Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: Y8F4imHByF6knrAMkVK+XC3T2CbEDDAMPbg9iW7/FZM=
Subject key identifier: A1:9C:A3:D3:3C:61:8A:F1:CF:D0:15:F4:90:0C:C7:1E:9A:88:21:5E
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 019A31FCB38119DC0789D4267ECD77366128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1706
Signing time: Wed 29 Oct 2025 22:00:35 +0000
Manifest this update: Wed 29 Oct 2025 22:00:35 +0000
Manifest next update: Thu 30 Oct 2025 22:00:35 +0000
Files and hashes: 1: 7OSbUsexneQ0Q14f6d4gS3FqwKA.roa (hash: bTywqIASCFGsuBv+6N7v2D8L1Q+x4uOFKiuvSJi+2o4=)
2: BAFnA8E_-fRHFvJR66V5dNg4Xzc.roa (hash: zli04q+UUFDZ6LvNlKF4wEZntdZy+cQL9il9Oh4rSZo=)
3: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: y56wIS1Eja4ZHJjeB3WWvxmNuei4agi+jHyuHu6Kw8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:fc:b3:81:19:dc:07:89:d4:26:7e:cd:77:36:61:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Oct 29 22:00:35 2025 GMT
Not After : Oct 30 22:00:35 2025 GMT
Subject: CN=a19ca3d33c618af1cfd015f4900cc71e9a88215e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:08:ec:2a:eb:71:be:b7:e9:a6:b0:20:0a:
4b:8b:9b:35:bf:e9:a0:5d:58:88:58:c8:e7:28:53:
ee:35:20:d9:40:ad:f0:89:05:19:d8:28:40:61:7a:
8a:be:71:32:39:c4:85:f7:f4:db:f4:29:59:fe:08:
24:83:9d:9c:19:27:01:69:f1:96:d9:39:5b:fd:67:
98:58:ae:b1:58:c1:cb:58:df:3a:59:73:c4:05:b2:
05:1d:92:0c:ef:b1:bb:f6:43:33:cb:f5:32:b8:f7:
b3:e4:51:11:1c:1b:4b:61:6e:60:c6:fd:54:d8:c5:
cf:a4:f2:62:5f:8d:9a:38:15:65:4b:f4:4c:9e:b8:
2b:a2:e1:ca:c2:9f:d8:06:4d:3b:2c:04:3a:a2:73:
ef:69:f4:1b:10:d1:4a:3e:35:55:b4:ee:68:54:9c:
a1:4b:4f:0b:4c:fb:8b:06:44:85:e7:b3:c5:3a:9d:
d9:16:45:50:75:5e:75:4f:7c:11:22:76:bb:5a:9f:
7f:31:59:85:f7:e0:48:bd:78:5e:30:3e:19:a9:6c:
67:ad:50:f9:3b:b2:bf:0f:84:da:f1:b6:da:eb:45:
2b:0e:7d:59:c8:ef:a5:7b:50:e1:9b:7d:47:20:51:
31:ac:c1:15:47:a6:2c:f2:63:0d:de:68:b3:e9:a9:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:A3:D3:3C:61:8A:F1:CF:D0:15:F4:90:0C:C7:1E:9A:88:21:5E
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:79:75:8c:8f:34:61:65:2b:90:0f:2a:78:39:d3:22:5f:9d:
a0:1c:e5:e6:9f:ef:d8:09:96:4a:1e:7b:ff:ea:ba:4d:ed:76:
83:c8:8c:0a:d0:d1:54:a3:45:d6:72:1e:6d:c8:9d:dc:bd:8d:
8d:1b:8b:01:91:fd:cd:5b:bb:a0:89:4f:d3:c7:c4:30:fc:f7:
d8:ed:bd:03:c5:61:cd:78:da:72:50:93:1e:83:d9:6f:4f:30:
bf:28:8d:55:ec:2e:e3:9e:da:6a:6c:58:5b:4b:b4:bc:16:6e:
e8:10:33:4f:c7:a0:b2:c8:63:3d:4d:3d:85:d2:8e:4f:0f:05:
b8:d7:f2:a8:07:dc:18:d8:a1:2c:46:3e:14:3f:73:81:3e:4b:
63:7f:bc:f3:ff:9f:08:30:69:3f:3b:07:7b:e5:06:20:a1:80:
20:d4:5e:9a:65:ea:eb:aa:96:e3:9b:66:08:17:7e:6e:0c:f2:
3b:0c:de:2d:c6:9f:10:d2:3d:a0:3e:81:3a:b6:1d:e8:b3:d5:
95:aa:3a:29:7e:2b:6d:78:25:f1:10:d2:de:6f:50:9a:1b:71:
bc:a0:5c:a5:5d:24:42:e0:d6:b1:0c:f0:83:d7:a1:45:53:94:
b8:5b:3a:47:03:d3:9d:5d:09:4f:86:59:b2:3a:a6:a0:ce:1f:
8b:5f:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:22:21 2025 by rpki-client