
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: ke2O0EuyOG6pjvDm6btJPZx8G+47eO8B6x/LG3RfBmY=
Subject key identifier: FF:F8:B5:F3:03:D3:68:C2:D4:99:E8:B2:15:7B:56:BD:F9:8D:CA:82
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 0199FAD8313D1A5789EDC74BA050B2F897FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 07F0
Signing time: Sun 19 Oct 2025 05:01:36 +0000
Manifest this update: Sun 19 Oct 2025 05:01:36 +0000
Manifest next update: Mon 20 Oct 2025 05:01:36 +0000
Files and hashes: 1: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: 1rj85zW195AyI/KPHIcte5DREahg2vPJPMdBAupiOwA=)
2: zFKwxmaeEautk9glZTACNxiJuHI.roa (hash: SSRDLDzbM3kxops586eTzqegDVIiP8cLLFUXY14RKCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:31:3d:1a:57:89:ed:c7:4b:a0:50:b2:f8:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Oct 19 05:01:36 2025 GMT
Not After : Oct 20 05:01:36 2025 GMT
Subject: CN=fff8b5f303d368c2d499e8b2157b56bdf98dca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:43:1a:26:77:dc:dc:9f:e9:eb:38:dd:a4:
ea:d1:98:85:cd:1d:4f:5b:c0:07:39:b3:11:7b:7f:
d2:b0:86:21:2c:b3:7c:d7:a7:62:50:c1:b6:1f:22:
64:c2:f6:f3:15:10:0b:72:8a:13:20:0d:38:89:88:
68:56:e4:ee:2e:50:13:7b:2c:9a:bf:39:fe:c6:9a:
7f:14:9d:0e:b4:23:a7:ca:fe:e1:29:f2:41:66:e5:
d2:1c:6c:e7:8d:7d:f6:0f:8a:d8:1c:15:94:9f:04:
72:14:e6:f8:5e:9d:07:9b:2e:22:0a:46:55:8d:b5:
df:5f:aa:a7:61:e9:f1:45:04:f9:cf:91:28:d4:63:
42:a9:76:14:a8:dd:df:fd:65:f7:60:5e:80:ee:ad:
13:d0:a1:d7:ac:1f:c2:c7:c7:09:0f:ee:dd:73:f6:
93:47:00:e8:90:e8:8d:a2:d8:6b:99:45:e7:37:be:
bb:e7:23:46:65:69:9a:75:14:09:aa:4d:50:e0:9a:
1b:57:2c:a2:24:cd:14:fa:95:a7:a6:9c:99:f8:03:
0a:97:93:84:51:fc:76:15:79:e7:4a:ed:54:6b:a8:
17:b3:1d:33:84:19:2d:86:78:cc:31:09:02:4d:20:
77:5c:99:55:61:e7:4a:a6:31:dc:50:e8:4f:5c:41:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:B5:F3:03:D3:68:C2:D4:99:E8:B2:15:7B:56:BD:F9:8D:CA:82
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b2:54:61:33:a8:95:cc:88:aa:7b:00:00:3e:ce:4c:28:28:
3c:66:b6:ee:92:a1:54:19:17:b5:ca:09:c3:3c:87:d4:be:13:
41:75:98:f2:4c:29:d8:71:07:51:0a:78:3f:b5:83:e6:61:9f:
c3:fa:0c:f8:ba:40:9d:dd:a7:fb:39:29:df:cd:c7:45:30:e7:
c3:fc:50:ee:65:5e:7d:80:50:e0:bf:33:8a:77:66:e6:b2:a2:
7f:2f:24:e5:1e:52:cc:87:ad:3d:1d:16:22:95:eb:20:a4:5b:
f4:a3:55:a2:5f:08:90:18:12:0c:a0:61:3c:39:1a:b0:36:72:
8a:7a:80:d3:5a:d9:a2:f9:e9:bd:81:11:1c:2b:59:46:0e:39:
75:0c:76:73:7c:53:37:59:12:66:33:fe:8e:53:74:d7:b2:72:
90:ea:de:dc:61:c5:dc:1b:51:ac:da:b1:f4:46:32:d8:8a:15:
9c:34:4b:12:14:3b:07:17:c0:c3:93:40:2a:16:12:a1:c6:93:
10:c3:ab:6e:50:a3:10:a7:eb:43:ed:8a:e1:c2:98:b8:e8:62:
75:45:45:b0:dc:24:e9:e2:ec:aa:31:5d:b6:74:8f:d8:06:99:
41:3c:25:ce:ba:ee:0f:fc:2c:77:8f:58:31:ef:c6:fd:95:fa:
63:b6:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:37 2025 by rpki-client