Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: atPjnER4eDtTQRk1HdEH3r5XeeK6Ho2eMpc4jLde6Sc=
Subject key identifier: 0C:70:9E:14:DF:2D:CE:9E:76:49:A7:82:66:1F:C1:8B:3D:39:89:90
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 019A4F62D0A2800C21255A2B9CA68D124DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: /t4su3D8j2ymfydPS1aBIS/Lo9zp6K97Wfo6fYb1UwI=)
2: vf_PL7Z26am-bUWHqusGVLE57ns.roa (hash: lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d0:a2:80:0c:21:25:5a:2b:9c:a6:8d:12:4d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=0c709e14df2dce9e7649a782661fc18b3d398990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:9f:5d:fd:a8:07:20:cd:b2:86:ae:c2:4c:
ed:29:d9:10:76:33:3f:44:be:0a:ee:5c:4e:cf:e6:
d7:64:be:bf:41:ec:e7:6e:68:41:dc:ae:4a:63:08:
e1:54:55:e0:9b:bb:78:97:a9:fe:f8:98:7b:9c:52:
ce:c7:2f:c9:f2:51:f9:28:d4:b5:9c:d0:77:6e:18:
b3:0c:c9:37:27:df:96:0b:ed:fe:cb:a3:3e:4c:a5:
65:78:64:7c:dc:cb:77:b7:ac:38:b1:de:9f:78:f9:
99:7b:c2:43:a2:be:55:20:1e:4e:81:69:8a:33:28:
b1:13:39:93:5f:77:db:b9:57:49:44:21:2c:e2:d2:
e7:7b:1a:75:1a:7e:eb:7a:b0:08:43:4c:a9:7b:6b:
0a:15:a0:7c:b2:e4:d2:b5:ce:d4:cd:11:80:b8:ed:
c2:29:89:19:b3:ac:11:db:be:a4:c2:2e:86:67:57:
74:f2:af:a7:18:3e:cc:5c:c2:d4:7e:7b:57:e2:71:
ac:dc:0f:52:6b:32:f1:f4:49:a5:20:9d:d8:be:2d:
df:59:b6:b9:aa:cd:4e:65:9a:e6:e9:9d:41:f0:32:
80:44:b3:80:a8:e8:ee:ae:13:19:48:c6:b7:8f:f7:
4d:e4:12:26:03:c0:76:ff:e8:97:a2:eb:76:6d:d4:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:9E:14:DF:2D:CE:9E:76:49:A7:82:66:1F:C1:8B:3D:39:89:90
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:65:69:e5:b6:dc:ac:38:ce:b4:ba:22:1e:56:50:d0:7d:5f:
09:a8:70:1a:93:f4:c8:d5:80:47:65:af:03:a4:9b:04:1f:85:
d7:fc:32:b7:d4:35:35:1a:44:f1:ab:28:80:66:3b:46:c6:e8:
c1:47:17:98:7d:ee:83:17:e4:63:d8:79:49:10:52:8b:e0:b5:
41:2d:e8:55:d3:95:c5:6c:81:33:11:b3:6f:f4:f7:3c:c8:4e:
15:ef:0d:26:ee:d5:35:2c:07:95:6b:44:ba:fb:20:92:38:af:
31:79:83:e0:42:ce:42:e8:7a:91:4a:88:0a:2d:ed:19:74:92:
aa:f1:3b:cb:95:dd:72:99:3c:95:91:00:ad:29:ad:2e:48:87:
96:2f:e0:8d:7f:66:eb:6e:a6:b3:83:3f:50:0d:9a:60:e4:1b:
ee:d8:e8:8f:63:08:ff:47:c3:11:96:d8:39:4e:9f:b5:4a:a4:
ac:c6:e3:23:0b:a2:4f:51:ce:0f:42:9e:2d:42:0c:2b:13:75:
ea:e3:30:6a:61:60:2e:d0:53:f2:2c:54:16:8f:4b:38:51:73:
e9:6e:8f:eb:17:ee:91:ad:ed:49:32:6a:8f:67:10:da:cc:e9:
a5:6f:5c:ef:4d:36:e4:4e:63:8a:ec:3a:f1:ee:83:fe:fb:98:
79:27:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:19 2025 by rpki-client