Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: 3wnO/w5GmYn8S6q8hQ3IYzI+6swP1fEtTFf13Vku5ec=
Subject key identifier: 6B:DC:36:32:35:E3:34:C6:79:FA:98:FC:83:9F:06:2C:AB:36:B0:AB
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019A232E2477CAE2C5987E6E85CE26B12DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 01A4
Signing time: Mon 27 Oct 2025 01:00:17 +0000
Manifest this update: Mon 27 Oct 2025 01:00:17 +0000
Manifest next update: Tue 28 Oct 2025 01:00:17 +0000
Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: rDglkQP99cN+q9iPUWmOlMGsQaqMIK8M6lLN5C0XhxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:24:77:ca:e2:c5:98:7e:6e:85:ce:26:b1:2d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Oct 27 01:00:17 2025 GMT
Not After : Oct 28 01:00:17 2025 GMT
Subject: CN=6bdc363235e334c679fa98fc839f062cab36b0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:f6:5d:f0:99:d7:79:09:e0:bb:82:5f:93:
24:44:11:6b:20:d4:11:63:06:c7:b1:e5:72:d6:23:
99:d9:5d:21:97:82:35:0d:e0:f3:10:9a:6b:1d:f4:
19:27:77:8e:37:4f:70:e1:5e:d7:07:7e:e4:c9:75:
65:59:ff:b8:05:57:6a:53:0f:e6:3b:9b:93:ba:ff:
87:9e:d9:8b:f9:c5:54:9e:d3:c7:f0:2a:d8:13:a3:
55:b4:df:ae:16:56:38:f6:ee:79:31:70:b5:91:a3:
b8:ff:f7:11:c8:0b:9d:bd:02:84:51:e9:37:7f:76:
b9:3a:30:44:61:fc:87:5e:6c:e1:eb:04:4f:3b:91:
e8:56:e5:30:b3:6d:a9:20:54:be:74:61:a7:ed:b6:
46:80:2e:a8:59:d0:6c:b3:88:62:4f:af:0c:87:59:
95:46:c6:d2:3c:cb:c6:a1:d2:ab:23:db:57:d5:07:
71:e4:5e:be:33:bf:13:76:ff:df:03:69:61:63:53:
6f:2b:12:be:2e:85:71:47:fb:4f:b0:67:9d:52:9c:
16:27:26:84:2b:3d:2f:f3:75:6e:c4:7a:46:85:49:
01:d8:0a:42:30:dd:23:23:05:ae:df:22:05:03:fb:
e1:59:38:8e:72:00:cc:70:36:12:81:27:ac:51:3e:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:36:32:35:E3:34:C6:79:FA:98:FC:83:9F:06:2C:AB:36:B0:AB
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:72:10:92:92:9d:42:ce:d0:81:3d:d4:d3:b8:01:99:49:88:
95:3b:00:72:7b:3f:84:50:a0:13:2e:2e:d6:6d:16:8b:61:5c:
8e:0a:54:f7:76:2d:3a:0c:1c:f6:4b:05:20:be:f8:1b:cd:65:
02:30:7a:d5:72:90:1c:5a:52:87:a8:ad:3b:1d:d1:6a:dc:b7:
f2:b2:75:4d:ce:04:31:ea:89:a2:a5:cb:0b:e9:8b:6f:a1:c4:
bd:72:96:18:8e:e0:78:44:54:95:32:59:e7:86:76:33:de:37:
fb:c2:d7:10:d2:24:cd:35:9a:db:33:2f:91:09:da:4e:52:72:
fe:b6:80:0f:5b:ad:d7:b7:2c:40:38:6f:b2:98:d1:21:fb:c1:
ea:be:82:cf:9d:4b:b2:32:ec:5d:b0:63:80:13:f5:d4:29:dd:
89:79:a7:e1:92:e9:80:98:75:d0:c1:0a:1f:34:a5:ad:cf:a5:
09:be:2f:5d:cb:9f:4f:64:22:03:d3:d8:92:d4:27:c5:3d:3a:
7c:c1:b4:e2:08:03:01:4c:0a:d1:e8:c6:2d:ce:e0:78:47:4a:
bf:71:e5:7f:e0:f0:c0:84:91:17:c1:a6:da:79:13:e3:3c:72:
27:0e:35:55:32:13:7a:78:ec:5b:01:1a:71:57:25:10:5a:35:
91:cf:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:02 2025 by rpki-client