Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier: JwHIUzJWt92hHMIIPO6lUWLxVsBwKT8xM7NpuUpA5+4=
Subject key identifier: E9:BF:F1:0B:60:88:4C:C0:3B:58:15:AB:B8:DB:1B:5E:44:B7:F6:AA
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial: 019A725C504A899B5DE61BBA9C29299C91E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number: 0854
Signing time: Tue 11 Nov 2025 10:00:43 +0000
Manifest this update: Tue 11 Nov 2025 10:00:43 +0000
Manifest next update: Wed 12 Nov 2025 10:00:43 +0000
Files and hashes: 1: R-wXA-kWQa5PdCJfUeOG1Bar_7E.roa (hash: eg3vfMOt4/2VviBbur6gIcbu+ezOh6ft9BbXqbZkqec=)
2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: 8JCTHcjhNEFIgyL+d3JftMBxqTQJ8YMNmJx8Z19pHko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:50:4a:89:9b:5d:e6:1b:ba:9c:29:29:9c:91:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
Validity
Not Before: Nov 11 10:00:43 2025 GMT
Not After : Nov 12 10:00:43 2025 GMT
Subject: CN=e9bff10b60884cc03b5815abb8db1b5e44b7f6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:bc:77:81:fc:72:d8:ec:02:b8:a9:1e:22:
ca:5d:74:76:99:88:22:bf:f8:be:4a:26:fc:58:78:
b0:df:27:77:dc:55:af:73:a9:89:aa:4e:58:fc:e5:
d8:3f:70:a7:8c:10:bb:62:58:fe:f4:df:3c:28:78:
f4:bd:4b:e9:01:7d:ab:9a:bb:d1:41:17:78:3a:e6:
ac:c6:69:c7:94:d9:e3:b0:82:e4:fd:0b:09:e6:68:
71:a8:4a:3a:8c:34:4a:a4:2f:de:8e:71:38:ed:54:
6f:fe:ab:29:b0:4f:e0:80:3d:19:bb:d0:35:dd:64:
66:40:09:38:ce:5d:76:e2:1f:0a:44:45:85:b7:3c:
ca:29:e8:4d:e2:45:07:e1:13:2d:41:b9:80:af:54:
58:46:03:b8:0c:88:93:eb:d3:49:36:8f:4b:73:d0:
63:64:b1:0d:63:c6:42:00:48:0e:08:16:52:30:ed:
bb:2a:fe:64:4b:ea:46:32:3f:4b:9c:20:88:42:bd:
43:c8:7c:c6:4d:fa:2d:c8:8b:dd:e7:16:53:42:98:
7d:d5:dd:20:58:48:6b:42:49:04:e7:f6:91:d3:e8:
d2:2b:5f:51:ae:f7:09:10:30:0e:85:b6:13:a6:4e:
3c:46:ae:72:59:98:b7:a7:ab:97:f0:2b:62:dd:1a:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:F1:0B:60:88:4C:C0:3B:58:15:AB:B8:DB:1B:5E:44:B7:F6:AA
X509v3 Authority Key Identifier:
keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:83:8b:67:21:97:90:44:ef:c6:cd:ef:d1:de:e5:77:06:
ec:a8:66:ed:22:e3:77:a4:fa:67:d2:d9:38:40:e2:bf:6e:6f:
82:86:de:7b:a6:ca:4b:0d:29:3e:f0:b2:f5:da:44:e7:15:ab:
80:72:c0:64:6a:64:d0:38:8a:72:c3:46:55:22:bf:09:af:54:
50:e1:eb:3b:20:c6:a1:81:af:50:b5:15:a4:ea:52:f0:e3:a4:
10:39:99:e1:cb:a1:0e:f2:24:7e:dc:b7:ad:7c:94:dd:06:c5:
4b:d4:bd:26:da:a6:d0:0c:63:c1:e5:18:89:e3:17:32:7d:a0:
ab:b5:38:58:6c:c7:4e:8f:83:06:37:e0:71:cf:b5:da:77:ae:
84:2e:70:42:31:c2:43:a2:64:08:ee:13:d3:84:44:c0:6f:df:
8f:0a:93:fa:91:1e:c2:dc:b8:05:ef:4b:47:5e:ed:a8:be:a5:
9e:15:00:94:26:3c:ec:ef:e6:3a:86:a4:9f:5a:2c:67:fd:f2:
25:4d:5b:05:35:d9:58:02:7e:0b:35:d2:ff:22:49:65:3e:13:
7c:82:36:f5:fc:df:8c:49:c0:6c:32:7f:e4:af:a0:0d:54:fc:
16:ba:98:60:31:61:c9:e1:50:0d:eb:c9:67:48:c8:72:8d:a3:
ac:be:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:47 2025 by rpki-client