Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: /5WmXpoeEfjNmglZS5cM75N4MOnPOOtBf3i0xjzNBhY=
Subject key identifier: AC:AD:66:44:83:12:3B:26:0E:EF:B1:A4:79:83:56:23:A8:60:41:31
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019A4E18DB8F96AF8D4985952E7D09506348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 068D
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: Musc5NejswIWvwgonXRPoArhv7Yy2n0dC8DQAjp89dw=)
2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:db:8f:96:af:8d:49:85:95:2e:7d:09:50:63:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=acad664483123b260eefb1a479835623a8604131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:d2:3e:fe:a4:11:24:b5:1b:62:f9:7a:78:
39:7f:a1:ef:65:22:e8:be:ba:47:46:3f:ec:06:20:
e9:03:de:ae:b1:56:28:2b:35:30:bb:73:65:d4:e6:
76:c9:86:57:53:85:54:f8:55:40:41:14:37:ca:0e:
d9:75:23:a2:f8:b1:19:05:25:a3:e4:fa:cd:c7:ce:
ee:a5:a4:5e:81:7e:a5:c3:ba:45:a4:a3:4c:fe:65:
93:f7:2c:e5:ff:bd:92:47:58:0a:c0:af:07:5e:14:
54:80:2f:b8:1a:b7:90:7a:4a:6f:47:b2:dd:e4:f1:
3c:6c:47:e5:14:84:cb:64:23:a8:d6:d9:d8:bd:19:
1b:6a:d7:57:fb:92:a7:f0:6f:f6:c6:c0:4a:e2:f1:
97:0c:ce:9d:11:20:a1:19:b4:44:b3:18:b8:a9:da:
0a:a8:2f:1a:83:8f:34:75:10:c2:9f:3b:53:8b:7b:
75:27:9e:80:4f:c3:57:df:d0:9f:85:62:f1:a2:e6:
55:aa:24:d5:63:59:c7:e6:8d:bb:ee:13:67:41:53:
29:ec:90:6e:7d:4d:d0:b0:77:3a:25:53:a8:99:55:
ac:ca:e9:63:0b:f3:b9:59:2c:58:44:5a:4d:56:24:
1e:a7:3d:22:74:d9:06:12:de:be:2b:c5:95:0e:df:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:66:44:83:12:3B:26:0E:EF:B1:A4:79:83:56:23:A8:60:41:31
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:5a:49:95:06:f5:dc:59:bc:1d:5c:fe:75:9d:87:7c:d7:
3d:f7:c5:eb:f8:5b:e6:fc:0f:12:ae:b4:ea:5c:2f:f3:fa:cc:
ab:82:4e:1a:26:4d:c5:0d:de:a8:e1:f0:69:a2:e3:01:fc:da:
0d:b8:60:e2:1a:0d:33:bc:5e:15:b2:83:18:c7:48:e3:50:a8:
a6:f5:2c:1b:67:5a:49:5d:cd:ac:44:5c:a9:ee:8e:82:5c:e8:
5b:49:f0:60:d4:34:97:70:53:bd:ae:4a:49:f2:07:c8:a0:23:
ba:b7:4b:e3:ed:fd:74:de:25:b8:2d:b1:04:51:26:73:b2:cf:
cb:98:4d:ee:fb:5c:1a:4b:67:4b:b1:73:d9:ff:31:15:e6:01:
e7:cd:2c:dd:d2:57:82:3e:28:04:94:63:74:e0:c6:03:65:62:
19:1f:b3:f3:cf:59:bb:42:82:2e:d1:da:f6:0f:b0:f5:8f:bc:
b2:c5:44:01:aa:c1:cb:85:67:32:53:26:b0:8d:87:2d:70:54:
e9:72:b0:a5:b8:08:c1:77:a2:e2:0b:64:31:bb:30:5a:64:93:
3c:73:91:f7:3c:08:32:a0:3a:7c:a8:ff:9c:13:d0:67:c2:06:
e4:d6:87:b3:56:45:2e:ae:e7:6c:7b:7d:01:8d:b6:aa:9a:5b:
24:fc:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:33 2025 by rpki-client