Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: mOB34UvE65LxkHhfdcrkMOcXFsVp3rbHXTMzAq2lwn4=
Subject key identifier: 9C:23:22:13:9C:48:CE:DB:01:A1:0E:D0:6E:DD:65:A2:D0:15:0C:0B
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 019A26668DBFC27031524FF7DA352001C128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 0CC1
Signing time: Mon 27 Oct 2025 16:00:46 +0000
Manifest this update: Mon 27 Oct 2025 16:00:46 +0000
Manifest next update: Tue 28 Oct 2025 16:00:46 +0000
Files and hashes: 1: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (hash: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=)
2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: EI4a6OT3OwJinH/diZljvDAww9IUDwY+ZN4nJC64J+s=)
3: BqfUS67NwEGbDUdjYax38K2Njlg.roa (hash: FXBdDnrJbkKIYFCTwLmrjslC3wsmF26/kRrmIGLYDVE=)
4: ExI_XUjszL60Ie9A5TinBHd-jBM.roa (hash: Ih+JMM3ki467y9AI2VydiKfnBZRQqt/x3WLry7BgEoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:8d:bf:c2:70:31:52:4f:f7:da:35:20:01:c1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Oct 27 16:00:46 2025 GMT
Not After : Oct 28 16:00:46 2025 GMT
Subject: CN=9c2322139c48cedb01a10ed06edd65a2d0150c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:e7:bd:e4:14:f3:0e:42:be:4b:be:7d:75:
60:da:3b:64:00:fd:38:c1:39:e2:2a:d7:f6:8e:d2:
a1:87:64:39:4d:d5:5b:28:bd:a4:90:cf:aa:ab:69:
b2:bb:6a:dc:89:39:e3:c5:21:f2:88:69:69:57:75:
32:bb:9e:19:58:d5:e5:3b:6c:f8:39:7c:95:81:e4:
55:40:8e:ad:ca:69:9a:5b:56:b0:bd:85:ed:ea:ec:
ac:13:b4:d2:48:62:1a:fa:5d:f5:dc:7d:c5:5c:66:
ea:d8:44:1c:8e:78:a5:a7:9e:39:65:36:48:ee:b7:
88:a1:fd:ef:65:71:6b:1e:b3:d1:9f:5e:89:0b:b8:
11:93:93:da:62:a3:76:5a:19:90:f7:0d:3c:8e:2c:
74:5f:08:cb:32:9b:9f:16:3c:c5:2c:f1:3a:ec:71:
fa:67:6f:3a:78:a3:1a:d3:1a:53:f3:7f:d7:9e:53:
22:36:6e:17:8c:b3:3e:04:60:89:cb:de:60:37:d8:
64:68:d4:b7:a0:b1:be:00:ab:84:b0:12:f8:1c:ac:
23:0b:ff:ca:89:76:eb:f3:3e:80:f7:17:55:3d:4a:
67:29:f4:c4:cd:f2:f1:57:89:51:6f:ca:68:d0:c6:
70:97:fa:a7:06:d6:6c:53:f3:39:bf:a3:5e:b1:42:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:22:13:9C:48:CE:DB:01:A1:0E:D0:6E:DD:65:A2:D0:15:0C:0B
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:93:fd:0e:46:db:bd:3a:4d:ec:2e:02:ce:91:b2:06:59:62:
00:bc:72:bc:51:25:7e:ab:ee:7f:ab:36:6a:9c:55:d9:87:ff:
60:41:53:cf:4b:67:ae:2f:43:99:0c:e8:49:97:03:c8:89:13:
3c:04:c8:3d:e8:ef:3c:b3:70:eb:f0:21:39:d5:92:e8:31:90:
17:8c:f3:86:f6:0d:a6:a6:7c:55:81:42:1e:98:01:5a:b3:c4:
db:e0:ed:6d:3a:45:ea:8f:db:7a:d1:a4:70:fc:b3:92:c0:ad:
dd:8a:9e:52:0f:4d:5c:77:59:f5:f6:19:b8:2b:99:b9:66:56:
2f:0b:be:c0:5c:b2:ad:9a:de:92:a8:6a:28:e4:54:ad:8d:ca:
c2:ff:63:90:f3:e2:f8:50:d6:bb:94:b2:5a:f8:16:e9:fc:5d:
dc:95:45:a5:95:d0:53:73:07:84:8b:25:50:0f:83:22:9a:fe:
24:ea:c4:18:8c:20:94:c0:a4:87:d3:55:93:c1:0a:c0:63:72:
da:6b:39:ea:fa:61:c4:98:db:ba:b0:1a:7d:69:ad:d1:00:a1:
0e:b8:75:9c:28:a1:bc:39:4b:61:8d:b9:5c:8f:cc:4f:70:ce:
12:82:a6:25:4d:36:a6:4a:af:03:7a:d0:58:35:89:cd:7c:9d:
75:2b:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:25:32 2025 by rpki-client