Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: quc5oGrM1KnmlpsvSRXzA8tjkX+l9eKX+171qow0vho=
Subject key identifier: 50:F9:C1:54:D1:57:B6:49:27:AD:89:D6:04:69:23:BA:4B:F9:02:99
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 019A4DE21A0DA601B13C931EA1D64B1D2A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: PHrF+rb6z4Xwml/Jiw1KGp2K1OgSkvK1NnU9dWxNJtM=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1a:0d:a6:01:b1:3c:93:1e:a1:d6:4b:1d:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=50f9c154d157b64927ad89d6046923ba4bf90299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:f1:5b:e2:31:71:76:81:16:8b:bb:63:4a:
a2:49:5b:4d:c2:c0:9c:04:ff:50:6d:76:ae:3e:24:
06:a0:da:66:23:cc:ca:f8:96:d7:e1:6f:e4:23:95:
28:11:cf:3b:9d:cb:75:99:60:96:19:63:87:6f:7d:
22:2e:ff:f9:b7:a9:d0:bf:d6:4d:79:9e:34:25:1d:
76:ce:4f:b7:9e:70:b0:3c:d1:ec:38:3a:74:4e:15:
a2:47:6b:5c:04:ba:f4:5c:d0:e5:ff:f1:1b:16:06:
fb:52:e2:13:28:18:c9:d9:36:54:e2:6e:f3:f1:16:
13:58:65:77:d4:ef:f7:d4:a1:d6:17:59:24:7f:32:
05:fc:9f:f7:43:53:ab:b8:13:3f:65:7f:04:63:a4:
0d:09:56:e1:91:72:46:04:fe:7e:04:f0:7c:c0:cb:
e9:ac:99:42:04:29:f7:cb:b8:4b:74:7b:8e:6a:17:
02:6f:6c:2e:e9:90:8a:b6:a9:c4:7e:94:f3:ed:7d:
50:bd:0a:47:68:de:47:ce:5e:d2:0f:b6:15:83:9b:
05:f2:18:c0:1f:ed:7e:ff:cd:50:44:1f:99:1e:75:
62:6b:e4:26:d7:b9:a2:6b:29:65:5e:f5:cc:2c:1b:
02:e8:49:66:f5:fd:fb:90:b1:af:fc:cb:1b:5f:56:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:C1:54:D1:57:B6:49:27:AD:89:D6:04:69:23:BA:4B:F9:02:99
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ec:4f:43:a4:5c:55:5a:53:4e:5e:38:73:17:ff:75:39:f6:
d9:b9:0f:16:8f:f8:33:e7:f6:51:58:b1:28:8c:69:e6:1e:af:
5a:ec:0b:69:d8:0f:c9:46:19:f2:70:14:0c:4a:17:42:8d:10:
b0:2b:1e:7b:b8:07:41:ca:0b:5a:e9:f3:cf:2d:bf:12:90:94:
dc:e2:b4:a5:ea:ef:33:70:7d:ab:82:3d:71:2c:51:7c:78:d3:
8b:39:a7:53:29:50:59:b9:be:e8:8e:db:ab:2c:5b:b6:d9:4d:
4d:46:ef:8d:86:76:fc:09:67:53:aa:c0:0e:3d:91:bc:46:9a:
8b:84:22:03:e0:a2:64:8f:15:b2:b6:7a:85:e7:1c:fd:f1:b1:
db:98:2f:b7:3a:77:c1:a5:ab:07:6b:31:43:c6:54:98:44:05:
93:72:2c:65:40:2a:4a:b3:07:19:5e:1f:58:69:45:02:e7:f0:
0a:53:8e:5b:a3:2b:51:66:87:4d:10:d3:91:a1:f2:db:c7:52:
7b:aa:26:fb:e8:49:7c:e6:36:fb:10:01:33:76:52:03:ae:c3:
e8:d2:6f:4e:94:99:50:8d:5c:f6:62:23:ac:95:95:6e:5b:77:
18:ed:c2:6f:bc:0a:f1:cc:cd:44:1a:b7:a2:6f:f8:2f:ae:58:
6e:63:a2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:43 2025 by rpki-client