Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: w/8JMcn6dM1Cm96/fMQEDKiaFJ1OXuLdqJXwOPb5BZE=
Subject key identifier: 12:88:F7:45:B9:05:8B:DE:AF:9E:CC:44:CA:E0:E9:B1:D5:84:DC:0A
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 0199FCC6C41700B21C73359274306C167CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0B78
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: TKL1Cv7Xu7KbSkvMGsmMi/+5OEKs8R2abOvgcQSkbgo=)
2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c4:17:00:b2:1c:73:35:92:74:30:6c:16:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=1288f745b9058bdeaf9ecc44cae0e9b1d584dc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:90:d4:2f:b0:ad:2c:7f:69:6f:b0:3f:0e:
8b:ed:87:e7:c8:d2:66:68:66:18:4a:db:4e:a2:e8:
e7:7d:bf:5f:4c:cb:07:b3:ec:5b:57:ce:f2:f3:7f:
d7:39:03:1f:84:9a:5a:67:1f:49:3b:cd:2f:80:76:
ab:51:cf:76:8c:3d:e1:a3:f5:90:17:ad:3e:ec:1a:
0a:4b:36:81:6c:17:80:9b:40:54:38:bc:49:a4:04:
76:6d:27:c6:80:57:c4:cc:7e:ab:4a:23:d0:69:8c:
cf:be:0e:f7:6a:0a:ef:93:15:88:3c:2a:a3:c4:6e:
0f:60:e7:93:4a:3c:dd:9b:e7:45:2b:44:70:8d:9d:
01:54:34:d6:17:7c:24:21:7e:ca:6a:1e:28:87:48:
20:0a:b3:97:53:66:f1:97:47:1b:99:db:56:f7:d7:
96:bd:1d:b2:78:8d:af:d9:ee:ec:27:cf:7a:74:36:
3b:90:23:e6:69:bf:11:37:48:9e:77:91:1e:3d:10:
48:18:2a:b3:b0:c8:3e:5a:e6:9e:45:80:75:31:3e:
a1:95:2e:aa:5d:54:06:9a:53:98:34:0d:b1:e0:fe:
67:49:80:fb:85:85:6a:38:ef:43:70:94:cd:0a:9a:
bf:35:65:b7:ff:8c:38:d2:52:fd:c2:19:2a:77:04:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:F7:45:B9:05:8B:DE:AF:9E:CC:44:CA:E0:E9:B1:D5:84:DC:0A
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:66:47:77:ea:3c:bd:a9:9e:f6:d3:8b:d6:3e:0a:26:ad:f5:
e5:31:d1:32:d5:12:d0:6d:85:92:3d:5a:26:8a:44:59:d2:5c:
a6:79:be:13:00:93:0d:2e:bf:da:c8:a4:7d:67:7a:29:80:ba:
4a:30:4b:cc:c3:6c:7c:f1:02:2c:1c:83:72:0e:3d:e0:c9:f3:
db:a0:29:79:91:7c:50:46:b1:d9:5b:61:54:e4:ac:ab:42:ba:
36:8e:a0:69:6e:68:4a:4e:a7:0c:a9:ff:2f:06:bc:e4:fe:85:
15:d4:f0:a9:93:63:8b:6b:83:96:d4:13:3b:b6:6c:7b:5a:30:
57:9c:cc:a5:01:ea:df:c4:9e:a0:54:a7:c7:73:10:59:4d:70:
51:25:41:3c:67:13:a9:a9:14:f6:c2:a5:fc:0b:ba:2e:2b:9b:
9d:ec:88:89:fe:79:39:03:98:9c:d7:b0:4c:15:29:f2:f9:47:
57:b8:92:90:a3:31:a7:4c:d4:d1:f6:8f:d6:ed:ce:3d:f0:54:
41:74:cf:08:8c:51:12:91:c6:44:06:2b:62:84:30:53:0d:69:
21:e9:bf:1d:8d:bc:ca:bc:50:be:c9:96:0f:c1:9a:a4:1d:25:
43:ca:3b:f5:14:41:ee:ca:03:9b:53:ec:74:0f:dc:ed:20:cf:
ea:00:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:43 2025 by rpki-client