Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: hjxf67jS+TG3oqrI/bCRlFMinDOsrImQGi1ePD2tjEg=
Subject key identifier: C0:8C:E5:AD:D4:96:FF:56:2A:C9:A4:4B:96:8D:29:9D:A1:0A:6B:09
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 019A4EF479ADD1EFD7DF4DE82CA9F164C130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 0949
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: uC5aYnOPe/sk5UWjZ0Kf5j6Jpy7GKoZNh7l/alF9RyM=)
2: nTEco9mT1eULi7_9dIxqABgskB8.roa (hash: yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:79:ad:d1:ef:d7:df:4d:e8:2c:a9:f1:64:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=c08ce5add496ff562ac9a44b968d299da10a6b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:dd:61:cd:72:49:78:49:3f:8b:84:45:11:
d2:8e:78:53:9c:6a:c8:b2:1f:42:2c:80:d3:c1:b5:
75:74:85:05:de:7c:de:55:d1:d9:1d:c0:4e:0a:df:
81:ff:c6:5e:bd:90:38:ab:f1:5f:86:15:f3:24:ef:
c9:37:1b:87:d7:92:51:c1:69:c7:d0:c3:cb:89:2b:
b9:c9:2f:18:d9:49:77:19:ee:0c:f7:99:1b:fd:a0:
20:96:6d:3f:ff:d7:04:fe:1a:5e:8d:20:51:40:51:
59:36:0d:2a:63:37:b2:66:7c:30:4f:ed:cf:e3:1a:
51:75:bf:e0:81:e3:54:72:b7:b9:0b:a8:22:a0:63:
6d:f6:ef:14:9c:29:8b:1e:6d:89:65:f6:ac:7e:a3:
e6:9f:ec:1e:9e:e4:f8:b5:50:3f:69:9f:25:42:15:
fe:13:85:59:dd:6d:3d:f5:34:20:6b:ff:ac:59:90:
2d:c9:19:93:29:06:9f:d0:9b:84:bf:ee:59:33:01:
4b:a2:3c:0f:8b:5d:19:0a:f9:fa:f5:12:db:28:b7:
0b:0e:28:fc:32:27:ee:25:ab:2e:55:87:4f:b6:61:
4f:d8:ef:14:d3:1f:7e:42:0a:92:97:5d:e9:a9:7d:
bf:e3:31:9e:70:4b:3c:a3:1f:0d:ab:e6:55:03:22:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:E5:AD:D4:96:FF:56:2A:C9:A4:4B:96:8D:29:9D:A1:0A:6B:09
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fd:5b:02:f9:d4:1f:d3:2c:ed:51:34:ca:4c:fd:02:51:e8:
15:e5:69:bf:93:d4:ad:65:54:1c:db:62:77:70:67:88:ab:00:
da:ba:eb:5f:1a:65:b4:12:d4:f3:fd:92:ea:52:2f:79:71:3b:
c7:c7:29:2a:98:1f:5c:be:1a:b3:39:f4:72:e0:b5:b7:72:52:
34:7a:f5:87:71:03:d7:70:22:e3:74:50:75:0d:16:fb:e8:be:
6a:f1:03:05:25:30:53:ee:7b:64:a0:f4:9a:77:43:f0:45:b3:
3d:d8:1a:de:f2:71:ca:2a:bd:8e:8a:a4:24:43:09:9a:49:23:
76:75:8e:4e:dc:eb:b6:98:fa:14:26:64:50:1d:fd:15:3a:d5:
2c:80:25:a8:4b:0b:95:6b:62:73:70:86:a5:1d:92:0b:43:8d:
77:cd:af:c4:0b:68:77:9f:cb:8b:cc:f9:aa:3b:c4:ba:d0:37:
d4:3f:84:32:46:81:9b:39:82:b1:57:be:09:e3:7c:e9:3e:fa:
b9:ab:4e:0c:13:09:57:74:5e:eb:23:1c:ec:01:5b:e2:dc:e9:
a8:10:a7:3a:1d:73:2d:f6:dd:61:48:70:31:6f:c3:7e:62:87:
17:9e:49:d7:74:c5:22:f2:fc:19:84:3d:a7:bf:7f:cf:58:84:
56:ec:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:58 2025 by rpki-client