Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier: cz3j+/PcREKJrb85bBBKdSaQNdOf83debVGYtsNHuFs=
Subject key identifier: 06:D9:D5:B4:9F:1F:1D:64:2D:E2:B6:12:41:6F:63:7A:66:C2:E9:4A
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 019A194F2A0272DA5FCC277EAFA75827E2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number: 02F9
Signing time: Sat 25 Oct 2025 03:00:09 +0000
Manifest this update: Sat 25 Oct 2025 03:00:09 +0000
Manifest next update: Sun 26 Oct 2025 03:00:09 +0000
Files and hashes: 1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=)
2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: dPC3yiwwKQK1lRbqdgOCfgDxRWceOtn+NUalQcjOvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:2a:02:72:da:5f:cc:27:7e:af:a7:58:27:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: Oct 25 03:00:09 2025 GMT
Not After : Oct 26 03:00:09 2025 GMT
Subject: CN=06d9d5b49f1f1d642de2b612416f637a66c2e94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:8e:44:15:01:10:6c:7e:79:d6:3f:91:6c:
bf:c4:2e:0d:f5:4a:8e:c2:4c:c6:17:34:c1:57:bc:
75:72:cb:6f:df:38:1d:d8:02:c6:3f:32:9e:1d:88:
65:2b:7d:d5:f9:68:40:ae:8b:fb:4f:98:99:59:78:
be:62:e2:c6:47:45:23:f5:c6:06:72:3c:e6:0f:29:
36:14:d1:30:ab:7b:28:a9:d8:ec:24:24:69:35:f1:
f8:58:bf:96:db:e9:ea:f2:47:25:d2:6b:a2:ce:a1:
28:bb:99:9f:e3:23:1b:be:73:39:f6:54:08:ff:ea:
79:a4:5c:96:40:b6:9f:fa:d5:d4:ca:5d:5a:5d:64:
84:a8:12:82:fa:00:57:7b:fb:82:12:fc:32:37:d3:
b9:2a:3e:c1:71:fe:b6:a9:72:de:9b:ba:e1:dc:57:
a4:ed:e2:28:7c:2b:3e:f9:df:bf:1f:bc:56:1d:36:
66:2e:d4:63:b5:61:a0:26:60:56:11:e1:56:f6:48:
58:e7:e8:86:c8:7b:27:b5:39:e5:47:a3:c3:bf:22:
a1:71:ac:83:af:81:17:3d:eb:80:3e:22:cb:2d:26:
b1:11:c1:e9:c1:9d:02:30:ae:03:fd:aa:d2:81:90:
ba:57:be:d0:32:15:be:70:50:72:c3:7f:88:23:9b:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D9:D5:B4:9F:1F:1D:64:2D:E2:B6:12:41:6F:63:7A:66:C2:E9:4A
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:a2:2c:a0:58:f8:a0:ff:47:f1:94:55:2d:ba:7d:1a:96:
44:c4:80:d5:2d:69:c4:f5:28:9d:25:04:e4:d1:58:4a:78:03:
f5:51:e8:d9:3a:92:5b:82:7f:ec:d2:18:b1:86:83:f8:97:f7:
9a:70:d4:83:2b:a8:d1:83:3d:74:1e:14:41:c6:0e:71:0b:8a:
37:d8:d2:6d:63:63:30:90:1e:41:dc:6e:67:a8:c0:1d:c5:0b:
2b:9f:2c:29:35:d9:0e:d4:69:2b:02:0d:2a:23:ab:40:58:1a:
41:2f:72:bd:2c:aa:ca:27:31:fc:32:65:b4:dd:0b:31:78:72:
b5:8a:5a:51:c4:af:a2:78:c0:d2:fc:0d:cf:1a:1f:cb:ba:89:
62:fb:68:d3:dd:4f:8c:b9:8f:63:44:a3:81:19:31:e9:02:d1:
f6:f9:a9:4f:70:b3:68:84:fb:9f:5c:da:f7:0e:88:d3:bb:d0:
73:76:79:00:81:b5:76:e0:0c:7d:a6:24:77:b7:17:0b:78:64:
7d:f9:c6:46:7d:6e:53:6e:fa:f8:2d:47:60:07:d3:ca:aa:74:
12:29:14:22:3e:64:91:7e:70:17:d2:78:e6:7b:ea:b8:8c:48:
63:6a:0b:c7:0c:54:0a:ce:31:06:32:38:c7:de:ea:cf:b5:1b:
79:39:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:20:25 2025 by rpki-client