Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: GFYtZCBhSaXsu2PFdKlGNYZGtlC4C5Q74Dq6ZeUGIwI=
Subject key identifier: 16:A4:4A:50:65:B6:A7:4A:37:62:CD:4E:06:21:84:D7:74:56:24:1F
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 019A4EF52667933AE233D242A50C59F7E68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:20 +0000
Manifest this update: Tue 04 Nov 2025 13:01:20 +0000
Manifest next update: Wed 05 Nov 2025 13:01:20 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: EXnOBxmigqHQRFzTSL60RxBxLn0IXI8TmJEnwHM4q5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:26:67:93:3a:e2:33:d2:42:a5:0c:59:f7:e6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Nov 4 13:01:20 2025 GMT
Not After : Nov 5 13:01:20 2025 GMT
Subject: CN=16a44a5065b6a74a3762cd4e062184d77456241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:97:0a:26:db:81:b3:b0:11:b1:e2:5c:dc:
96:e6:2f:dd:a3:c7:9c:e8:5c:d3:3d:83:fe:e8:f7:
4b:d0:b8:06:de:8a:94:aa:31:65:6e:0c:93:b7:19:
b1:f8:c4:6d:2a:2e:38:46:49:f2:d2:2e:50:9f:8c:
77:80:24:83:02:cc:b3:3a:6b:c0:7c:33:24:db:f5:
15:04:24:27:18:78:d6:28:d5:9b:2e:e9:3b:c5:4e:
7d:fc:6d:58:1e:25:94:42:90:70:e5:46:45:1e:3d:
93:f9:53:dd:fb:81:06:8c:bf:51:8a:24:1c:11:82:
d4:66:85:17:7b:c7:5e:3b:26:fc:14:4d:22:7e:4f:
8b:2f:f4:04:2e:3b:72:00:4c:f1:b6:0c:7a:c1:4b:
2e:fa:83:c0:43:a8:ed:5e:e6:45:ec:15:f9:77:4f:
1f:d3:cc:be:79:e0:5c:ba:57:6f:99:7b:72:e8:20:
37:72:5a:da:36:39:dd:1b:8c:39:2c:06:8d:c4:19:
7e:f0:51:1c:bf:7b:2e:11:59:99:94:f2:93:88:ae:
1e:87:86:91:a7:92:65:91:08:42:87:7d:41:29:92:
22:0c:49:35:3c:0a:fe:f4:55:5a:d8:8c:62:19:48:
cf:b6:51:55:99:85:63:af:9a:04:47:ff:e3:d0:d9:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A4:4A:50:65:B6:A7:4A:37:62:CD:4E:06:21:84:D7:74:56:24:1F
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:da:55:3c:f4:3e:d3:fa:76:86:0c:90:4a:ee:45:27:05:29:
38:44:84:8b:0e:c0:71:39:09:bc:41:d0:68:a9:54:b3:8a:43:
37:81:0d:bd:78:c0:38:f0:9e:5e:e6:c0:1e:12:eb:51:d4:c6:
9f:8c:e3:4c:10:02:fc:b8:18:22:4c:8a:df:48:d9:50:d2:81:
b4:6e:e6:01:95:c7:ae:a7:3f:f5:f2:3f:1a:0f:6b:fe:38:65:
e0:55:d1:df:9a:f8:eb:ff:0e:57:fe:8f:42:1e:20:61:3d:05:
10:cc:73:5b:2c:b0:78:f6:14:93:f9:42:e7:25:cc:aa:33:53:
31:dc:5b:01:df:ae:7f:a8:da:bd:d6:4f:ea:8a:61:a0:fc:51:
9c:d3:fd:9f:42:cd:02:be:fc:27:f3:11:0a:fb:db:88:25:6d:
6c:87:55:70:73:9d:a2:61:08:57:c0:44:e1:80:8a:11:6b:a9:
9b:7c:13:65:19:34:e0:96:47:52:a1:6d:c7:9e:00:3a:0b:16:
7c:f7:03:94:2d:91:86:62:e0:fd:01:f3:2f:8b:e6:eb:72:a4:
2e:a7:d2:29:fc:48:7f:3c:54:af:85:40:6e:fb:b3:55:b7:16:
56:b0:86:f7:a4:89:bb:2d:87:cc:d3:14:ef:80:ff:05:b2:87:
0b:3d:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:38 2025 by rpki-client