Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
File: 36xiikxcxuVw9PQcTg1jlUkbTX8.mft (raw, json)
Hash identifier: eEpD7Y9Cpdtoz4a8buDCspgKE5z7fBB+emNhu+aQTHQ=
Subject key identifier: 91:FE:9C:6B:46:D9:92:F8:68:1E:44:DC:17:E5:CE:E4:07:79:3C:7F
Authority key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
Certificate issuer: /CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Certificate serial: 019A2779180B5474C22F2264C3F94C443620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 21:00:38 +0000
Manifest this update: Mon 27 Oct 2025 21:00:38 +0000
Manifest next update: Tue 28 Oct 2025 21:00:38 +0000
Files and hashes: 1: 36xiikxcxuVw9PQcTg1jlUkbTX8.crl (hash: jUf7GkL38qUGkwE7eAvhRePUeonO3iWpmdHItKcxN7o=)
2: 7JS41vM91mOZftvqn8jPBmhbJuk.roa (hash: aROAKgddtydWzjEbRgk4taCxbXsDkr5HWG29W6Kls8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:79:18:0b:54:74:c2:2f:22:64:c3:f9:4c:44:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Validity
Not Before: Oct 27 21:00:38 2025 GMT
Not After : Oct 28 21:00:38 2025 GMT
Subject: CN=91fe9c6b46d992f8681e44dc17e5cee407793c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:21:69:bd:47:e3:3b:47:b0:b1:ce:d6:ae:
c0:67:3c:3c:07:9d:c7:de:52:c0:e7:26:60:d3:de:
bc:ca:81:e3:c1:ef:7e:5e:00:57:da:94:9c:ce:48:
0e:f3:0b:82:10:6f:b3:bf:c7:33:6e:d4:7f:0c:10:
28:02:0e:e7:1e:eb:ca:54:61:f6:de:ed:49:2b:d0:
39:a2:91:be:92:6f:c6:07:80:f6:24:7b:94:5c:c3:
9d:ff:d0:f4:7f:bb:32:46:5c:ab:12:05:ee:f8:5a:
0e:c7:34:b2:eb:f4:6d:21:80:76:83:43:dd:06:e6:
ce:c7:3d:c7:6b:1b:71:91:81:88:13:8a:cb:92:d5:
92:22:48:28:8f:bb:84:5a:60:ea:b5:bd:8f:c0:fe:
e5:cc:9a:25:c0:75:d4:58:67:05:b4:55:52:bb:5e:
74:c5:18:23:a7:ab:d8:f2:b4:10:2b:e7:79:b7:83:
08:c3:8e:ec:dc:ad:ec:3b:14:08:0e:36:83:8e:b9:
8b:74:12:cd:59:da:ac:5c:49:26:b0:c2:e9:18:33:
be:f1:e4:a5:68:7b:03:01:35:ef:37:10:0a:bc:d3:
90:a2:3c:b6:a4:c1:4d:0c:dd:56:ca:c6:46:6c:97:
36:a7:a1:33:af:f3:10:56:85:14:5c:05:14:09:56:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FE:9C:6B:46:D9:92:F8:68:1E:44:DC:17:E5:CE:E4:07:79:3C:7F
X509v3 Authority Key Identifier:
keyid:DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:b5:6a:6f:d5:dd:9e:fd:a9:bf:f7:4b:1e:70:db:9b:4c:
97:b3:d0:af:67:45:a9:5d:af:1b:53:4f:5b:5b:b9:ba:d9:59:
f2:86:ef:89:3e:7a:b4:9a:70:a7:18:09:a0:92:11:c4:94:b7:
64:ad:92:8c:8a:62:92:02:e8:00:67:af:aa:ba:ad:84:43:9a:
bb:8d:fc:fc:b6:80:08:38:8e:1f:f9:39:93:ea:d3:ed:95:ff:
a2:16:42:3a:70:a9:93:07:22:e5:48:5f:90:d6:6c:5e:a2:f8:
44:e6:90:e6:af:85:09:7a:5c:23:2e:24:d2:e4:59:0d:89:79:
13:eb:43:3d:4f:1d:27:c9:20:ef:7e:87:11:57:f7:6f:e7:2a:
24:c3:b5:30:46:82:df:b8:9d:62:66:e7:31:cc:00:1d:45:7b:
2b:28:6b:36:35:bf:1f:43:1a:7d:49:5b:71:8c:8a:3b:d4:87:
2a:19:0b:fa:c6:61:0f:8a:33:36:43:58:b8:14:99:30:07:4e:
03:46:d4:40:77:8f:2d:5b:b7:1a:8f:6e:3b:35:43:42:22:0f:
23:75:eb:5e:8a:fd:af:e6:aa:71:24:0a:b0:93:a7:65:a6:67:
33:cd:dc:1a:ce:a4:79:f2:ff:17:35:5d:ec:16:94:bc:d1:c8:
cf:26:16:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:18:40 2025 by rpki-client