Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: LUGYvOn/R1tcoAQbeNEXIzCtONtf1xujte7IX6uMSpw=
Subject key identifier: 36:3D:BA:EA:91:8C:F5:CF:BC:92:B5:DC:4D:15:F2:3A:B7:3D:79:87
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 019A4EF4C239F4B850669C4A9286681ED3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: Xks1T+x0+vX9fKhoN4lXiz5xFfufzwRv4mzugApGUkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c2:39:f4:b8:50:66:9c:4a:92:86:68:1e:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=363dbaea918cf5cfbc92b5dc4d15f23ab73d7987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:5f:32:9d:f0:6f:85:e9:6f:6d:be:b6:13:
51:b1:16:11:66:84:91:12:6f:cd:a6:1a:65:db:47:
3f:ed:9f:b0:e3:6d:f7:bb:7d:87:34:4d:4b:59:b6:
58:5c:6a:04:66:c9:dc:92:0c:93:7f:c2:74:0c:43:
e7:e6:37:03:e0:f3:ad:2f:22:c2:29:de:82:60:a6:
77:6f:8c:b9:92:9b:01:c2:13:c0:9f:bb:a2:9f:c1:
44:06:13:09:70:7c:e3:5d:21:72:e0:36:a3:8e:93:
e3:61:54:79:93:0a:a6:91:f2:68:62:f8:c7:1b:14:
0b:bb:0a:96:7b:8e:fd:75:71:a2:ab:c4:7b:6c:dc:
58:ab:9e:ca:26:ef:d6:cc:91:0b:13:eb:58:6f:92:
92:18:67:87:c3:26:c8:42:58:be:1b:25:9e:dd:51:
76:d3:18:d7:fb:15:53:4c:47:d1:90:e9:1a:9e:82:
ee:34:59:f0:42:07:ad:78:f0:9c:a8:cf:3d:60:81:
88:d4:85:db:0d:1f:54:78:58:e8:b2:bb:d9:af:aa:
c3:8e:fe:cf:4a:93:12:ab:ec:27:b4:a4:93:c0:cf:
36:d5:73:c5:92:71:b6:95:be:3b:15:8d:44:b5:f5:
af:15:51:d8:d2:1d:48:02:71:34:24:19:9f:fd:a3:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:BA:EA:91:8C:F5:CF:BC:92:B5:DC:4D:15:F2:3A:B7:3D:79:87
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8d:d2:87:79:19:2f:66:41:b9:3f:4a:e6:7a:30:33:75:6f:
51:01:27:af:77:dc:ff:d5:1a:85:d8:3a:73:23:5e:e3:30:95:
6a:2c:14:28:06:bd:03:aa:cd:03:d5:66:9f:cd:54:36:5b:5f:
c7:f8:06:60:88:91:c2:dc:ee:24:e6:6c:88:02:d3:ee:35:5a:
91:c4:35:9a:77:8a:93:e7:e2:65:dd:45:73:ac:fa:37:40:e8:
33:53:11:7b:91:f0:c5:47:0b:0c:0c:59:06:1c:0c:3e:96:a3:
d1:34:83:3b:34:07:1f:e5:2f:d4:34:c8:1e:16:2d:aa:3d:b6:
00:7d:b7:fd:c4:b2:26:8d:6f:d9:2e:43:b4:00:ea:2f:80:fe:
c2:1d:08:8e:8f:68:96:d2:a2:cb:81:f7:44:13:fb:90:8a:db:
85:f4:c9:f9:09:49:92:a1:15:bd:a9:2a:d4:74:79:ff:3e:2b:
e4:f3:62:5c:4f:d4:3a:00:02:40:a3:bf:3b:0a:6d:c3:1c:3f:
31:07:31:96:a9:18:87:7c:d7:7b:02:41:76:ed:00:21:19:3b:
b2:fd:67:f1:f0:4c:0b:b1:e8:40:b3:d5:a9:1c:ce:df:26:77:
2f:2d:3a:66:86:53:70:43:14:04:47:01:a3:d3:36:cd:49:2f:
a2:ce:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:12 2025 by rpki-client