Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: kijMdxZU5AgMzaKzFDG2jr41yA9sskvofDBPB4HJuZM=
Subject key identifier: 7F:51:88:86:C3:35:2B:7A:E4:5B:57:0C:6C:4B:98:DF:25:0E:72:BE
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 0199FE46EB672FE7774311F69624EE0491C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0E51
Signing time: Sun 19 Oct 2025 21:01:24 +0000
Manifest this update: Sun 19 Oct 2025 21:01:24 +0000
Manifest next update: Mon 20 Oct 2025 21:01:24 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: kt82jVNgKOcC2zr1exUA53Ny6mafxYCJptoPIh5rVIM=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:eb:67:2f:e7:77:43:11:f6:96:24:ee:04:91:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Oct 19 21:01:24 2025 GMT
Not After : Oct 20 21:01:24 2025 GMT
Subject: CN=7f518886c3352b7ae45b570c6c4b98df250e72be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:dd:11:8b:f0:d8:4b:fa:a4:75:81:fa:be:
c5:7e:71:36:be:c8:01:ce:91:a7:87:c6:30:b2:ee:
91:88:c0:91:da:b6:87:d2:b0:38:15:a7:11:43:da:
d3:3f:2b:64:d3:eb:cf:42:14:20:f8:32:91:3a:f3:
56:1b:10:90:f9:3c:b8:87:ad:31:8b:87:e8:c5:6e:
bd:75:ed:7e:a9:0f:f6:b8:4a:ab:e3:15:3f:a2:5a:
e5:89:ae:bc:ce:b8:8a:7f:92:fa:5c:da:18:af:39:
b3:2c:42:28:be:f3:ff:ec:e5:af:4b:45:52:bb:26:
ed:62:4d:7e:8f:55:c2:71:2c:cd:ef:af:6f:ec:ea:
7f:de:0b:31:05:91:5a:c0:71:64:6f:9f:93:0e:de:
3e:52:58:5e:4e:53:36:f2:40:a7:70:e6:cd:ba:c6:
6e:2c:ae:d0:43:32:c6:b1:bf:1f:44:11:73:c7:4a:
59:c3:3a:b9:5c:ce:4a:55:22:3e:64:42:81:86:3e:
71:d7:c0:c6:88:c5:b4:8b:10:af:93:8e:85:2a:99:
e1:9c:69:11:8f:da:b7:11:e9:2e:8f:81:b9:97:51:
cc:18:50:fa:c7:00:24:bf:53:a0:77:47:df:c8:e8:
f3:f7:34:ac:70:ae:49:d4:f7:d5:18:1e:f0:ed:98:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:88:86:C3:35:2B:7A:E4:5B:57:0C:6C:4B:98:DF:25:0E:72:BE
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:11:8d:ca:f3:7a:07:76:ad:e1:dc:2e:af:11:75:56:c9:
33:84:8d:d7:ae:d7:22:ba:83:de:0c:79:18:bb:73:88:00:08:
ae:ac:0f:6e:e1:e4:d0:15:fe:02:39:64:97:75:ea:5e:05:b3:
cc:8f:d9:fb:d4:11:c3:e2:73:8b:b5:67:0c:48:3e:f4:6a:87:
55:ec:14:89:60:54:0a:96:56:f8:5b:db:7c:0f:f7:b9:d1:c8:
c0:be:39:bb:08:be:d4:e0:fc:27:69:c7:0a:a9:5a:4d:83:04:
b6:2a:6a:d4:c3:35:92:22:99:cd:d5:95:ef:f6:59:50:ab:68:
ad:a5:75:0b:f6:ce:98:7b:53:f3:5b:8d:b1:09:70:00:e2:4f:
76:ee:99:4f:e7:86:f4:ad:e1:a7:3b:6f:63:90:96:c0:e2:e9:
a5:0c:1e:08:3b:70:0c:c7:db:c3:7e:64:a0:00:ff:8c:38:28:
36:9d:28:9f:e0:eb:f2:c6:4c:5b:12:f2:a1:8c:5b:3c:8f:ce:
81:fd:05:e2:c8:71:7c:8c:cd:79:b4:54:72:48:53:8c:c7:b6:
e5:2b:36:3b:a0:52:3b:83:9f:c3:2b:c3:71:f3:d7:c0:17:8d:
7a:4f:54:01:0d:7b:14:d1:64:fa:e3:a2:59:f7:86:f3:2a:6d:
19:24:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:20 2025 by rpki-client