Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier: nElPat3Z9O6ABrBOOIRepBerBVCOQrZq1OWjKdHx7fA=
Subject key identifier: 4E:38:A2:4C:1A:B8:D6:1D:A4:28:DD:33:98:20:BA:6D:A6:09:CF:69
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 019A300F28B274CB328721B4C1071B21F6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number: 10FA
Signing time: Wed 29 Oct 2025 13:01:31 +0000
Manifest this update: Wed 29 Oct 2025 13:01:31 +0000
Manifest next update: Thu 30 Oct 2025 13:01:31 +0000
Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=)
2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: XG5LRy3N7I4nU9ZUMKtA/L+APdMQRxzlPVrbr2M8RdI=)
3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=)
4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=)
5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=)
6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=)
7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0f:28:b2:74:cb:32:87:21:b4:c1:07:1b:21:f6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Oct 29 13:01:31 2025 GMT
Not After : Oct 30 13:01:31 2025 GMT
Subject: CN=4e38a24c1ab8d61da428dd339820ba6da609cf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:78:72:5b:be:70:7c:a4:d0:a8:96:ff:cb:42:
51:22:85:a0:a3:7e:81:26:6b:a8:b1:57:bb:23:0f:
90:7f:6a:e4:25:1c:3b:e7:dd:4e:f1:7f:5d:b6:ce:
51:36:76:16:73:92:b1:fd:85:12:12:06:0e:87:4e:
6a:72:be:95:df:0c:d9:c0:e5:18:62:3e:72:bf:f7:
46:e8:9d:71:dd:dd:ab:f7:bf:25:f7:f1:38:59:05:
f4:59:fa:8c:e2:1a:61:c5:ae:77:f6:d6:6b:6c:0a:
c9:12:a5:8c:77:c7:28:9c:4c:0a:e5:7d:77:9b:6a:
7f:5e:c7:9e:f4:a9:62:0a:d1:57:07:59:e4:78:03:
9f:f0:75:76:34:4d:d1:9f:1a:3c:3d:5b:21:6d:bc:
11:2a:9e:23:e3:e0:a6:13:9a:f2:12:39:98:36:5f:
3d:d6:f8:59:b3:2e:df:f3:60:f6:59:c5:2d:77:5b:
85:ff:48:37:70:a8:b5:12:76:5c:8f:9e:14:0c:6c:
3b:d9:92:f7:b8:01:5f:19:dd:70:94:0b:9f:3d:e6:
a5:0a:93:23:1a:3a:2a:5f:f1:b3:a9:38:2d:3f:5a:
0b:df:78:2d:70:61:1c:c5:f4:ce:f6:28:a4:24:ba:
22:33:50:26:46:75:46:be:ec:06:23:3d:fc:fd:46:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:A2:4C:1A:B8:D6:1D:A4:28:DD:33:98:20:BA:6D:A6:09:CF:69
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1e:db:b3:b8:ae:2a:2d:99:31:69:4c:36:05:9a:6f:98:71:
b1:37:69:99:aa:a0:fa:dc:0b:58:80:bf:ab:dc:06:8b:c1:fd:
73:a8:d3:84:2d:61:1a:ad:d6:a8:00:1f:bc:b8:36:dd:3b:ba:
1d:bc:eb:5e:80:74:3b:76:47:ba:d6:26:74:73:64:86:99:e2:
de:d6:60:bc:6f:f6:c0:c3:a5:13:d6:e0:1e:1e:20:9c:3a:cb:
78:bc:3a:fd:15:85:e2:44:38:eb:3e:1e:20:c4:61:f8:fa:1a:
20:9d:d6:b4:22:e5:1f:d8:d0:97:80:37:23:3c:1a:6b:95:d7:
ac:1e:f6:a8:8d:c6:a3:9c:a6:29:45:ba:80:93:37:47:d1:be:
12:74:f6:7f:c7:8e:9d:82:17:84:15:bb:e6:63:d9:af:c8:1d:
42:74:ed:fe:0b:fd:14:5c:e1:97:88:da:eb:51:c8:2a:cd:25:
0a:fb:b7:70:c6:35:8e:03:fb:12:2f:8e:c2:ca:80:0e:11:f2:
a3:e4:40:14:35:29:fa:40:b1:23:84:00:36:37:41:8b:d7:2e:
e8:9b:11:10:91:e6:9b:4d:b6:e2:5e:46:df:c2:84:69:f2:a1:
7e:7b:70:aa:fa:63:34:f2:c7:75:c5:49:8e:f4:a3:d8:a5:5d:
7f:40:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:22:14 2025 by rpki-client