Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: +dV8iameFfpvwAJgaB5HHDtY3U1IdYDGRb/2j9Hk3VU=
Subject key identifier: C0:40:D2:C3:DC:53:7B:89:C2:12:A3:8D:E0:11:44:F4:8C:74:3E:11
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 0199FCFD8AEB451EE14AFC6EB496FE382D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0E70
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: 3xRwO1qfYn0mxDt3zABTf7v2xWRgY6nx3qEjuxZ6Jv4=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8a:eb:45:1e:e1:4a:fc:6e:b4:96:fe:38:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=c040d2c3dc537b89c212a38de01144f48c743e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:3a:3c:47:a9:9d:da:80:a2:c2:35:b8:4d:
cd:47:cc:e4:44:2e:31:07:51:97:32:58:0e:39:f0:
e6:d9:d7:81:ac:9d:f6:92:8f:98:e0:75:80:e8:5d:
87:33:ca:8b:28:94:3d:66:99:76:2a:54:b8:72:89:
7e:04:32:50:10:79:82:3d:be:bd:6c:d0:96:63:59:
1e:71:66:60:5d:42:9f:55:06:73:8f:30:d3:38:8d:
25:d9:6c:2d:cf:b3:2f:25:69:b3:00:f4:51:b5:ba:
0c:ab:e3:52:df:d9:bc:e2:f8:e2:38:9b:ed:78:96:
2f:56:c3:4c:6f:3b:b3:c4:ea:93:84:54:6f:97:f9:
5e:02:08:2e:8a:ef:99:27:62:25:b5:64:be:cd:74:
77:e9:33:12:28:ff:61:78:65:d2:40:3b:0c:0e:59:
c4:3b:cb:74:21:27:1e:98:1d:88:0f:69:62:45:86:
6b:77:e4:79:ab:ec:8b:bb:8a:8c:f9:97:c1:f4:d6:
cc:02:8d:12:60:a8:2f:63:a0:d1:6a:65:38:00:4f:
3a:4e:79:9c:87:f5:6a:2a:3d:9a:62:06:f8:c7:91:
83:ff:24:bb:32:2a:06:b1:25:0d:ed:1a:d4:21:5a:
98:82:bc:8b:ae:1e:08:4e:f3:48:83:40:36:37:b3:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:D2:C3:DC:53:7B:89:C2:12:A3:8D:E0:11:44:F4:8C:74:3E:11
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:01:3c:95:48:3d:17:6b:9b:87:2b:60:9a:9e:4b:cc:31:46:
d7:f3:74:cb:77:33:3c:78:6a:27:9e:02:ba:81:01:4b:94:9d:
7f:54:f9:2e:c9:ce:71:8c:21:47:c9:05:f8:d2:d4:d5:6f:df:
c0:63:a4:71:3c:54:1a:f6:f2:b1:54:1b:2c:51:c8:c7:a7:78:
68:f6:a6:3e:ae:ed:64:b0:4e:ce:38:df:63:f0:99:f8:f5:52:
ca:66:e3:85:e0:ac:62:9a:bb:13:25:bd:17:62:e7:68:86:ff:
d2:d9:ab:34:34:40:18:35:34:62:20:40:65:5c:90:52:e9:e7:
34:01:24:07:1c:0a:1d:cc:52:01:af:22:9b:f4:ae:f2:6c:42:
ec:76:ed:50:2c:10:36:41:20:eb:0f:49:fd:78:96:cf:65:7d:
0a:96:3a:d4:bf:7a:2d:de:5d:bf:86:9d:c0:bf:2a:24:8b:4f:
43:c7:91:2f:51:1c:4a:a1:ae:2c:b7:a5:df:e6:fe:ca:5f:ff:
98:96:28:91:ec:fa:32:d8:75:4f:ce:57:97:6e:66:79:65:f8:
b1:5a:48:48:70:18:1e:84:01:e1:0e:6a:b1:7f:c6:40:e7:92:
64:58:86:b9:42:0a:6e:1e:01:d7:08:9d:aa:c1:95:fe:d5:a7:
17:0f:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:56 2025 by rpki-client