Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier: IkhY+cGNIMyrWoA8wrdeDOBtDRgiZt5v9Kj3iUdPNn4=
Subject key identifier: F2:BA:FE:26:2D:80:E5:30:7C:2F:E1:11:CC:5D:7A:28:92:6C:8D:6C
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 0199FBEB9DFF1815859218EA5044D10D0BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number: 0355
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: XDaCGcZealj-spshbO6gPk6HDcA.roa (hash: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=)
2: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: yGHYZ1yyIat6sZ6YuIU7ZsQWDMA96rIe+2xoBHHs7/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9d:ff:18:15:85:92:18:ea:50:44:d1:0d:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=f2bafe262d80e5307c2fe111cc5d7a28926c8d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:8a:e1:d9:3d:11:d1:98:92:fb:f7:68:35:
bd:95:77:cb:35:bb:76:af:4f:11:e7:98:e9:a4:e4:
d8:d3:3d:96:74:58:9b:44:70:17:cc:67:a2:da:74:
68:5e:ed:02:5f:6e:04:91:b9:82:2b:9d:f8:fc:12:
44:82:e1:c5:34:bb:58:f6:51:6a:3e:2f:e2:05:0e:
85:20:d9:8b:e0:21:0d:c9:d9:d9:ef:78:c4:da:c5:
e6:7f:98:29:78:77:75:20:3c:9c:cd:dd:ca:bf:b0:
9f:88:31:60:f2:79:24:a9:6b:d0:45:81:0a:90:3a:
10:96:1b:12:67:53:68:68:f5:cc:d7:60:9b:fb:7c:
10:36:06:44:0b:58:93:1a:d5:3c:23:9b:55:ed:ec:
d4:1d:20:fe:93:ec:8e:bf:4b:fd:4f:cf:80:d4:c9:
d0:c5:1b:84:55:fe:19:58:b7:d1:d3:59:61:d8:31:
75:c2:39:d9:3d:6f:fb:7e:44:ff:0a:63:69:97:2f:
c0:a3:c6:ea:b0:eb:31:fe:65:2e:dd:25:a2:2d:6b:
c8:06:95:f6:a4:b9:04:a4:67:8c:fd:ec:77:54:37:
6c:5b:6b:08:a4:2c:41:75:60:dd:4c:ff:12:1f:62:
34:27:56:2b:a8:71:8d:61:19:ad:cc:55:df:b4:c7:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:FE:26:2D:80:E5:30:7C:2F:E1:11:CC:5D:7A:28:92:6C:8D:6C
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:df:da:b1:fb:00:dc:21:71:57:54:dd:52:8d:9e:3d:c9:0b:
15:2e:d2:af:87:17:ef:b4:8e:e4:b7:3c:c6:a7:b4:b8:1b:f5:
62:8c:75:22:9d:7e:23:31:5b:2d:48:e6:df:bb:c2:14:79:0f:
46:a8:58:42:ac:31:c4:66:f5:0d:47:90:ab:db:c1:73:b8:22:
32:83:49:28:be:ce:fd:89:f7:36:8b:66:79:ea:1a:6b:45:55:
6f:e6:fb:88:3f:d9:e9:e3:f8:47:96:32:76:73:e9:2b:b2:f6:
34:db:c2:a6:ea:d0:5d:ec:b2:96:17:63:3f:98:36:51:76:2a:
3e:fa:85:8a:d5:c3:33:f5:d3:03:bc:ce:a5:91:e1:6d:f1:b7:
6e:c3:4f:79:8d:fd:a8:4f:87:53:b7:12:2b:4d:d9:03:0d:c4:
f2:aa:08:00:2a:3a:f9:5d:a3:c9:8a:b7:30:53:15:7e:32:46:
ce:2b:c7:ab:f8:88:77:f8:28:ca:8c:cd:e3:0c:81:ef:8d:2d:
27:f3:45:d6:1b:76:9d:97:3d:3e:03:17:88:68:f1:75:e7:bf:
fa:2b:db:e3:45:db:9b:d4:47:55:9c:4f:91:8a:d1:e2:aa:07:
49:e1:92:b7:38:ef:03:83:a2:6c:36:8b:53:eb:97:23:39:ed:
a8:2e:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:15 2025 by rpki-client