2d:
2f:9e:34:94:79:83:86:0d:4d:dd:24:25:70:f2:0a:
c9:f8:a0:16:04:71:1d:8f:43:09:ff:dc:92:f4:bf:
36:d1:de:79:8c:25:d3:5f:f6:86:b1:a0:b3:ec:38:
b0:37:0b:07:eb:f4:ce:5d:60:6f:86:e1:3c:17:2a:
14:42:ed:0b:72:7a:03:6b:dc:85:1a:27:63:95:b6:
8d:3d:ab:bf:57:5f:ef:01:19:b8:52:11:9e:a1:3e:
76:4a:d6:6b:34:a3:fd:3e:95:85:43:d2:a9:a1:1c:
46:3c:c6:3c:3f:51:f4:c0:27:15:a6:1c:d2:17:49:
6e:de:a1:6f:0d:9a:34:0d:0b:43:21:b0:3a:e5:0e:
a2:cb:58:f5:1f:b8:86:df:bf:a8:54:90:a0:06:0f:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:39:EA:50:3A:61:56:40:AB:63:76:9E:88:BB:5A:19:03:7E:F0
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e3:16:e3:85:e1:20:3d:c7:ea:22:a8:c9:d6:1f:0b:6a:b8:
5f:be:79:7e:82:10:d4:eb:b9:b2:df:1a:6b:5d:6f:dd:39:19:
43:c9:09:61:79:b9:a1:72:2a:d4:c0:c4:19:e4:e6:32:2d:e3:
d4:6a:67:e3:83:6a:47:a2:14:65:08:7b:19:b3:44:4c:7e:d3:
ec:1f:1d:4b:f2:d8:89:c1:68:ea:8b:78:4d:0e:05:ac:41:cb:
3c:f5:2a:1f:10:ee:57:b8:12:c8:a5:0b:a3:3c:28:fb:79:8f:
99:0c:b4:4c:35:65:c9:7c:9b:2d:94:a1:64:34:a3:0a:10:8b:
e8:38:12:3b:1e:dc:58:ce:6b:ab:97:5b:44:7d:00:8d:58:05:
4b:78:b2:67:50:43:e0:67:77:e2:af:07:50:d0:76:65:98:2a:
4b:b0:ff:fd:20:e0:a0:38:af:54:e1:36:2b:0d:34:45:56:91:
8a:3e:ea:38:5a:88:45:ed:02:3b:5a:01:6e:5c:fe:9d:2c:b3:
7e:f6:e0:da:76:5a:6c:59:27:90:02:d7:20:d5:c3:43:64:42:
32:9c:05:62:b1:8c:ef:68:cf:4e:b1:d2:96:14:71:1b:91:e2:
59:2e:31:60:71:10:97:c5:c3:7d:3a:0f:25:2f:85:a6:6a:5d:
b2:0f:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:39 2025 by rpki-client