Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: VptnRPr0Pme52eSakOG9FdfwINMMhd4Pkrw/kGF4YcM=
Subject key identifier: C9:BF:D0:80:CB:31:70:78:25:0B:45:B9:46:52:6C:A9:28:69:E2:C0
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 019A4EF43889D5BFC310852508CE13FE9A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 13A2
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: sxUi//YdKKSaWEt75PylW1nd+EQ1zWiuB3QCbhnddCc=)
2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:38:89:d5:bf:c3:10:85:25:08:ce:13:fe:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=c9bfd080cb317078250b45b946526ca92869e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:63:9f:cd:17:56:ae:34:cc:74:09:01:8b:
0f:67:72:12:90:36:a1:5e:1c:62:20:03:f2:d5:67:
d4:d0:53:19:05:3d:d1:70:35:48:37:84:35:5c:c7:
1f:cc:83:13:bb:44:a2:c9:46:af:7f:bb:72:78:80:
63:d9:99:ef:48:cd:fb:35:80:a6:05:db:6d:d5:bc:
35:90:b0:8b:36:b7:eb:f5:02:7c:8a:d6:ca:34:69:
1f:cd:06:d1:2a:48:ef:ac:5e:a8:18:58:10:b5:6a:
19:51:c1:4a:9c:41:0c:4c:ae:e5:4c:c8:c2:5b:85:
30:0e:2b:28:06:1c:6f:d7:b0:bb:e5:b2:d7:22:9d:
73:d2:e0:62:3d:7d:da:f8:68:c0:02:ff:48:6d:49:
d9:b8:5a:5c:42:e0:be:0a:4b:bd:52:7e:b2:f7:e7:
cf:d7:cd:72:aa:a6:5c:4c:63:28:86:d1:47:8f:11:
20:7f:31:1d:06:22:33:ca:85:0c:91:15:e1:1c:7b:
ca:c9:00:13:88:13:a5:c0:38:98:19:a9:56:3a:e2:
a0:3f:27:d0:b6:80:f8:7a:8d:d5:3e:ea:2a:71:5f:
ea:dc:e0:81:56:41:ca:f5:8f:42:d8:cf:06:26:33:
d7:a2:52:a3:c2:01:45:60:6e:9b:f1:91:83:bf:f7:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BF:D0:80:CB:31:70:78:25:0B:45:B9:46:52:6C:A9:28:69:E2:C0
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:31:d0:d9:8c:69:31:34:df:7e:66:1b:48:62:ca:59:c2:
51:30:21:86:17:bf:18:10:3d:07:9b:87:ce:28:f6:49:dd:a5:
ea:e0:9b:0a:38:78:4d:fc:b3:b8:e8:78:62:30:eb:0a:a1:ff:
24:76:d1:8a:23:c3:90:f1:8b:62:4b:b8:d3:4d:68:98:3b:01:
5c:de:67:57:0c:77:a3:a9:f5:1d:7d:0d:a6:68:09:52:7f:05:
25:3e:7f:53:39:66:b9:a8:f3:54:40:66:7c:b9:98:90:bc:fb:
c5:ae:d4:48:fe:9f:31:eb:9f:27:27:45:8a:ca:68:98:5d:42:
b9:be:f0:8a:e9:23:64:78:40:4e:1e:48:f8:33:44:d9:60:6a:
6b:84:44:df:0d:08:98:70:34:5e:c0:ac:e2:c5:7c:b7:07:1e:
ae:bb:c5:1b:43:26:b4:85:28:a1:ab:c2:6b:9c:fe:ff:b7:8a:
42:fa:0c:28:30:8f:b2:cb:ec:b3:1c:8d:9e:20:4d:b0:26:01:
b4:6c:87:c0:51:5a:b6:8b:65:3a:c5:c6:f3:8f:0d:e4:ca:d4:
d2:c6:5f:b1:9d:41:e2:b2:47:cc:ab:f6:3c:72:02:f9:79:ae:
4c:d4:eb:2d:ec:90:32:2b:57:40:52:f9:88:34:b7:d6:18:55:
38:77:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:41 2025 by rpki-client