Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: 6yPVOg1kkLi6fFss7zACoENNQ02B+qEQxhPun8OFx0w=
Subject key identifier: 21:FF:4C:71:08:C1:99:62:54:7D:01:A8:33:91:70:85:F3:74:33:34
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019A4DE1B325C73F6E475EC537009BCB988C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0999
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: Kcs+a06OHqgU4EkWzCid0QVh4ZAo8S9s4j/AjbYBKio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b3:25:c7:3f:6e:47:5e:c5:37:00:9b:cb:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=21ff4c7108c19962547d01a833917085f3743334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:43:7e:ea:b6:75:bb:be:22:45:b0:f2:b6:
5c:b6:7e:e2:93:02:91:d9:4f:96:92:99:d6:17:c3:
f4:5a:9b:df:ab:54:be:c0:4a:12:f7:8d:08:6f:4c:
47:31:7f:da:3e:d2:dd:e1:b5:e5:c8:1f:f8:d2:97:
dd:b4:6c:05:a9:e8:84:c9:4f:3f:d5:62:8c:fd:a7:
b6:d5:e0:01:31:0c:fc:96:26:68:fb:9e:9a:8e:8b:
4f:9f:b0:ed:83:27:bf:b3:1f:f3:5a:10:64:2a:61:
42:fe:71:d2:a3:d5:3d:ce:a1:0d:0d:5c:9b:b4:05:
b9:c5:87:cf:33:43:18:41:64:83:67:d2:7f:62:bb:
92:d4:7b:ef:b0:20:e6:7a:e6:b3:47:b7:91:5d:46:
81:e3:bb:db:79:5a:a7:3b:6c:05:b1:92:e4:ad:bc:
f3:78:00:e2:0d:4f:af:e9:ae:dd:f2:54:ee:15:a0:
87:68:6b:20:63:6c:ec:c1:5c:87:8b:11:24:07:9c:
dc:99:4f:89:3f:3b:5f:45:7b:b4:bb:44:4d:a9:0b:
1e:3c:1a:54:45:3d:72:78:34:27:33:95:ac:88:e7:
08:fc:d0:87:bd:55:8f:0f:cd:1e:02:c7:a6:43:0b:
1e:67:26:c3:c4:f8:8a:f6:21:24:a2:6d:55:a4:26:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:4C:71:08:C1:99:62:54:7D:01:A8:33:91:70:85:F3:74:33:34
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:51:94:64:f0:42:e5:21:46:a1:ce:5a:a3:0c:67:03:88:aa:
e5:05:88:c5:f1:c0:38:5a:4d:27:2c:ce:9d:bf:02:33:68:88:
c1:4c:d1:9d:ec:d8:1a:6f:07:7d:c2:83:87:80:88:64:55:2f:
29:44:f4:f2:65:f3:13:31:03:cd:01:91:15:6e:f4:cc:9a:89:
96:da:fc:2d:68:d9:0b:64:45:a7:cd:8a:e7:de:53:5d:cb:d9:
4e:04:09:03:b8:f1:f4:ff:96:8a:ba:78:8e:ce:e4:1b:4b:47:
f0:29:e6:a3:d5:9a:76:99:89:7d:24:be:74:83:b3:eb:f9:2e:
13:7f:b9:11:ee:22:26:8d:a5:22:54:4e:0a:fe:09:77:ba:4d:
55:05:ea:5f:f9:81:fb:64:90:73:92:12:1e:8c:e7:af:33:cd:
14:f5:0c:3f:aa:4c:db:2c:c2:97:b3:69:7a:85:3b:0d:e0:a6:
cf:de:71:d8:8e:6e:ea:72:fb:a0:5b:54:f1:7b:30:02:45:22:
5e:2b:ab:e2:91:60:7e:c9:4a:59:f7:ea:b3:69:20:8a:17:8d:
64:95:8b:f2:50:4e:1e:d7:33:b0:4b:3e:47:9d:ed:71:04:ad:
ad:82:bb:6f:85:5f:99:c5:d3:56:e1:58:a4:79:b8:7b:45:37:
c3:74:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:14:11 2025 by rpki-client