Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: BmnG8ahVBnJ0wyREnubUSLHVwjR/SJDGR++V7tGudng=
Subject key identifier: B3:1F:73:2A:6A:A9:38:C9:C7:76:82:EF:33:56:A8:F3:08:9B:22:55
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 0199FD6AFEB15B77DB8A45E8C5BE9840F788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0FD6
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: Y3Ptf4Xsjjk13fqa0ysSoSrIRISGiCb21rwNgpDV0i4=)
2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fe:b1:5b:77:db:8a:45:e8:c5:be:98:40:f7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=b31f732a6aa938c9c77682ef3356a8f3089b2255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:52:cf:0d:fd:5d:f2:67:97:ca:2c:0b:2c:
30:8a:8d:cc:30:e2:83:17:83:f5:0a:59:49:f1:19:
04:ae:49:67:f1:f2:55:dd:25:1c:73:0a:b9:37:80:
fb:10:91:4a:9e:d2:91:f0:3a:aa:24:02:2f:81:03:
32:c9:c0:21:e5:9e:7b:43:48:20:a5:99:49:10:68:
87:d7:dd:9e:d2:ad:1f:03:3a:c8:41:bf:61:54:5b:
11:1c:51:ec:ac:f3:de:13:63:fe:5e:bc:e1:05:52:
9a:50:ff:f3:af:1c:6a:be:c8:e6:de:85:be:e0:55:
0a:cb:83:9d:ad:1c:55:c2:88:7c:59:ad:47:68:67:
32:4f:57:e2:66:b9:4b:de:54:7c:1f:e3:b2:08:35:
39:51:eb:08:78:dc:9b:10:92:3f:1b:00:96:65:fc:
c7:b8:99:3c:91:04:73:4e:2b:3b:81:d7:c8:a8:51:
50:f1:1d:84:1d:9c:75:0c:0d:19:df:65:15:93:5f:
05:f7:de:7d:e1:0e:90:14:ae:60:15:fa:a9:5c:75:
cd:c0:8c:1e:dd:8a:80:a6:83:64:4d:cd:74:8a:0a:
7e:d8:5b:3c:2b:c3:df:7e:56:1a:a0:ec:bc:e4:44:
76:ef:97:2e:c5:b1:f4:1f:41:4f:63:90:76:36:80:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:73:2A:6A:A9:38:C9:C7:76:82:EF:33:56:A8:F3:08:9B:22:55
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9c:ee:0e:f4:8b:48:e2:84:8d:9a:77:66:09:b5:da:5b:0e:
57:e2:a9:f9:e7:b8:4a:95:2c:7b:52:59:d5:f3:d3:5d:4c:48:
04:fc:34:96:ca:92:32:e8:c8:e1:56:89:f7:a4:fe:01:eb:c3:
54:a8:41:15:84:39:d0:a5:c8:0d:ac:01:1a:29:40:06:03:17:
cd:3b:66:c0:2e:17:be:17:26:ed:6b:b0:39:91:02:11:0a:55:
51:86:7b:03:bb:be:34:af:a8:a3:ff:94:18:19:2c:95:ea:4f:
28:a9:10:0e:6f:ac:d5:48:bf:bd:34:ff:a8:fd:b9:ef:04:b7:
48:d6:d8:9a:a3:59:5e:37:44:34:7f:af:44:d4:a2:1a:6a:71:
27:e5:66:95:05:b9:ed:8a:08:c4:72:18:a2:52:98:06:f9:45:
4f:ac:3a:54:1c:01:1a:b4:9f:5c:11:6c:da:cf:0f:15:bf:27:
9d:14:89:8e:fd:76:86:0d:8a:53:4a:d8:ea:e9:6d:e1:6c:84:
c6:fe:da:7d:53:02:bc:42:f8:c8:ed:76:2e:48:03:a0:f2:08:
57:7c:0a:f1:f3:20:a4:3a:9e:bc:fe:0f:11:ff:1e:e8:cb:5d:
23:bb:b0:fa:8f:74:de:f5:95:7c:40:74:b9:d4:69:97:be:44:
8d:0f:41:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:10 2025 by rpki-client