Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: G44YS/MQpfVKBFwIsurfr/wTevDZSXP+pP/S8xIvOdM=
Subject key identifier: 12:39:75:42:9B:82:76:3A:73:08:A0:71:0D:26:EB:7F:32:C3:0C:95
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 0199C4C500069AF0A1EB2B397BBF4CB486EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 11E1
Signing time: Wed 08 Oct 2025 17:01:08 +0000
Manifest this update: Wed 08 Oct 2025 17:01:08 +0000
Manifest next update: Thu 09 Oct 2025 17:01:08 +0000
Files and hashes: 1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: 63+BSmAYd6NZjfMxW+huyHsrK2BuWWrDT8JoLbRtVR8=)
4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:00:06:9a:f0:a1:eb:2b:39:7b:bf:4c:b4:86:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Oct 8 17:01:08 2025 GMT
Not After : Oct 9 17:01:08 2025 GMT
Subject: CN=123975429b82763a7308a0710d26eb7f32c30c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:0a:b1:a8:09:0a:34:ec:cd:35:65:99:a7:
87:28:64:61:66:58:a1:3d:2c:0d:0e:74:8e:b8:ce:
ff:cf:2b:d3:ff:41:96:e4:2a:60:e9:bb:3c:57:e6:
dc:ba:cc:68:5a:08:aa:5d:2f:15:86:f4:c9:e6:3c:
a5:c8:8d:1b:b6:07:b5:e9:d4:c1:4e:08:90:7e:38:
a1:87:04:25:84:42:ad:61:03:73:40:fc:dd:56:4d:
ef:c1:17:29:1e:11:8d:c9:5f:30:d3:a1:19:82:69:
75:70:f4:1a:84:46:aa:1f:a1:99:55:17:07:1e:41:
9d:3d:11:71:f6:b2:89:4b:54:c6:06:18:e9:de:9a:
0e:9d:4e:dc:bc:42:3c:54:23:f5:96:45:e8:95:cc:
94:3f:fd:11:84:d2:09:6f:2d:8b:29:88:15:26:74:
7b:b5:99:b6:a0:17:3b:7e:da:b8:3f:cc:18:de:d3:
76:59:e4:0b:89:d0:eb:e7:b2:68:7b:65:73:04:db:
17:ac:0e:a7:95:bc:28:ee:71:e0:44:48:5e:13:b2:
0d:09:62:f4:fd:c0:a0:21:a9:5f:35:48:bc:70:92:
48:4c:02:ca:66:1f:c8:2a:0b:49:e9:c1:58:27:25:
00:3e:6c:91:38:d2:2f:a5:e0:0a:8a:70:a3:58:60:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:39:75:42:9B:82:76:3A:73:08:A0:71:0D:26:EB:7F:32:C3:0C:95
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:7e:46:45:f9:09:16:a9:73:f9:12:5e:b5:63:f1:52:24:
45:b0:ea:cc:5c:7f:eb:96:d0:45:2e:0d:b3:b9:ad:76:5b:87:
4d:bc:14:fc:9d:6f:77:3c:86:ac:be:7b:43:8a:cf:cb:00:cd:
47:41:aa:b1:a2:a9:7e:74:14:53:cd:54:d1:44:27:25:36:ac:
94:33:b9:ea:25:85:e1:af:de:7c:cc:c5:f1:6d:35:b0:6f:4d:
7b:9d:c2:be:ff:0a:84:61:d3:b3:ad:3f:a1:e0:b8:3f:d5:d4:
5a:ee:3e:dc:e7:88:a1:ef:cf:66:c5:ba:c4:5d:1e:eb:2e:3f:
64:7a:c8:85:24:06:66:35:49:6a:bc:51:e0:54:98:62:be:e9:
7d:31:55:86:e0:d1:58:2e:41:f7:ab:0d:e9:df:52:be:85:6b:
1a:9f:11:bc:d4:a1:b7:60:42:00:7b:e3:35:21:8d:81:7f:b5:
ea:04:e4:fb:d0:53:86:8e:a0:9b:0e:90:d8:52:4f:ba:2d:61:
5f:94:3c:c4:94:fb:3e:a1:7b:1d:a2:ce:f0:e7:f5:b0:e8:d6:
c1:1a:f1:20:49:6e:d1:94:81:74:49:58:1b:09:d6:55:69:f2:
f7:4c:ae:67:8a:77:1b:d4:91:72:7e:65:fd:b4:8c:7a:f6:ea:
87:8f:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:33:02 2025 by rpki-client