Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File: g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier: hnsannSWfQXqWcHJeBzy6JGz59J3hy0yDpDEXAaJ6c0=
Subject key identifier: 8F:F2:58:32:94:49:09:F9:A0:14:31:C2:23:68:F6:F5:77:DE:84:09
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer: /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial: 0199FBEB12E4F12F6C94CAC9EB9ACE1E363A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number: 0A66
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: WVXldiEWa4urGqVHnWb5X3sDpwtnrGWjQF9Gw0lj2ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:12:e4:f1:2f:6c:94:ca:c9:eb:9a:ce:1e:36:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=8ff25832944909f9a01431c22368f6f577de8409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:70:63:b9:0f:7a:ee:b3:cb:44:bf:3f:07:
8f:e0:93:e4:1f:7d:22:f3:90:e6:94:d6:7e:99:3a:
06:b3:f7:6a:45:03:d1:77:c7:0e:2a:77:5a:83:66:
91:c6:67:6d:cd:6a:5f:cc:0f:cf:10:8d:17:f7:22:
78:32:31:36:c3:5f:5f:ec:3e:3c:73:aa:c7:9c:a1:
16:eb:87:90:d9:33:7a:22:1b:5d:ef:db:18:93:80:
82:54:cf:c7:7f:66:9c:72:ab:e0:84:08:da:f6:5d:
a5:e2:68:38:73:fd:c3:26:f3:0c:cb:02:e6:af:67:
16:da:66:60:47:b5:bd:2f:c7:f1:34:04:7c:2a:d8:
84:f3:8a:82:53:32:92:bd:1d:92:a9:c8:7b:9a:f0:
b3:58:cb:35:b3:30:76:11:e3:ca:ac:49:b4:47:d6:
06:02:49:9c:52:91:ea:0c:30:a4:5d:48:bb:6f:95:
17:e4:5a:90:3d:00:ae:9f:93:b7:2b:1d:3b:a6:cf:
28:fc:3a:b8:95:ec:d7:bb:0b:ab:c7:dc:d5:e4:b4:
07:7f:df:43:45:a3:73:4e:1d:40:bf:16:90:48:ab:
ff:cc:9e:c5:e9:c7:1b:95:5b:4d:83:f1:9a:1a:2a:
4d:7a:f1:c8:f5:77:99:5b:12:b3:65:fb:e3:af:ea:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:58:32:94:49:09:F9:A0:14:31:C2:23:68:F6:F5:77:DE:84:09
X509v3 Authority Key Identifier:
keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:05:95:e7:4b:27:59:ed:2d:2c:d6:cd:a1:d9:e3:94:89:28:
53:d0:76:f2:55:0e:8d:73:ed:0a:10:eb:e9:79:dc:af:bc:d5:
50:9e:d7:63:34:40:98:66:44:46:17:d1:8b:ad:5b:d1:91:c9:
a6:ab:38:d9:1b:3d:d5:e2:4d:13:6e:54:a2:a1:ee:cb:4c:11:
b6:94:3a:0f:99:86:fb:fc:f2:1c:f2:0f:c0:0b:25:8c:1c:fe:
6e:fb:aa:a2:0a:fa:c2:08:f8:48:80:30:26:8f:9a:dc:ec:4b:
03:28:bb:5e:9a:c5:3a:c8:72:36:dc:83:25:8d:4c:3f:44:1f:
1a:be:24:f8:d2:22:ea:68:7c:87:3d:ce:b5:e5:ee:27:3e:8e:
8b:e2:78:bd:1d:18:4a:91:28:29:b9:f2:0a:9f:8f:d7:a8:55:
48:f4:dd:e1:fa:b6:1a:d9:59:de:1d:56:aa:64:78:80:4e:f8:
2d:cc:2b:15:04:22:d5:b9:cf:ff:fa:dc:c1:cd:8b:a9:5d:de:
67:2a:73:fe:61:67:07:69:05:35:52:77:cc:79:31:76:ce:eb:
ff:f6:09:28:2b:24:15:db:d0:dd:b0:6c:33:f3:69:2a:74:28:
c1:62:dd:76:ab:01:c5:d0:2e:bd:58:40:5a:27:d8:4e:95:00:
a4:87:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:32 2025 by rpki-client