Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: XrXEbBxY3fsHeGkWzz1LwhtxcAtUD569KtIjjB0TmAg=
Subject key identifier: 72:6E:61:9C:4D:6C:11:73:DE:8A:8D:D2:4E:95:02:0A:41:D7:A3:DE
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019A2553E01BC2ED88ADA117B29CABB4B61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 12DF
Signing time: Mon 27 Oct 2025 11:00:45 +0000
Manifest this update: Mon 27 Oct 2025 11:00:45 +0000
Manifest next update: Tue 28 Oct 2025 11:00:45 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: oyWdXzqPuCqh7RJOG/8DPK5O1Q2vu82UfrdLcVopqRY=)
2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
3: 7cGpErFojxZQKCSeJeJ8U-ucjfw.roa (hash: u8HNSCh1+MNiLey93QoDDaHwFmVThoOReQEndhAwPeo=)
4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
5: YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa (hash: J+sfrqDRaIaNCnrB/qidc2XHG3Pcd1LgS59q0souwmY=)
6: lJFoGwOfjYG7bpWJkltu5e79TPY.roa (hash: a/JvmbooIi2RUBJmFiHrsUi1IesqwE85tvSq7Xkrm58=)
7: nAU_2VpM5SccaGQsl0YkIDwDC1w.roa (hash: LkSzGNi0v1t7wdhC/pLyKhtEY4pQXgh7tGdjsi4l0Ig=)
8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:e0:1b:c2:ed:88:ad:a1:17:b2:9c:ab:b4:b6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Oct 27 11:00:45 2025 GMT
Not After : Oct 28 11:00:45 2025 GMT
Subject: CN=726e619c4d6c1173de8a8dd24e95020a41d7a3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:5e:e2:46:2a:bb:b3:25:6b:45:59:5f:2e:
3f:8d:3b:5a:b9:85:45:73:59:9d:ab:a1:b7:3a:2d:
49:c5:af:0a:1e:74:93:12:3d:36:b0:cf:2f:4d:17:
8c:74:c5:e1:fe:d3:81:70:81:31:d6:04:40:1b:5c:
b2:e5:8d:89:bd:e3:34:6f:05:92:3b:3f:17:1a:15:
47:d8:3d:17:1f:d5:fc:ae:93:c4:27:10:a2:91:1b:
66:0d:9b:ab:7c:51:f3:f2:39:03:9f:74:35:05:d1:
16:cf:7b:99:21:7a:d8:7b:0c:b4:5b:c1:7a:56:f3:
86:69:0c:01:f2:e6:27:7d:d5:61:3a:db:da:10:13:
fa:b9:46:7e:13:58:d1:5f:5e:ad:2a:9a:41:27:5d:
e3:db:ea:5e:03:61:2e:92:dc:12:ec:7a:ba:a6:18:
d7:56:b6:ec:11:f3:7a:6b:e7:e1:3f:2b:c1:e7:14:
bc:3b:42:50:a5:97:84:47:76:97:e0:1f:19:45:66:
9b:d5:55:06:5b:22:ea:3a:1b:bf:05:2d:ad:0b:24:
67:47:8d:66:cf:f8:a7:c2:45:71:ca:45:2c:43:9e:
e1:82:c0:d0:b5:0e:42:d7:05:2f:ea:33:83:ec:12:
a3:f6:c1:b3:81:1e:08:c3:3e:2d:03:f3:f9:d3:5c:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6E:61:9C:4D:6C:11:73:DE:8A:8D:D2:4E:95:02:0A:41:D7:A3:DE
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:87:a4:e6:c1:74:5c:50:c8:a6:e1:8b:7c:7f:a4:7c:32:70:
1f:b1:c4:5b:cc:35:16:14:65:7e:42:a3:24:64:71:75:40:86:
21:4a:3c:6c:3b:d9:ec:aa:24:c7:03:d2:6c:f8:97:de:40:0e:
2b:eb:db:18:35:06:fe:b3:30:39:fe:ee:20:96:ce:d0:73:e9:
f2:ed:80:d9:04:e0:75:f2:fc:55:10:a3:3d:14:4a:7d:c7:2d:
87:74:12:0d:6e:a2:5a:cb:b3:45:8f:e3:e8:b0:d5:79:09:61:
c8:4e:3e:89:5e:72:6d:d9:24:aa:24:45:7d:65:74:f9:24:2c:
3f:a0:2d:8b:29:b0:43:ed:c4:24:10:fb:4f:d9:14:03:03:e3:
7a:f4:73:7d:8d:3a:a9:2a:79:09:c0:b9:3e:e2:51:aa:6e:ea:
a5:6f:1b:e8:5f:e7:89:af:83:52:86:9e:bf:cd:5e:84:f5:0f:
9a:ae:70:43:9b:8a:e2:1c:14:f4:8e:db:28:c6:81:f7:ea:6c:
6a:77:97:4d:c3:9f:27:75:d3:20:eb:55:a8:23:8f:1a:36:80:
62:6a:e8:42:7a:5e:2e:d5:1a:1a:19:6f:4e:2f:b4:70:c7:21:
84:36:19:21:b2:db:7e:50:30:15:b7:23:36:17:45:1d:ee:c1:
06:8e:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:48:53 2025 by rpki-client