Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: afVorXX4rt5zDMoaD8IIoLDj/BUZmDUnvcauKfDqOVU=
Subject key identifier: 6B:56:96:7A:F5:46:CE:49:89:05:6D:DC:7E:77:51:D0:5B:06:AC:BF
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 0199FCFD99E7D97DA328D9BD8B6D582F1B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 15E7
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: fZImJkvcOCrx9ZK8n1YmvYxHUKii/gaBx1Rsl/YP4nA=)
2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=)
3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:99:e7:d9:7d:a3:28:d9:bd:8b:6d:58:2f:1b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=6b56967af546ce4989056ddc7e7751d05b06acbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:23:7a:1a:e8:0d:8d:fd:4d:5a:ac:6d:39:
ee:3c:cf:a7:a5:ee:5b:60:db:ac:19:fc:88:5e:48:
20:b8:4d:d3:40:d2:72:00:24:fb:0f:86:64:4d:92:
31:be:09:c7:f2:35:23:65:51:e6:4e:8e:e9:dd:40:
0d:5b:fb:8e:89:e5:fd:f3:23:ea:db:a4:ff:11:00:
6d:21:1c:78:06:ca:8a:26:f7:04:fe:1b:95:68:d4:
0e:bd:14:d8:8c:6d:b2:af:61:a1:55:bd:7a:70:9e:
13:3d:e7:66:60:87:15:d4:6f:6b:15:ec:08:ed:75:
30:5f:05:a0:9c:77:e7:68:31:41:db:2f:bd:80:cb:
cf:64:b6:ee:bc:28:15:76:af:a6:e3:8e:74:dc:82:
85:5f:51:33:67:8e:ae:c4:30:c3:46:c8:86:4a:01:
48:95:a3:9c:86:c5:63:64:9d:ab:20:da:b4:70:d4:
29:24:7a:a2:6c:a1:2f:51:08:f5:bd:b4:dd:de:bb:
3e:49:28:9f:c9:5a:74:49:e1:25:c9:67:54:e7:f0:
28:f5:ee:2a:15:df:43:7a:7e:98:17:89:34:79:6e:
04:2f:52:0f:da:ae:d6:e7:90:62:09:40:f5:52:89:
b2:7d:a9:0d:ea:c3:f4:9d:45:b0:c4:64:34:9e:35:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:56:96:7A:F5:46:CE:49:89:05:6D:DC:7E:77:51:D0:5B:06:AC:BF
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:15:23:db:aa:d2:39:ef:91:dd:f4:52:69:9a:c1:0f:e0:8c:
cf:a6:38:d8:dd:5e:73:07:13:47:5d:a6:19:9c:27:a9:4a:83:
cc:52:89:c7:29:8e:07:41:4c:40:34:f4:51:7a:63:10:04:98:
59:67:2a:b9:dc:bb:9a:12:56:67:d4:d5:b2:55:96:a4:69:28:
28:ec:ba:c3:c9:8b:b2:3a:c8:d1:69:35:62:11:c4:bf:1b:e6:
b1:46:1d:81:0d:f0:22:e1:43:b5:d2:0f:e1:63:62:58:74:a0:
5a:40:5e:18:7c:8c:db:cc:27:5e:80:97:a8:36:19:9f:11:7e:
82:d9:8b:1e:68:c8:23:70:f6:b2:ec:2e:2d:5a:53:9e:9e:9d:
22:a6:ec:75:37:c7:bb:be:3e:b8:38:9e:7f:0f:59:7a:4d:5b:
57:69:d5:44:94:c7:e8:00:6d:92:ab:35:c6:57:88:18:94:a8:
3c:17:5e:af:0d:4d:1a:27:27:87:82:9c:bb:47:39:67:e9:f7:
c3:fd:a3:d4:97:91:42:c6:b3:ae:82:1e:91:12:90:d9:db:91:
5b:e9:06:33:9a:5f:04:d2:0e:f9:b5:6a:33:f2:0f:90:ce:eb:
ac:0b:da:21:e7:d9:71:74:fc:74:82:bd:08:86:23:25:f6:8d:
17:76:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:15 2025 by rpki-client