Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: Lxhv4b2Ljd1BTD9STm7E3dzjsJNCW2PQuNnkFOakJ+4=
Subject key identifier: 8C:71:F3:A5:9F:F1:8E:4D:52:CA:D2:DB:E0:D6:E9:6E:85:36:19:85
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 019A53E3B3135FCACD60575E1C33D69F8B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: 02CA
Signing time: Wed 05 Nov 2025 12:00:22 +0000
Manifest this update: Wed 05 Nov 2025 12:00:22 +0000
Manifest next update: Thu 06 Nov 2025 12:00:22 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: tGBpPz7MgNtWXsOqkW9f4Lnyzv7XRkgvLStk+pf36WE=)
2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:b3:13:5f:ca:cd:60:57:5e:1c:33:d6:9f:8b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: Nov 5 12:00:22 2025 GMT
Not After : Nov 6 12:00:22 2025 GMT
Subject: CN=8c71f3a59ff18e4d52cad2dbe0d6e96e85361985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ec:c5:78:a4:8d:74:e4:b0:24:64:59:57:81:
df:3d:11:cb:41:48:51:3a:31:e4:25:61:7c:a9:4c:
34:fa:1f:b4:12:30:f2:86:f3:21:78:7d:62:d9:e8:
a1:1a:0b:04:bf:32:f4:28:f0:0b:ef:08:4d:e3:92:
99:0b:41:fb:0d:c2:cd:bc:cd:4a:d2:a4:68:93:66:
86:71:81:e8:b5:f7:52:45:0b:f6:e4:5b:72:54:e7:
71:e9:a9:a6:d0:85:67:65:e7:0c:e2:e6:b3:60:df:
f9:c5:12:d6:ff:7b:e1:0b:fd:77:df:91:a1:84:6e:
65:16:72:90:17:06:27:ea:9d:65:0d:fd:9c:09:e2:
91:71:00:97:90:ac:3e:05:13:c1:8d:72:77:71:9d:
a9:10:93:3a:e2:81:99:45:89:46:27:37:b3:eb:f3:
65:bb:be:15:98:4d:16:2b:24:7c:87:93:e0:0b:14:
4f:67:e4:83:78:86:96:2b:55:c1:61:e8:ae:b6:73:
f5:74:48:88:20:46:fc:35:8a:89:bf:7e:8b:4b:57:
55:b9:dc:69:17:8e:d5:a3:69:ae:d7:bd:ca:a6:05:
ce:46:cc:0a:72:8e:6f:f5:7a:2b:3a:70:13:ee:6f:
f5:ed:bb:f2:21:16:2c:82:c9:a0:3f:83:95:38:6a:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:F3:A5:9F:F1:8E:4D:52:CA:D2:DB:E0:D6:E9:6E:85:36:19:85
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:97:9a:ee:e7:d6:a9:e5:0d:76:7f:01:23:f3:6d:38:3c:73:
c0:3d:db:69:af:f5:12:a5:59:eb:82:f0:e7:dc:f9:fe:60:7b:
c2:85:6b:83:f5:aa:ec:25:9f:4a:b8:a4:fe:66:9c:1c:10:70:
0e:f0:26:08:7a:32:1d:59:fe:01:2c:2e:81:73:0b:5a:f6:3b:
3c:75:12:83:70:b3:a6:bf:4b:66:c5:3c:45:11:2b:f0:da:9e:
03:55:49:84:4e:9e:e1:d4:83:95:66:25:0e:e1:3b:17:0f:ae:
50:84:90:7b:e9:58:5f:c7:46:fd:53:04:49:e6:bb:2b:5a:c4:
da:fe:d2:4f:bf:08:36:51:05:8f:1d:53:e2:3a:ff:2f:cf:fb:
51:94:95:f2:24:a8:c3:f2:0c:27:89:27:0d:a3:40:fb:e1:eb:
58:fa:64:fe:74:a3:64:eb:3e:58:70:4d:61:98:63:8b:05:6d:
63:8f:80:89:c4:83:5d:9c:16:fd:ea:3a:23:1e:cf:2c:16:01:
40:23:ac:a6:0e:5a:f3:34:3d:09:02:23:54:47:99:c9:a1:9b:
a8:f9:b5:51:84:fd:d0:48:51:4c:a8:27:a1:bf:42:d5:bf:17:
a9:5e:f9:54:d9:c9:d3:6b:27:cd:ff:1c:c1:a5:2c:d5:31:da:
05:dd:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:17 2025 by rpki-client