Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: G+S6fr/UFjhWmV9MPV6U8gCloQZcsYThs2jul4dMHq0=
Subject key identifier: FB:26:DA:15:9A:6B:1B:47:D8:DE:B9:44:22:0E:EF:BF:83:63:0E:CC
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 0199FC8F16CB8329C76390E424B0B303BAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 1356
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: frM31ScjARC5C1HzSfCwzfKPHZfIv75n53QBoQSrDpI=)
2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:16:cb:83:29:c7:63:90:e4:24:b0:b3:03:ba:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=fb26da159a6b1b47d8deb944220eefbf83630ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:31:c3:8d:cc:38:04:7c:01:db:53:b8:70:
9a:fb:23:91:73:33:bc:8f:2d:79:43:9d:89:3c:1a:
54:2e:8a:c2:2d:65:ff:af:00:4d:eb:4a:81:58:23:
ff:1c:da:29:a2:ae:e0:78:ad:89:ed:ad:c4:32:16:
29:e3:5f:6a:b5:c7:a5:9b:a8:88:fc:ab:11:b4:00:
7a:85:d8:11:ab:d9:62:f4:bf:e4:c6:5b:12:ef:48:
41:95:53:5d:e8:57:e7:dd:c6:8f:5e:3d:38:1a:19:
71:25:c4:4e:7f:42:bd:ad:11:46:f0:59:48:33:f1:
01:91:6a:8b:10:89:06:06:93:3a:4a:dd:c5:fe:b5:
2f:ad:a8:65:04:53:a4:65:a7:14:21:32:95:08:a2:
6f:82:6c:78:34:42:3f:e7:f9:7e:74:08:0a:c5:c4:
5f:cc:3a:7f:8c:85:3e:ff:76:22:7c:00:4f:4e:2a:
07:5d:00:0a:67:6a:bf:cd:8b:8e:c1:57:e7:04:e8:
fa:2d:b6:8a:72:3f:2a:6b:8f:c9:df:b5:76:7d:ae:
93:fb:6e:84:88:d2:63:ad:ad:01:e0:b7:d6:ad:91:
f1:4a:4e:00:16:ce:9d:a0:af:f9:b5:17:f6:a0:ba:
f0:cf:8b:e0:a3:64:bd:b0:c6:9b:47:55:a3:55:bd:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:DA:15:9A:6B:1B:47:D8:DE:B9:44:22:0E:EF:BF:83:63:0E:CC
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fd:33:d2:49:0c:56:98:87:8c:71:05:43:29:67:50:5e:f3:
45:6e:3f:2c:3b:35:b0:e8:4e:cf:65:f5:af:df:f6:5d:d0:75:
74:45:f5:ef:a3:e7:ba:a1:d8:ec:25:84:12:82:0c:3e:c4:5a:
ef:99:7a:5c:5b:bc:8e:e0:98:b0:3f:42:44:98:ce:ee:5b:2d:
1d:96:b6:e0:52:03:ee:f3:ca:46:bc:5a:86:80:4b:46:2f:c8:
6c:a1:1e:ab:6e:f0:86:18:08:d9:33:3d:ff:bd:c2:8c:cd:98:
11:15:75:9d:fd:bd:78:68:4d:b0:18:67:b9:ee:33:0a:62:79:
68:0b:e0:3f:0f:4c:5f:61:78:bb:33:70:c2:e8:a7:6e:b0:09:
1b:b6:8a:0f:31:ca:62:b1:ed:6e:9e:16:cd:57:0d:37:35:39:
fc:48:8c:69:5f:de:7e:44:06:66:37:fd:86:3e:68:52:a4:a4:
e1:01:90:9a:59:56:bd:92:c3:9f:58:55:2a:ea:33:fc:a9:ac:
22:6a:f6:6b:75:b0:38:69:65:b3:01:44:9b:c0:29:11:3d:c2:
d7:75:80:90:e9:37:db:63:47:27:da:68:21:d3:fa:fe:32:17:
da:93:14:5a:46:eb:b5:24:36:0d:99:89:0e:ce:ab:e9:dc:a6:
64:ea:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:44 2025 by rpki-client