Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: xNf/l+ZhQ+xn4OuCg7IcxfBPe15AkbJ9hgkGf6eOhGE=
Subject key identifier: 93:03:12:A4:27:D8:C9:81:B1:D0:A3:A3:F5:DE:57:FA:E8:4A:D7:D0
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 019A02FE742C7C856ACAB6D473D477FF2C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0B44
Signing time: Mon 20 Oct 2025 19:00:21 +0000
Manifest this update: Mon 20 Oct 2025 19:00:21 +0000
Manifest next update: Tue 21 Oct 2025 19:00:21 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: E5RuHgX3G6iyA+gfdG4Emhlk7sFPu+mbmPIGfvUChBk=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:74:2c:7c:85:6a:ca:b6:d4:73:d4:77:ff:2c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Oct 20 19:00:21 2025 GMT
Not After : Oct 21 19:00:21 2025 GMT
Subject: CN=930312a427d8c981b1d0a3a3f5de57fae84ad7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:14:7e:aa:f9:da:47:d2:ce:52:55:e2:31:
4a:2e:27:9b:62:2d:52:14:78:35:41:21:59:c4:19:
22:ca:7d:37:f2:28:1b:a8:17:07:07:5a:e8:c8:5a:
b2:da:a2:fe:69:14:40:da:db:a4:4f:6d:66:86:64:
88:49:25:5d:3b:b3:2f:f8:d3:1f:1a:ea:67:a8:ed:
1c:0a:c5:44:10:78:f4:a4:42:51:b9:af:c0:0e:2f:
bd:3c:0a:f7:66:3b:1e:2b:9a:69:a4:97:f6:fb:b5:
85:ba:76:8c:48:de:87:f9:b0:f5:c1:a8:c9:fc:c1:
62:ac:7c:84:22:2c:bd:ff:3b:36:45:47:2d:8b:bb:
e9:c5:31:ca:71:fb:ff:bb:82:45:6a:4e:8c:68:7c:
f6:96:18:4a:fe:ab:36:6a:0a:bb:d3:c6:a6:bf:49:
2e:e4:5f:73:a7:2f:10:76:36:82:41:00:e0:d7:e4:
cd:5a:ed:a9:4e:2f:0d:47:4d:0b:45:ed:88:19:a6:
2b:12:16:e6:a3:73:5b:de:77:6c:a7:ea:6d:c0:24:
a1:bd:1e:55:be:08:9a:30:ca:07:fd:1d:6b:0a:e9:
f1:8a:8e:57:f1:86:fe:dd:b8:e0:37:be:21:c5:72:
b8:95:99:55:5c:13:53:45:33:b5:10:d4:d1:ce:3b:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:12:A4:27:D8:C9:81:B1:D0:A3:A3:F5:DE:57:FA:E8:4A:D7:D0
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d6:37:a1:13:da:16:aa:81:4b:45:17:c3:18:db:2b:a1:72:
40:68:9f:18:13:3d:02:3d:41:c3:da:cf:61:7c:96:83:98:a4:
ee:3b:85:3e:3c:a8:f2:8f:81:16:fa:dc:90:13:bd:ef:92:26:
eb:64:07:39:65:f9:f8:a0:51:90:05:77:23:61:bc:f5:fd:c5:
33:a3:d2:ee:e6:a2:73:e3:a6:0b:1e:f9:17:48:2b:7d:1f:08:
16:44:fd:f3:0a:a7:ce:70:06:2f:3e:6c:a1:a8:cf:0a:b7:0a:
71:85:7e:2b:20:5e:a2:b0:df:bb:dc:12:8d:73:4e:0a:a8:fa:
ca:2b:1e:c9:86:2b:4c:53:9a:7b:e3:fd:be:cc:fc:59:b7:a6:
b4:c6:a0:1f:99:97:a7:cf:f4:69:4d:35:57:e3:c9:44:e7:c4:
b3:19:be:16:56:f9:37:83:80:6a:c7:6d:e0:67:f2:d0:79:e8:
d5:de:3e:a2:fe:de:48:b8:2d:6d:ad:4d:d5:f5:18:4b:ad:66:
d5:e5:f8:b4:f1:f0:74:cd:d3:2b:4d:ff:57:01:53:87:36:05:
ad:23:3a:b4:f9:a8:c7:9a:6f:ac:d3:e0:c1:23:e7:de:7a:f6:
a2:3e:a3:74:41:be:99:a0:28:d6:18:3f:93:18:42:82:db:c7:
7f:f0:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:45 2025 by rpki-client