Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: CCsnRJtJOpdJQ7UsffQ6Rap+dMzxrEJBjYFMdcYvFJM=
Subject key identifier: 14:5F:BC:56:96:5E:08:F4:B7:E0:D8:17:25:47:99:5B:B5:3E:35:7E
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 0199FCFD9826AC44E1AE701202D749575D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 15:01:41 +0000
Manifest this update: Sun 19 Oct 2025 15:01:41 +0000
Manifest next update: Mon 20 Oct 2025 15:01:41 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: KSwS7xyfa0qTkmpxMe/pomIbBFhr8ErFhHMK3uC7KUk=)
2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:98:26:ac:44:e1:ae:70:12:02:d7:49:57:5d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Oct 19 15:01:41 2025 GMT
Not After : Oct 20 15:01:41 2025 GMT
Subject: CN=145fbc56965e08f4b7e0d8172547995bb53e357e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:2a:7d:2f:72:e6:78:a7:c0:e7:64:e5:0d:
c7:2d:55:7a:e3:c8:79:c5:68:2c:8f:2a:87:1b:84:
d9:0e:ba:4e:57:9a:f7:e9:41:82:92:d4:3a:59:44:
a7:ec:60:93:40:7f:40:59:c4:ff:60:e1:d5:30:de:
c7:8f:f8:5f:5b:83:f4:40:0c:f7:47:14:21:73:02:
0f:3d:f7:d7:ea:59:83:b2:1c:46:a6:0e:41:f5:cb:
8e:de:a7:33:e6:5f:45:61:2d:b6:37:bc:e9:29:f8:
e1:13:cd:0d:7d:2e:1e:bd:9b:36:42:58:cd:b6:b1:
b3:6d:ff:2e:9e:56:bb:63:d4:99:c9:60:dc:ec:08:
ea:ec:60:e4:d9:b0:32:3c:22:93:43:15:c4:f5:30:
99:86:8b:5c:0d:c5:c9:25:12:7b:0e:5b:3e:d2:90:
2e:50:d8:cb:20:1d:3e:a0:19:8f:dc:f1:56:d5:bb:
7c:bd:bf:ed:45:20:8b:49:58:1a:5f:dd:92:91:be:
57:4d:a8:b5:6e:5d:61:1e:14:9a:e3:06:5e:0c:21:
b4:00:a1:0a:cc:bb:74:50:a8:10:9f:88:08:8a:5f:
2f:73:8b:3f:84:ee:ef:a1:9d:21:9b:9f:76:de:26:
7f:fa:e7:b0:ac:d8:d2:5b:17:84:1a:2f:23:a1:2b:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:BC:56:96:5E:08:F4:B7:E0:D8:17:25:47:99:5B:B5:3E:35:7E
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d9:52:62:22:24:4b:e3:e2:f2:b8:17:04:d2:90:e7:1f:97:
65:04:9c:b6:19:07:32:da:b2:5e:f8:ed:27:7f:7b:2f:cd:52:
40:a4:2d:4a:b5:48:39:55:1e:cb:81:5f:5c:f7:51:e8:e0:0d:
dd:4b:82:9f:44:20:0f:d5:f4:fa:a8:89:df:42:f4:8c:d0:b2:
de:a0:95:a5:bf:f9:29:dd:23:f9:6a:23:8a:3d:26:71:47:4f:
35:b4:5d:a3:85:2d:e1:48:fa:f8:c9:19:30:94:07:77:70:fe:
51:a5:21:fc:03:0c:2b:05:1b:61:71:86:74:24:95:8b:8a:1b:
b3:44:9b:ff:41:93:33:17:a4:a7:b4:6c:dd:8d:8b:74:5e:b3:
a0:ca:d9:ac:b9:a7:59:09:86:5f:ce:cd:dd:f7:52:a6:7b:fa:
78:62:69:58:5a:72:c3:e8:37:01:49:e7:d5:53:e5:45:6a:8c:
b0:5a:64:61:05:7a:83:e2:7b:63:37:97:b2:c8:02:d9:44:10:
8e:fa:88:62:96:e6:4e:79:94:fe:ee:d8:b8:67:6a:e6:e0:5a:
cf:8b:fc:ae:26:af:ba:26:a1:db:0f:14:ee:fb:f2:b2:67:99:
71:84:bc:78:8c:d3:52:62:72:f1:5d:29:28:51:66:70:c8:2c:
4b:97:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:32 2025 by rpki-client