Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: tVn/MiEu4xUH42Gnv7FpnY52y0ZDJNN+exSMF0R00rg=
Subject key identifier: 1B:21:31:54:0B:D2:1A:C3:F8:41:85:98:F3:14:F5:D8:BB:9E:8A:C6
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 019A541A8A3B53FD0C0F30D10FEB515F029E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 068F
Signing time: Wed 05 Nov 2025 13:00:16 +0000
Manifest this update: Wed 05 Nov 2025 13:00:16 +0000
Manifest next update: Thu 06 Nov 2025 13:00:16 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: miK07avhHQiw9urMZ/Tj3iWpz7zQevZCzg1Nl3rR+lY=)
2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:8a:3b:53:fd:0c:0f:30:d1:0f:eb:51:5f:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: Nov 5 13:00:16 2025 GMT
Not After : Nov 6 13:00:16 2025 GMT
Subject: CN=1b2131540bd21ac3f8418598f314f5d8bb9e8ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:80:e0:42:b3:59:6c:27:3a:0c:0f:49:41:
78:ac:c2:98:a2:c4:1c:81:90:db:d6:6f:cc:28:d3:
08:10:e2:fc:7e:53:e8:a2:8d:86:87:ed:2c:91:5a:
5a:fd:7e:06:c1:90:8f:53:f4:21:57:5d:17:9b:c6:
5b:38:88:a2:3b:3c:72:4b:c1:bc:34:bb:91:23:ff:
16:d6:7b:ee:99:0c:6a:d1:58:b9:b1:7b:24:fc:4e:
b9:dc:a1:51:ab:30:93:32:b9:de:9a:85:85:14:47:
e0:d2:70:38:af:8b:3a:05:0e:50:53:c0:af:be:7b:
81:e1:04:c5:0e:2e:6b:ca:0b:24:a0:a0:85:2d:00:
07:99:a9:e3:bb:69:f7:f6:d4:26:c5:66:6c:72:80:
ab:92:3f:a2:03:04:5d:a1:41:1d:0d:77:7e:ea:f9:
2b:73:42:64:f8:43:91:48:8e:46:d5:29:78:b1:e8:
07:a7:13:c9:30:36:bf:3a:5c:af:eb:17:69:39:2b:
c2:dd:90:c7:2f:04:b8:1b:bf:f5:e0:44:9d:d5:49:
59:6c:9c:0f:eb:60:db:ee:93:f6:0c:05:a5:d8:49:
4a:72:40:30:05:84:3b:d5:26:a5:60:17:93:99:bc:
7c:48:45:f0:c8:c8:7f:33:e8:cd:27:d5:4c:5e:0a:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:21:31:54:0B:D2:1A:C3:F8:41:85:98:F3:14:F5:D8:BB:9E:8A:C6
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f3:70:be:0d:18:6d:e5:89:ee:c2:86:f2:b8:63:ab:b8:c5:
5d:9e:2c:00:4e:ca:fd:77:cc:84:a0:d2:49:5b:83:d1:0e:73:
88:2c:c9:07:ea:12:15:38:ab:10:bd:20:2d:0c:66:ac:a7:28:
79:b6:3d:d8:63:f6:78:f6:c3:8b:ee:07:c6:b3:30:b9:d1:14:
3b:b0:ab:c3:2e:50:a4:45:eb:67:a5:31:5e:85:eb:62:10:c8:
56:7e:eb:ae:44:30:1a:56:15:e6:a9:2b:0a:0d:2b:fe:36:c5:
a9:bf:f5:23:bc:b2:5b:5c:8e:2a:ed:7b:b5:fe:c6:49:8f:39:
06:14:e8:d4:33:38:89:78:f6:a8:a6:19:b2:99:8b:9a:fb:64:
4a:9a:77:6a:28:72:c9:75:eb:ec:4e:03:fc:23:8d:fa:a5:2d:
ba:80:a6:ba:a5:04:2c:30:3a:ac:8b:57:3e:a4:17:ad:9b:56:
a0:ac:71:34:84:e0:f6:95:2b:1f:5c:ca:42:93:b8:c1:4f:2b:
e2:eb:32:18:01:f0:7f:32:92:ce:e8:29:3c:c7:4e:9d:f7:3b:
e5:26:21:33:92:12:76:86:78:52:db:be:c6:8e:e3:f2:86:0b:
80:a5:b7:fc:be:89:d5:d5:a4:2a:a4:9c:19:1f:d1:c2:3c:48:
5b:b0:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:37 2025 by rpki-client