Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: VzqRc5xSQEjN5eBv3uRlrjtUiHiOshVG4OiijhNgnFs=
Subject key identifier: 93:3E:DB:87:A1:39:89:92:EC:0A:8E:B6:24:81:51:1D:98:85:92:0A
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 019A7112C62B5A08491F8A2CA8458D57D677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 091E
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: Q4dOZFkyTUb6tWOaoctiLN/9kf2ZFjYMfpgcyv83YTs=)
2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c6:2b:5a:08:49:1f:8a:2c:a8:45:8d:57:d6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=933edb87a1398992ec0a8eb62481511d9885920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:f7:04:74:82:89:b1:b5:d7:ab:7a:de:21:
21:b3:e5:ed:2b:c8:d2:ec:74:ec:26:4f:f5:8f:34:
26:95:c6:07:f7:13:b2:70:cb:dc:0f:b9:5d:b8:b9:
e3:7e:eb:e7:26:74:2b:22:ed:8f:ba:67:86:06:81:
c7:d9:a3:72:77:71:36:40:77:16:72:ba:1f:a6:79:
a5:3b:d1:f3:bc:76:8c:32:e0:26:fd:10:32:ed:6b:
4c:84:d8:c0:67:ab:b5:ab:26:88:ca:e7:0f:1d:9b:
ea:a9:2b:ab:89:ab:91:9c:2c:68:31:f6:a2:10:2c:
6e:22:29:9c:4a:b3:f3:a1:fe:37:d9:50:9d:fa:95:
5a:cc:e4:26:9e:47:60:20:45:e2:8e:dd:22:e2:ea:
c5:2e:94:27:30:62:7e:a8:a3:86:4c:1e:5d:3c:7d:
47:86:58:68:19:2f:21:1c:43:ba:91:8b:43:fb:37:
4b:68:78:8a:a1:82:7b:c0:f9:65:53:03:0b:43:08:
3b:71:b9:9c:9a:ad:7e:44:4c:f1:c7:6f:4c:96:d0:
92:1e:57:5d:92:d1:c1:db:db:d1:bc:0c:05:83:a8:
2a:16:5b:d3:1a:1f:11:dc:e0:3f:4f:05:43:5d:17:
70:a5:5a:c3:b7:5e:e3:ff:46:b0:ad:a9:bd:1a:bc:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3E:DB:87:A1:39:89:92:EC:0A:8E:B6:24:81:51:1D:98:85:92:0A
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:93:06:ad:49:b3:96:d9:f1:80:0d:e6:1f:36:01:8f:3b:16:
e4:8a:66:1d:9e:d0:01:ac:5d:41:36:df:09:73:b0:28:6a:68:
82:3c:61:7a:bc:f0:c9:39:35:b9:ae:fb:1f:a4:2d:4a:8d:07:
4f:97:34:1f:f2:43:9c:2e:a8:72:1b:00:d0:67:1f:b2:b5:fa:
53:72:99:e8:62:43:93:1e:70:2a:a8:4d:67:c9:02:c8:4a:da:
e6:f2:b3:cc:3b:ff:18:b2:6e:1e:73:7d:41:62:e0:8a:69:cd:
e7:d4:c5:5e:65:54:af:81:61:5c:cd:89:e4:c3:3f:d5:fa:ef:
98:49:95:d3:e8:f8:28:06:36:4f:39:89:a1:41:50:d0:4c:dc:
ca:0a:cb:94:ff:6d:34:4a:de:b0:93:a7:8a:67:63:fb:fb:bc:
ae:fa:25:03:a0:b6:84:24:4e:1a:e8:48:a3:08:e2:5b:a1:2b:
73:34:9e:79:b8:77:27:3f:29:03:5d:2c:9c:aa:83:11:ab:77:
7a:3b:17:78:83:d7:07:44:31:c0:fd:0d:6a:c7:06:20:26:00:
c3:74:aa:26:55:54:8a:9a:2e:64:43:58:97:b9:dc:47:54:7b:
50:27:12:ae:67:53:7c:3e:91:d5:04:b5:7b:66:55:bd:08:6a:
73:40:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:48 2025 by rpki-client