Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: dmEN6dAennkebQkiu+KeVeLHJarIxoMI8z4+FVrcB2Y=
Subject key identifier: AF:DD:D3:37:68:22:46:8E:6C:E8:DA:C2:0F:8D:3B:D5:3E:46:FE:4C
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019A4F629453822A9A8D9227AC044D211BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 080B
Signing time: Tue 04 Nov 2025 15:00:51 +0000
Manifest this update: Tue 04 Nov 2025 15:00:51 +0000
Manifest next update: Wed 05 Nov 2025 15:00:51 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: jzutQPMmAt2iBJK+fRT3a6gXShgviuHB/Fw2gRizCmE=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:94:53:82:2a:9a:8d:92:27:ac:04:4d:21:1b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Nov 4 15:00:51 2025 GMT
Not After : Nov 5 15:00:51 2025 GMT
Subject: CN=afddd3376822468e6ce8dac20f8d3bd53e46fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:5d:4d:58:f5:d6:9b:17:e9:b6:f0:15:f6:
98:06:46:22:a7:7b:a5:75:a5:a2:5a:aa:ed:0f:a5:
79:82:38:89:24:35:03:73:d3:32:6f:59:57:e6:7f:
c6:83:64:42:7a:9f:6c:65:d8:75:53:51:c7:65:38:
9c:67:9a:d2:1d:da:e5:bd:c4:e7:cb:e6:b1:ec:5a:
7f:46:a4:a8:be:87:bd:cd:cb:fe:1b:20:c1:9f:ae:
55:a6:85:1f:db:f6:02:89:6b:ba:60:14:b5:99:b5:
9b:7a:09:6a:d9:d0:a8:e9:02:c8:37:2c:af:af:30:
06:cb:a5:a3:a5:50:dc:c8:6b:cc:51:87:d6:6c:2e:
fe:cd:7f:72:4e:78:1c:0d:c6:1a:66:60:35:cc:00:
4a:c5:56:0d:82:30:e3:58:ba:36:e4:dc:9c:53:7c:
a7:a7:d2:b6:dd:a8:ca:11:e7:e6:a3:89:b9:13:04:
25:5d:d1:30:f0:f6:ac:2e:db:d2:da:03:4e:f3:51:
9e:6b:0b:e9:f0:1b:89:70:fb:47:33:07:62:16:41:
17:45:22:9d:06:e2:f9:33:1f:90:d2:3e:10:32:e0:
a8:c4:60:16:94:9f:6d:8f:d1:1e:5c:82:b5:1f:b6:
42:10:54:44:d1:93:29:63:44:1e:18:04:cd:d3:73:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:D3:37:68:22:46:8E:6C:E8:DA:C2:0F:8D:3B:D5:3E:46:FE:4C
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:be:dc:db:b3:4e:ae:de:0b:8e:00:24:d5:c8:84:a3:e5:b8:
16:0f:ee:d4:83:1a:8c:00:2b:03:a4:b1:e2:cf:d8:80:88:88:
e8:36:77:f6:87:84:cb:09:72:78:0f:77:55:79:08:9f:68:08:
0c:99:fe:37:4f:76:0f:f0:52:ff:f9:de:96:c5:6d:dd:d2:74:
d4:0c:98:ea:a8:ac:a3:9d:fb:80:0a:ef:37:83:42:77:6d:e6:
2d:e9:0d:c0:a4:92:ee:4f:7f:9b:0a:95:7e:57:08:45:8a:81:
76:32:6c:57:0b:a9:76:97:21:e7:ea:54:cf:8b:6a:a5:f0:bb:
4d:11:30:3c:98:15:d3:a6:f0:a7:a6:b5:c6:70:15:1c:a2:42:
c6:01:6c:85:1c:2e:29:32:76:a0:00:b4:56:a6:bf:00:5d:93:
57:b9:25:77:13:22:cc:3d:a8:d2:58:8f:a8:f7:ac:8d:33:32:
33:9d:c9:15:1b:c8:89:7e:06:19:6c:c1:20:7f:35:5e:c0:2c:
40:e9:b6:3d:65:fa:d3:ef:c5:5e:e3:ac:ff:cd:11:0d:87:b0:
61:94:df:f5:3b:48:e1:1e:3a:67:07:dd:d1:e9:68:c0:98:52:
e4:86:37:95:7f:e4:c6:d3:f3:49:b2:be:94:6e:9d:ff:d6:9b:
ff:2a:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:49 2025 by rpki-client