Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: OrkxwjlNH6pRhludnvYGB4/gEQbvZz3wC4MOEyb04xI=
Subject key identifier: E3:0D:1F:74:6E:99:04:1C:CB:E9:48:CD:9E:49:56:19:30:B9:F1:B5
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019A1C5022DF892559598EA2996713FA4667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 0673
Signing time: Sat 25 Oct 2025 17:00:05 +0000
Manifest this update: Sat 25 Oct 2025 17:00:05 +0000
Manifest next update: Sun 26 Oct 2025 17:00:05 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: Qavx5bGShNbNgHEAHoio7OTEkQ7XlM52YS8okHB1+0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:22:df:89:25:59:59:8e:a2:99:67:13:fa:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Oct 25 17:00:05 2025 GMT
Not After : Oct 26 17:00:05 2025 GMT
Subject: CN=e30d1f746e99041ccbe948cd9e49561930b9f1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:8a:0b:7d:3d:48:6d:f0:11:e4:4c:e9:bc:
f0:d2:b8:d9:74:87:af:1f:f4:0a:bb:33:79:fa:6b:
52:30:40:c7:cc:6e:f9:28:a2:0a:a6:43:4d:34:42:
f9:21:6f:5a:fb:e9:39:09:66:28:80:50:ce:42:ac:
be:95:a6:57:b9:43:13:a1:99:61:19:6e:a0:7e:86:
d6:cb:ba:38:bd:93:40:f7:0e:53:5a:48:38:6e:ce:
db:50:64:5c:ba:f7:e8:69:dd:1b:f1:74:0e:ae:4f:
c2:98:f5:be:56:5c:05:02:b3:31:0d:ef:bb:8b:84:
f2:63:5d:cd:4e:50:30:a7:db:a7:f5:8a:cf:02:3e:
c7:c5:22:fc:1f:ab:8d:04:0d:5d:42:22:b4:85:28:
56:d6:bc:de:a2:5b:48:8f:81:d9:df:96:01:2d:05:
6d:28:85:a3:f8:06:ca:69:60:8c:3e:5f:a5:3d:d4:
c5:e0:92:bb:30:b6:77:4e:aa:55:63:ac:fb:6a:1e:
13:fc:5f:ae:1e:64:d8:f4:e8:c4:7e:9f:31:7e:86:
36:41:a6:0a:d6:d1:54:57:a3:c4:0b:0c:ec:16:23:
54:8f:0d:26:44:af:ef:99:e6:aa:27:67:f9:43:cb:
1c:a6:12:54:15:03:d9:66:47:0a:21:06:c5:ce:48:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0D:1F:74:6E:99:04:1C:CB:E9:48:CD:9E:49:56:19:30:B9:F1:B5
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:91:04:80:d7:52:31:41:90:30:2b:28:01:18:d2:17:5e:46:
d4:bc:9b:db:4b:73:1c:3f:a6:0a:89:b2:0a:2c:8e:53:e2:b4:
0c:92:9d:15:68:38:28:f1:45:cd:e9:c9:83:9a:85:2d:82:86:
eb:50:fd:aa:d8:4a:b2:48:a0:30:13:05:38:4a:1f:7b:c6:48:
85:83:79:1d:47:03:b3:7f:e0:62:ab:ad:7f:e1:93:ee:b8:c5:
ee:dc:4b:76:51:55:99:34:e8:f8:81:0d:6f:3b:5a:44:c4:98:
8a:cd:d3:7d:3b:51:9b:74:5b:62:f4:85:b8:99:12:f7:00:87:
15:28:5b:f8:c4:5c:d6:a3:1b:6c:50:1e:df:fd:c5:b2:e7:79:
0f:84:7f:03:97:d4:3c:ef:e2:66:56:2f:2b:05:49:e4:85:de:
a4:26:dd:f3:a6:f7:6f:3b:64:3b:38:45:79:39:75:25:a7:cd:
b1:a7:0a:56:fc:07:9c:34:46:ab:29:d4:ea:73:eb:35:d4:e7:
12:87:f6:ee:31:0e:38:1a:b5:ca:68:7b:91:8e:d0:4d:05:65:
04:cd:6a:0a:56:83:ad:cb:28:0b:22:70:e6:9e:58:09:aa:b9:
b3:c0:fa:8a:f9:de:2c:0b:5b:62:17:26:2e:61:2d:81:5e:44:
00:17:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:04:42 2025 by rpki-client