Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File: 8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier: BWb5RtZDogeQ5d1yXOC25Y1oz1tb7L4dOW8rJyM7nSI=
Subject key identifier: 9B:74:2C:1C:85:A5:66:A4:59:FC:AB:59:91:EA:03:C2:DB:9A:A5:1D
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer: /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial: 0199FD6B029535552998FCF49A4FA86781C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number: 0CE8
Signing time: Sun 19 Oct 2025 17:01:12 +0000
Manifest this update: Sun 19 Oct 2025 17:01:12 +0000
Manifest next update: Mon 20 Oct 2025 17:01:12 +0000
Files and hashes: 1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: 6vNVoCXHlq8WuvEl9SttthJtoU4BnzqJ1dCUbTGDuaw=)
2: rMoZ83VQ7iYFtJcAmlmBDs25c0s.roa (hash: 5UVFXIRMFFdYenUl6z+JEcUUQ5VhSSfJAeVRB/Ej+fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:02:95:35:55:29:98:fc:f4:9a:4f:a8:67:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
Validity
Not Before: Oct 19 17:01:12 2025 GMT
Not After : Oct 20 17:01:12 2025 GMT
Subject: CN=9b742c1c85a566a459fcab5991ea03c2db9aa51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:35:33:a5:7a:f0:48:5f:94:7a:47:2f:f7:
78:19:34:43:00:8e:bc:f4:5d:4b:67:d5:13:33:87:
83:7c:8c:e5:a0:d9:27:ad:9f:26:3d:f1:e2:a0:27:
39:42:21:44:cd:5a:30:35:9c:e3:15:83:60:3f:76:
ea:73:89:c5:0e:fc:b0:b6:b9:30:7c:cb:31:36:42:
04:c2:7c:84:d8:36:9f:58:1b:d3:df:78:b0:38:81:
44:39:6a:6d:13:08:07:59:7a:8d:3b:4d:32:7c:7d:
85:85:51:2b:d3:19:e6:92:08:bb:ea:c7:ea:26:63:
18:df:dd:7e:f4:0a:b9:46:51:62:b3:4a:7c:77:d8:
69:9f:4f:03:36:10:d4:d4:35:46:b3:7d:6e:21:25:
8a:2a:ae:35:22:14:da:6c:45:89:ea:dd:19:ba:75:
20:03:fe:8a:2a:cc:d1:a0:0e:a5:97:f8:1e:cb:b3:
57:eb:83:c8:d9:28:06:aa:35:01:90:ce:be:8f:07:
a4:8e:bf:b3:73:66:a5:24:f1:28:cb:85:c0:e8:3c:
9a:58:9e:61:7b:d3:ea:f3:3f:d1:a6:ce:85:22:65:
6e:4e:22:e3:34:7f:36:30:46:fa:20:a7:1a:a7:1f:
b8:29:2e:3d:3c:a2:46:0e:6d:ae:e3:48:04:48:b0:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:2C:1C:85:A5:66:A4:59:FC:AB:59:91:EA:03:C2:DB:9A:A5:1D
X509v3 Authority Key Identifier:
keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:44:f3:84:67:d8:55:aa:71:3a:65:2a:e1:f8:19:27:d5:
7a:54:2d:32:79:d5:1d:55:71:3b:ec:9a:a4:4c:cc:28:01:04:
c3:6a:d2:c4:85:73:0e:e7:d0:a8:50:f9:89:7d:8a:3c:ad:ee:
bf:7a:2a:14:73:f0:14:d6:fb:da:b5:28:3c:a2:5c:de:ac:fe:
a4:b1:ea:23:2b:76:0f:3e:a0:77:f2:cc:ac:93:b4:e9:54:52:
11:fc:db:34:5c:6b:c9:ce:68:88:98:b6:2c:58:97:07:23:b3:
c0:85:c6:15:64:e2:be:c8:62:8d:d4:30:63:8a:1d:3c:67:63:
14:03:20:01:56:55:d1:3b:07:5a:ca:37:6c:05:b7:a0:fe:e5:
c0:62:bf:fa:54:a8:48:86:58:c9:3e:49:a5:88:e2:78:e8:22:
79:2f:20:17:3d:fe:bb:f4:64:39:b8:a0:99:0c:a3:98:6b:34:
7a:02:1d:8a:69:d5:e8:36:8b:dd:b1:94:5f:36:dd:09:c0:81:
48:ab:34:19:16:97:dd:b2:d2:05:4c:ac:a5:7e:17:38:ed:69:
71:53:b5:4c:53:4a:a7:cb:40:0f:d5:f1:0e:a5:98:79:e8:8d:
bb:1d:f0:ae:f3:7e:f7:8f:fc:24:c1:57:8e:03:0a:dd:a9:2c:
ae:d1:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:52 2025 by rpki-client