Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: OJOOnFH/ZRrdVWSQobkpK+fmE8CE/gtpCTAWkllXTlg=
Subject key identifier: 72:1E:79:48:6B:40:66:A2:7A:E5:63:E0:63:95:27:9C:FE:14:34:0E
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 019A2553C4074A67844FBB84157C8500A3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 0B1A
Signing time: Mon 27 Oct 2025 11:00:37 +0000
Manifest this update: Mon 27 Oct 2025 11:00:37 +0000
Manifest next update: Tue 28 Oct 2025 11:00:37 +0000
Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: CnxTikp+TC4sEhZucvWZ38+9VZUAbxPgoxXdlUtCj4k=)
2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:c4:07:4a:67:84:4f:bb:84:15:7c:85:00:a3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Oct 27 11:00:37 2025 GMT
Not After : Oct 28 11:00:37 2025 GMT
Subject: CN=721e79486b4066a27ae563e06395279cfe14340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8b:00:79:47:47:bb:48:b0:65:58:7f:2b:b9:
7b:ae:64:f0:f7:6e:73:f5:fb:26:75:01:d5:ee:7b:
2b:e5:28:0d:d7:9c:bf:05:f9:27:48:de:e2:05:34:
b0:ec:6f:8d:a1:71:81:fc:87:32:0d:c8:28:64:02:
b1:50:7b:e8:15:93:54:07:bd:20:8b:76:26:7d:b1:
43:fc:73:d0:6e:ff:16:9d:69:8d:0b:55:29:cf:2b:
39:70:4c:ef:1e:c7:45:ed:a9:da:62:6d:a7:e3:98:
21:5c:a9:05:11:3e:1e:9d:c3:0a:a4:ce:82:59:b7:
a0:a6:60:03:ec:66:78:85:04:58:7c:07:e2:80:a9:
b3:30:f9:c5:da:0b:89:67:7d:f7:01:88:5b:09:08:
df:f2:b1:55:62:f2:05:19:c1:b6:d2:eb:21:d8:42:
67:2b:0f:fe:fc:a5:ed:56:55:05:57:a1:94:31:6e:
cc:b4:26:65:87:d9:62:dd:a7:eb:94:28:94:0f:fe:
37:60:37:10:6f:3f:6d:3b:5f:ef:e8:e8:53:e4:94:
61:1c:9c:f7:a3:75:d0:d6:9d:13:15:89:ca:6a:bf:
f6:46:51:e9:8c:7d:5b:28:69:5f:9f:bf:f9:9e:9e:
56:bc:1d:01:1a:a4:a4:11:d3:23:bb:61:31:95:d7:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1E:79:48:6B:40:66:A2:7A:E5:63:E0:63:95:27:9C:FE:14:34:0E
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:63:69:06:5b:27:32:07:9f:1f:57:9a:76:0b:71:6c:d6:b5:
3b:6a:44:3b:40:a9:7f:2d:51:e6:03:c0:da:ff:e8:e5:31:46:
2c:9f:f3:6f:4c:14:75:2d:62:b6:be:84:b1:08:da:b3:59:ff:
0f:64:84:43:b1:30:a5:df:5a:5f:16:17:cd:a0:d5:31:2a:45:
fe:89:38:29:fb:0b:63:d1:3d:c7:a4:fd:3f:f3:0f:56:44:2b:
9f:06:e1:25:81:4e:26:d2:ce:be:1b:44:82:1d:6a:24:55:ef:
2f:e2:58:d4:ff:56:0e:7b:42:91:1b:cb:b1:40:dc:ce:8f:29:
06:e0:f6:a0:3a:ea:47:b6:e6:5e:98:00:47:26:11:a6:8e:aa:
fd:b4:bf:9f:96:47:d1:2b:10:11:f4:bf:f8:31:b5:96:41:a6:
f3:27:e4:ff:aa:18:08:10:c5:f6:9c:ab:b8:ef:06:f8:b6:d7:
ee:1e:52:ce:d7:1e:95:dd:11:30:02:54:0b:24:28:c5:c5:8e:
bd:3c:42:17:53:fe:44:7e:1c:b0:2f:c4:e0:9f:6f:fb:46:59:
81:a0:bd:76:07:73:44:32:e3:09:74:48:64:6d:6b:8c:a2:97:
52:40:37:72:20:08:88:ba:b3:a6:1e:64:34:6e:25:6b:89:d0:
77:f0:4a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:06 2025 by rpki-client