Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: MzK3bQUO6bQouHFW93JnySAzy7K2PLp9Vyrg2zdlmoI=
Subject key identifier: F5:C5:5E:75:25:16:CD:21:AD:67:1E:0D:0D:0B:9A:2C:A9:FB:E9:F4
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 019A003589BDD45FB7CD8A90990C849A02FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 01A4
Signing time: Mon 20 Oct 2025 06:01:39 +0000
Manifest this update: Mon 20 Oct 2025 06:01:39 +0000
Manifest next update: Tue 21 Oct 2025 06:01:39 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: +iMKXhFuHes5WG1ma0BUPlUtsy5GEOUS0OzQ9dMcF3Q=)
2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:89:bd:d4:5f:b7:cd:8a:90:99:0c:84:9a:02:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Oct 20 06:01:39 2025 GMT
Not After : Oct 21 06:01:39 2025 GMT
Subject: CN=f5c55e752516cd21ad671e0d0d0b9a2ca9fbe9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:76:26:eb:23:ee:80:02:dc:29:c9:60:20:
e0:22:38:58:29:d0:c0:92:d4:04:08:a4:6b:25:db:
40:14:aa:02:75:52:5c:d2:1a:27:3c:38:c8:12:0b:
20:db:5b:89:1c:37:6f:6f:94:6b:91:87:ef:e4:27:
83:6c:b7:0b:bd:48:84:0f:65:1e:20:0f:fc:19:49:
29:f0:01:ac:65:b2:f9:33:8a:cd:66:33:06:e9:6d:
d3:8a:01:3d:d4:0f:72:d5:20:25:c6:4c:1b:3b:6c:
65:fa:f9:c4:b2:88:7e:c7:c7:fa:63:c2:8f:58:bb:
65:fb:3d:ea:f4:63:e8:0a:2c:ca:ce:bc:34:07:70:
5f:ca:36:9e:9f:73:2d:18:c5:b9:bb:6f:7a:b5:22:
05:d3:2f:ad:55:36:a1:41:ef:3a:bb:3d:d6:a8:c2:
ca:d8:3f:cf:f4:40:96:46:7b:24:31:1a:c9:79:01:
38:eb:66:98:5d:7a:a1:85:ee:62:4a:74:86:f6:9e:
56:e2:18:4e:45:8c:ef:0c:89:f4:af:6f:d7:67:bd:
c7:16:a8:80:42:22:c2:89:36:e2:b6:a6:35:46:14:
11:e9:4a:c4:c4:7f:6c:ba:c8:0a:9a:93:dd:e0:0b:
43:d4:88:b3:b0:b9:be:5f:82:be:b7:70:63:ab:a7:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:5E:75:25:16:CD:21:AD:67:1E:0D:0D:0B:9A:2C:A9:FB:E9:F4
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:fc:ac:59:ee:10:6f:a8:b3:08:5f:fd:82:41:c5:e6:5a:
b0:99:97:54:3f:59:2f:e3:34:b9:3e:cf:de:82:59:ef:cf:0b:
15:6c:4f:29:b3:05:37:6f:e7:d1:82:2b:02:bb:08:42:fa:76:
b8:c4:2d:50:cf:b9:04:fc:24:d7:24:1f:f9:2f:9d:dd:75:6d:
b3:a7:32:e7:14:74:8f:49:52:96:a2:e3:48:e1:c4:aa:78:fe:
32:fe:c2:ae:0a:22:6f:44:db:6c:97:a0:1d:68:8c:7e:df:09:
4c:17:94:ab:80:6f:d8:87:80:af:0b:ee:06:a4:c5:fe:8a:1a:
47:e7:8b:60:8a:d6:66:16:bf:c9:64:b6:59:87:76:bb:a7:bb:
68:e4:61:3e:85:8a:44:2b:0e:d4:e1:8f:a8:6a:00:e4:82:2d:
62:c6:8c:60:3e:1b:6a:1f:35:b3:86:e2:90:b6:66:28:34:b8:
87:11:9d:75:9c:6a:7a:a0:b6:e2:4a:07:75:15:a4:71:ed:18:
5c:39:a5:d0:4a:35:45:68:6a:ee:c6:91:ae:8c:ea:ed:be:a1:
dc:c2:f0:81:59:db:28:95:81:4c:b6:6c:95:8b:9d:d9:ec:14:
3c:4b:51:96:d6:48:e7:74:6d:fc:d7:ec:a9:89:47:ce:ec:e1:
b0:96:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:35 2025 by rpki-client