Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: 46FYyhvqwTbynys0bccJe3U1b2xmXT8y833H8XYAzoA=
Subject key identifier: 22:6F:D8:D8:15:48:91:5F:A3:92:65:FB:FC:9A:DA:C0:A6:5A:B2:85
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 0199FB4638CD262DF06EA361695F7F58D5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0853
Signing time: Sun 19 Oct 2025 07:01:47 +0000
Manifest this update: Sun 19 Oct 2025 07:01:47 +0000
Manifest next update: Mon 20 Oct 2025 07:01:47 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: 1DFBHF1YT1kci+fzzJBmRW/T37/ei5TysKj4w7+BKH4=)
2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:38:cd:26:2d:f0:6e:a3:61:69:5f:7f:58:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Oct 19 07:01:47 2025 GMT
Not After : Oct 20 07:01:47 2025 GMT
Subject: CN=226fd8d81548915fa39265fbfc9adac0a65ab285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:b4:cb:eb:f9:5f:77:8d:1c:a6:15:6d:aa:
9d:49:09:9b:45:c1:d2:40:6c:10:27:06:dc:be:c5:
d7:0a:77:cc:a6:70:f2:29:4e:5e:e7:99:b6:b9:bd:
9f:78:e5:32:8f:72:8b:7f:23:dd:71:d2:72:12:7a:
d9:54:3a:f3:a7:b3:b1:bd:46:4a:84:f5:af:cf:d9:
c9:11:35:9e:f8:39:04:5f:62:eb:c2:06:fb:39:7d:
ec:f8:de:f2:c7:86:56:a2:31:70:fd:15:4b:2e:fe:
81:8f:0e:e9:4f:cc:49:3a:21:bd:ea:2c:3c:77:fe:
65:3c:fd:e2:7b:e5:e5:da:f4:d8:67:4d:fa:f5:86:
06:53:f6:0e:93:1b:64:15:21:6d:fa:0e:55:88:ca:
29:59:86:f6:68:28:f1:fc:52:a5:5d:dd:f1:85:c2:
fe:b4:34:d8:90:d4:d2:63:7c:bd:d2:7d:62:14:f1:
8d:86:c4:a7:fd:fd:79:6a:c1:11:10:53:f1:6f:5e:
f8:5e:55:fe:14:73:f6:ac:93:f9:d0:cc:a2:32:ca:
40:6b:30:3f:c4:3f:df:9b:ea:49:3b:ae:5d:90:e7:
96:7d:84:9e:41:93:38:04:a0:34:7f:26:b2:a6:24:
d8:7f:62:89:c5:93:0e:35:95:73:29:f5:04:ad:01:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6F:D8:D8:15:48:91:5F:A3:92:65:FB:FC:9A:DA:C0:A6:5A:B2:85
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:89:d1:74:86:2d:f5:85:a1:96:df:7c:30:af:74:94:97:1a:
e3:81:d3:b9:c4:2f:89:ce:c8:a4:16:e0:0d:b7:d8:6d:c5:80:
7d:45:75:b8:46:2e:10:4e:fd:a2:12:a4:90:5b:d7:ad:e7:fe:
a1:2e:c6:80:96:8b:57:82:d2:66:fc:31:f9:dc:d3:35:9a:9c:
cd:9c:f0:f2:49:76:62:1e:e9:9a:7c:f1:42:e3:12:f0:3c:3e:
ff:22:b5:32:3f:21:cd:0e:76:ff:5c:51:b1:74:7a:e7:c1:c0:
97:89:27:d0:2d:0d:19:af:86:6a:a4:49:f0:21:ef:e2:ed:29:
e6:aa:a5:2e:01:d8:c3:81:d4:bd:14:8f:b4:b7:ed:51:10:4c:
30:02:94:51:f0:be:cb:bb:61:4c:1c:2f:fa:a2:cb:49:ef:77:
0a:fb:72:52:f9:7b:f6:51:0c:3c:aa:ad:aa:6c:41:d0:6c:a3:
b1:31:c7:1d:5d:cd:1b:f5:d4:9c:2d:95:2b:05:05:01:cf:c5:
23:d0:7b:42:24:d8:11:ad:d2:c2:1c:03:43:f4:ca:ef:39:5a:
93:f0:f7:ec:32:4b:ac:57:d0:14:5c:ff:03:49:a1:8e:85:23:
d0:79:ee:78:79:9d:27:30:2c:20:b4:20:27:8f:81:5a:e5:41:
40:7a:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:34 2025 by rpki-client