
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: Lehy+q5N4oFNAWEPNTtq2zVjqhufX2gkeS7B5YuKVBU=
Subject key identifier: 07:F6:B3:A6:B8:F8:C4:03:60:B5:EC:DA:F1:2D:9E:76:55:94:C4:7D
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 0199FCFD7B0AA9D8CBAF86904C49D8462F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 0663
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: +rVpNGaKX9MeLgkiT+f6iOmiHWekrIaM77J9UAYF+j4=)
2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7b:0a:a9:d8:cb:af:86:90:4c:49:d8:46:2f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=07f6b3a6b8f8c40360b5ecdaf12d9e765594c47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:88:be:34:6d:25:6f:4d:9c:c3:53:b6:df:
f6:a0:74:eb:09:4c:e0:58:42:2c:28:9e:a7:94:9f:
bf:e0:9e:38:bf:2d:99:b9:66:00:80:88:97:a5:bd:
af:2f:8f:d9:1c:ce:8e:87:b8:35:17:35:48:31:c7:
74:7a:0f:20:89:36:6a:0f:85:8f:60:87:ae:73:a1:
89:e6:e1:eb:79:23:7b:1c:2a:19:44:ae:64:62:44:
49:5b:8c:84:30:05:84:74:ce:1f:5e:16:34:5d:e4:
cc:05:1d:d3:74:7c:2e:07:ad:d9:8e:b9:21:6d:0d:
10:1c:79:43:8b:8e:2d:34:23:94:72:3d:0f:f9:8f:
70:c0:5a:88:69:ad:1d:ab:b6:21:1e:1b:f3:d1:0d:
23:2b:89:13:5c:14:e4:9a:40:87:d0:09:2e:3d:09:
77:fe:20:c7:40:36:a6:28:9b:92:6d:47:4b:c2:66:
9f:49:3d:78:b8:ae:f9:58:65:7a:f8:a3:9f:18:c6:
ee:d6:e4:92:d5:0a:a6:30:c3:ec:d5:f0:5f:0f:95:
fd:e5:fb:f2:b5:b3:7e:8e:f2:d2:87:47:4a:50:4e:
8a:b8:57:5c:97:da:e8:2a:b3:8c:5f:be:d5:cf:eb:
2c:c6:13:bf:ee:12:ca:fb:bf:f6:46:cb:51:78:98:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F6:B3:A6:B8:F8:C4:03:60:B5:EC:DA:F1:2D:9E:76:55:94:C4:7D
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7a:9f:5d:5f:e0:ca:83:7e:02:09:4f:d4:7d:6b:e7:e4:a5:
50:9a:5c:af:da:3d:18:bb:78:04:28:5b:7d:6b:79:8f:b5:7b:
32:76:69:f8:69:57:92:cc:d7:96:32:ff:a2:e7:37:98:d0:27:
24:46:5a:db:61:dd:e5:d1:bb:32:b9:f4:9d:1f:84:d7:a8:15:
3d:50:4f:12:cf:3b:44:2f:e3:6a:67:2f:12:5f:3a:41:79:10:
ae:6b:19:f0:69:fc:30:8e:6c:48:ee:44:14:9c:16:ad:c9:1b:
6b:47:fa:11:e1:7b:11:41:05:18:64:f6:11:b5:b5:1f:f1:6e:
4f:a3:3d:70:4f:d4:b2:3b:86:c0:ed:32:3b:b5:e9:26:f3:6b:
a2:a3:96:b2:f5:d6:fb:37:f4:d1:64:0a:f1:be:8d:b4:8b:8c:
9b:43:9d:6a:85:2b:5b:ae:32:eb:40:ea:54:ea:8d:a3:1b:37:
aa:a2:09:2a:bf:c2:89:56:b7:c0:3b:14:a2:9d:62:70:02:b6:
78:b7:42:ca:1c:1e:65:2a:6e:d9:bd:7b:cf:02:63:94:02:09:
09:60:c8:a0:d6:39:55:4e:f7:41:f6:b0:7f:ce:99:47:07:b9:
82:a6:b3:76:b1:fe:d8:d8:f4:f5:60:18:b4:6d:1f:33:de:50:
bd:8f:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:10 2025 by rpki-client