Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: NH0RL+kBLzmOoqPWew6yZ/uk0mAGpeSAXqCQAWosmTE=
Subject key identifier: F9:BE:0C:61:F1:A6:DB:53:6D:48:C6:89:B2:4B:49:D8:1B:AE:D2:44
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 019A4DE174AA5B8501949AD86CCCE0EB5B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 070D
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: 3FP2S84s6ibI1cRhR8iwSUWD+znSQk7LAygNWyHSsFA=)
2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:74:aa:5b:85:01:94:9a:d8:6c:cc:e0:eb:5b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=f9be0c61f1a6db536d48c689b24b49d81baed244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:14:ba:4c:08:3d:13:0d:af:9b:f8:24:aa:
75:9f:1d:df:3f:9c:d1:01:4b:0d:4a:24:fa:ad:b4:
55:c9:f7:f4:5c:2b:7c:ab:11:cb:57:96:86:ee:af:
3c:7a:05:90:23:f9:a9:f0:e4:f3:f8:22:e0:97:9c:
7d:6a:49:ec:c5:1b:cf:5b:9d:d3:bf:49:4a:8c:ff:
b3:c8:44:d8:9a:13:62:17:cb:a0:b0:d4:47:5c:02:
90:44:4f:fc:65:80:b8:b5:44:49:25:84:c5:82:5d:
e4:7b:07:46:a0:18:47:0b:88:91:d6:dc:5a:76:cd:
68:06:f0:c6:4b:34:08:34:54:f2:1b:65:ba:b5:e3:
38:be:45:45:57:10:ab:18:58:43:ad:1e:87:74:a0:
5d:3e:8f:72:af:07:4e:eb:12:3c:c1:04:3f:2c:32:
ad:ad:cc:22:82:56:f2:05:e4:54:4d:c4:2f:df:09:
37:28:fe:d4:2f:ed:df:68:08:9d:22:e4:93:3e:2b:
66:00:d7:db:77:49:52:43:aa:22:ee:52:5c:11:a9:
9f:44:10:1c:89:94:6c:5e:85:89:1f:b9:f6:c7:88:
27:f9:8e:e2:4b:15:3c:f7:85:71:f7:75:91:88:d8:
1d:6d:1b:f7:81:73:79:d6:a0:08:a9:03:29:49:63:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BE:0C:61:F1:A6:DB:53:6D:48:C6:89:B2:4B:49:D8:1B:AE:D2:44
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f4:1e:7b:8a:e9:c7:c3:91:06:24:86:18:45:c7:75:de:e1:
9d:8f:b3:b0:b3:72:0f:51:e1:20:d8:bc:b1:75:1c:8d:c3:96:
54:6c:39:ac:7a:77:3e:82:a2:11:8e:2a:91:44:22:db:09:ef:
a8:a7:01:18:c7:ee:f7:99:5e:57:51:1c:60:fd:09:49:dc:39:
ed:6a:40:fb:c1:4b:e9:e3:f4:a1:1c:38:ff:29:65:12:f8:1c:
ee:83:58:7b:58:60:a9:7b:62:58:9f:d5:30:cc:51:8e:f6:97:
98:88:9e:48:c4:8e:0f:fb:13:29:2c:68:1d:56:4d:ce:e5:07:
39:13:50:5a:8e:5d:9a:5c:28:04:f1:54:03:d3:c6:b6:5b:c2:
50:8b:a8:04:88:b9:2a:92:11:c6:84:6b:c4:42:03:3a:3b:1c:
a3:d0:f9:5e:fa:6c:82:e9:6f:51:2a:2b:f3:fc:0f:68:f7:44:
42:15:d8:01:cf:5b:1d:7a:1c:88:eb:6e:45:81:01:ca:df:57:
bb:b3:12:5d:e2:73:ea:6d:fb:c0:9b:40:3a:bf:c9:df:a1:90:
92:e5:e8:e1:78:e7:34:c4:d5:a4:b2:55:e8:3e:e3:f6:e5:1d:
8c:15:af:65:a0:0b:07:b3:ca:33:db:ba:19:7b:d9:53:1b:0c:
ab:1d:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:55 2025 by rpki-client