Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: V9WArJP6xnkwM0KYjRd4BFRmozcI6kDKDRXKi73AxCk=
Subject key identifier: B3:0A:B6:02:B4:58:02:C9:AB:3B:58:8E:13:DE:7D:4F:57:90:74:E8
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019A4D078C534BE6174C7ADADE1C99CA7FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 04:02:11 +0000
Manifest this update: Tue 04 Nov 2025 04:02:11 +0000
Manifest next update: Wed 05 Nov 2025 04:02:11 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: f+JGH5mtrnjx3VNcbIrMinZs8Hhnv7A5FldEE881qZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:8c:53:4b:e6:17:4c:7a:da:de:1c:99:ca:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Nov 4 04:02:11 2025 GMT
Not After : Nov 5 04:02:11 2025 GMT
Subject: CN=b30ab602b45802c9ab3b588e13de7d4f579074e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:fa:9b:23:9d:7f:14:5c:70:d4:92:ba:30:
ed:e8:e2:9e:4c:13:4c:52:b8:c6:cc:8d:9f:c1:e3:
ef:77:1d:69:05:58:52:3a:9f:b0:ba:bf:5f:03:d0:
ca:3c:96:4e:d2:25:65:61:cb:32:75:c3:ce:b6:73:
d7:c3:db:17:4e:b6:82:e7:c2:ba:37:6e:4a:1d:d8:
50:57:7e:22:48:e5:1c:fb:39:27:d2:59:1e:39:91:
8f:18:f6:36:cb:7c:0f:fc:3c:12:f8:57:f9:4e:05:
13:5e:75:f6:97:27:be:13:01:d1:dc:23:59:8e:74:
a9:9e:a7:5a:66:e2:30:04:60:9f:95:73:97:1d:e5:
03:df:f9:97:2d:7a:9d:5b:96:e6:86:2c:56:33:00:
be:3f:43:b8:8a:45:ba:71:7a:6d:44:51:d8:45:93:
79:0a:60:e7:96:3c:bc:0d:ec:10:c3:08:f5:50:76:
d9:cc:d6:c5:24:9f:9e:b9:ce:77:a0:aa:9b:07:17:
ab:fe:f4:f5:c8:0e:57:b3:8a:68:9c:31:47:9b:48:
ec:d6:c3:c8:50:ac:b9:72:87:fc:27:c0:47:32:33:
ba:26:c3:27:8b:75:68:cc:08:81:2d:57:bd:53:76:
3b:3b:54:84:00:f6:d0:66:8e:90:40:03:8d:ca:1e:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0A:B6:02:B4:58:02:C9:AB:3B:58:8E:13:DE:7D:4F:57:90:74:E8
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8e:f2:a3:84:2d:7b:9e:db:1e:bd:ab:63:9f:f5:9b:28:85:
7c:23:b6:65:ed:f9:8b:23:de:a6:17:d1:91:38:a7:67:3d:21:
3f:59:8b:88:c7:63:34:f4:6e:91:2b:d9:a3:2b:da:15:cc:55:
8d:51:c5:c9:f4:66:a3:4a:4e:b1:cf:46:aa:34:30:3b:9f:be:
cf:f1:2c:f7:62:28:ba:08:50:45:7f:78:2e:3f:91:46:ff:46:
81:ef:10:c0:9a:00:a8:35:92:65:50:10:d6:8d:c8:de:e8:6c:
5f:34:ce:7c:05:a9:bb:34:15:7c:df:6e:80:25:5e:ed:46:b5:
32:42:dd:37:99:8c:61:bc:a5:3a:93:32:e3:6d:ae:6f:4c:86:
3f:79:d5:20:ef:a2:7e:a3:9b:b6:2b:89:e9:13:11:35:79:29:
8e:3d:25:fd:c0:38:4b:16:e1:ee:92:90:48:ba:ad:84:93:63:
26:7d:3f:74:dc:6b:71:88:98:64:71:ed:db:75:96:40:5b:54:
f7:f6:b6:04:92:7e:50:e6:4e:c1:78:56:2f:73:3a:9c:fb:8f:
02:00:b1:ac:3e:9b:3e:81:c0:ee:79:22:ad:1b:99:69:a5:5f:
ff:06:1f:ac:f0:6d:a3:92:7e:5b:d1:84:60:6f:42:b1:40:1c:
19:1d:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:22 2025 by rpki-client