Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier: yKrJycCCqsxSN+7B63GEqDi+2/ke6gTRlzc8YiQNgSQ=
Subject key identifier: D6:54:20:09:ED:36:76:45:A2:7E:50:C7:9C:37:FC:CA:FA:B0:71:DD
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial: 0199FBEB13C48A8FEC44518018320A00B03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: Zj6uhXMdQAEJ7lcaOBUY4+1/IMydS+50tSFBOezIxeI=)
2: f0RuL1swXlvp41CLCru-Mt1TNyc.roa (hash: rkjC9/AqAR3AXAOW7ubyDoWQhwKzvm+Iu5S5RZdguhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:13:c4:8a:8f:ec:44:51:80:18:32:0a:00:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=d6542009ed367645a27e50c79c37fccafab071dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:be:85:e0:2b:28:c9:da:fd:30:17:9b:2d:
a6:76:34:22:bd:cf:94:30:df:17:ff:e9:49:bd:18:
7b:b9:fb:fb:8e:37:ef:34:d3:8a:3a:56:42:87:c9:
a5:e1:3d:71:37:a8:54:3c:59:69:b3:0e:0b:4e:bc:
8d:f0:2b:3e:ad:72:41:f8:c8:59:93:48:4b:87:23:
2a:9f:38:71:21:2e:12:11:59:ec:2e:20:10:d2:a6:
59:41:a3:81:86:d0:12:04:8d:2e:85:ae:f9:5b:40:
6b:ee:8c:06:5f:b4:e0:83:cc:9c:17:c8:7f:e7:fa:
e1:70:01:68:d5:58:75:14:30:2b:64:d8:a6:13:dc:
c7:95:af:c3:21:db:72:35:69:db:c3:97:2f:ad:e0:
b1:bc:01:82:ef:76:35:48:4d:d9:87:dc:ef:b6:b1:
c3:9f:95:1c:a0:68:3d:03:d0:62:de:27:0f:11:8e:
9f:f6:da:17:e2:22:11:7e:ef:d4:81:85:45:f7:cc:
e1:66:e6:f8:ec:4f:99:f8:30:3c:53:e8:e6:f2:8a:
12:a7:d7:01:13:d8:9a:31:12:e3:87:3f:2b:0d:26:
1b:b4:d5:93:e3:fe:4a:06:97:be:8e:89:56:c7:06:
30:30:66:43:97:83:ab:ae:9b:d1:41:89:10:76:b9:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:54:20:09:ED:36:76:45:A2:7E:50:C7:9C:37:FC:CA:FA:B0:71:DD
X509v3 Authority Key Identifier:
keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1c:e3:bf:fb:27:34:f9:cd:ee:7f:9a:c8:c8:8b:e0:fa:02:
36:2b:0e:90:01:8c:d8:5c:3e:13:d4:6a:ff:7b:6e:03:26:7c:
13:94:e3:18:4d:6e:7b:6c:1e:dd:ba:51:f6:c7:46:2a:ff:f3:
07:e1:a2:fe:23:97:72:68:a9:bc:ad:0f:5f:0f:f6:c0:55:c1:
1e:6e:ad:13:e0:94:d7:4a:54:ab:1c:79:ee:41:79:a9:d3:3b:
11:2c:25:25:54:18:5f:bb:fd:52:af:ba:54:fe:a6:4d:69:6d:
8c:04:f3:d3:1f:4f:83:2b:86:07:5e:9d:17:be:00:b7:8d:e1:
3f:9a:d7:82:c1:b4:e6:e4:38:49:d2:c2:f4:52:87:6a:b1:75:
28:b2:c6:51:82:5b:67:fa:42:63:11:2d:31:51:11:a6:8f:9d:
bb:80:c0:e8:f1:02:32:6b:1b:19:10:21:7e:ff:f4:6c:24:9b:
87:46:bb:64:97:15:2d:f3:0c:28:27:5e:08:9b:bf:e4:9a:7b:
59:81:99:9e:03:a1:f9:e8:08:f2:57:e8:01:56:2a:bc:1b:64:
79:79:01:ae:00:ec:22:07:d8:b9:1a:5a:dc:3b:99:53:7e:bf:
b0:7c:e0:d6:e7:b9:2a:af:5f:ff:2a:9d:b9:80:2b:83:c1:bb:
11:16:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:24 2025 by rpki-client