Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier: EMYyEMhfggnSLUvSeJheUXgP+6yhewdDdZ4YAP+t/9o=
Subject key identifier: B0:07:AB:28:D8:66:B1:02:01:32:ED:91:2E:6F:7B:9F:E2:F3:C8:A1
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 019A1F1B25BA164B2F3894C7FF8A911D1B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number: 170A
Signing time: Sun 26 Oct 2025 06:01:03 +0000
Manifest this update: Sun 26 Oct 2025 06:01:03 +0000
Manifest next update: Mon 27 Oct 2025 06:01:03 +0000
Files and hashes: 1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=)
2: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=)
3: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: /KAsHMlOLyfBzXF5dCHdcQMcVHXE6tT7zamRzCVoVCE=)
4: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=)
5: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1b:25:ba:16:4b:2f:38:94:c7:ff:8a:91:1d:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Oct 26 06:01:03 2025 GMT
Not After : Oct 27 06:01:03 2025 GMT
Subject: CN=b007ab28d866b1020132ed912e6f7b9fe2f3c8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:82:a5:7f:bd:f2:2f:98:ed:58:c7:72:31:
40:b6:d4:0e:00:80:1c:86:c4:e9:31:2b:a4:e3:56:
ae:b6:f5:db:ba:79:ea:82:22:22:cd:c6:e7:af:5d:
d0:a4:c6:ef:d3:a7:6e:40:24:84:36:ac:7f:8d:0a:
0c:35:eb:ad:f5:c6:a8:d8:28:f2:c0:0d:aa:72:4e:
9f:3f:3a:25:e9:cf:49:8f:81:10:89:19:43:ac:85:
56:44:07:6c:93:8b:81:cb:7a:0c:88:b8:5e:80:26:
e6:37:db:2c:0d:41:47:c8:f3:52:e4:13:51:04:18:
55:bf:32:94:0c:32:5c:24:2d:1a:fd:09:9d:a3:df:
0a:bc:cf:12:60:60:4b:93:5d:66:79:26:b7:7d:fe:
ce:81:ed:eb:fd:1e:3d:c9:52:75:7b:fc:1c:64:67:
db:d1:aa:81:ef:c4:52:57:cb:26:e8:09:e3:6b:96:
75:5e:d1:61:00:dc:40:6d:f6:c1:b7:69:57:56:04:
16:b8:8c:bb:91:95:28:4f:3b:be:74:f0:87:e5:15:
8c:52:8d:06:3a:9e:51:48:87:67:7d:f2:8e:34:ad:
22:b7:59:6d:e5:52:3b:1a:da:d3:d0:10:c8:5f:83:
b3:e9:bd:bf:f2:76:b9:f6:76:a6:7d:75:0c:a2:e1:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:07:AB:28:D8:66:B1:02:01:32:ED:91:2E:6F:7B:9F:E2:F3:C8:A1
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e3:d0:b9:0a:0b:59:52:de:5d:7a:f5:b3:03:25:43:d0:56:
c7:65:44:68:b0:67:6f:d7:ef:f6:3b:3e:5a:f0:36:ce:2e:33:
2c:4d:90:3b:02:fe:1a:01:90:49:f7:eb:92:a3:b0:d4:8b:11:
a6:ad:4c:d4:a3:4b:9c:82:2a:61:e8:e6:bc:d2:d1:ed:c3:57:
6b:dd:83:64:dd:62:d2:43:0d:72:9e:75:57:8b:97:ac:ac:e2:
72:44:02:e3:85:85:74:6d:f9:7a:c9:90:89:1e:7a:93:e0:36:
69:92:52:0b:fb:c2:b3:69:66:8f:57:a3:9c:0d:b7:c6:ab:5a:
6f:16:a1:12:94:dd:d4:d1:67:be:fc:e4:25:4e:48:cb:b9:c7:
14:72:a3:9c:d0:03:30:e9:bc:18:48:2d:33:71:f9:d4:ce:1e:
06:67:f8:f9:1f:11:5d:33:52:03:8c:84:97:ca:7e:cd:b4:99:
72:e0:da:e8:24:3c:06:75:5b:12:7a:54:f0:fc:5c:88:3d:eb:
12:e1:57:a2:bb:19:7e:32:7b:c5:1c:37:09:98:03:fa:f4:44:
06:39:be:33:58:f6:48:bc:4b:81:fa:4c:86:59:6e:44:5d:21:
b8:0d:67:bc:89:51:2d:f0:1b:83:0f:70:01:61:bf:8f:1a:3c:
cd:40:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:02:11 2025 by rpki-client