Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: P2sujNDxRPalCQI54WcBnvO9zJlT+NlD3SCioIwY/RE=
Subject key identifier: 8C:4D:50:7D:FE:05:72:D4:4C:C8:5D:0B:7A:F8:8E:38:A2:91:3F:B7
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019A27B0191BE4FB93C6B5A5F700B97FD20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 05F8
Signing time: Mon 27 Oct 2025 22:00:43 +0000
Manifest this update: Mon 27 Oct 2025 22:00:43 +0000
Manifest next update: Tue 28 Oct 2025 22:00:43 +0000
Files and hashes: 1: 3MSuooCKHgIIUe741NoPew7fM6U.roa (hash: XKzD8YwrOGRcbqdlpu8IePXtpBqyVK3W7mHC5tD4SHY=)
2: D0IiHp-JRFUBLBIMco4yz6rCtC8.roa (hash: RH04SIPsMKZVw07b+Tt+/enaXnFcPsETZoWJ4h4XK54=)
3: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: ftu35kWst/JdH6eCd3cIMpNlaycZp5TrRh8C+mWopzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:b0:19:1b:e4:fb:93:c6:b5:a5:f7:00:b9:7f:d2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Oct 27 22:00:43 2025 GMT
Not After : Oct 28 22:00:43 2025 GMT
Subject: CN=8c4d507dfe0572d44cc85d0b7af88e38a2913fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:15:2a:28:b7:6c:64:0e:b6:3a:43:46:b6:
fe:1a:bb:4a:b8:05:71:cc:a0:b0:f7:04:b6:a4:1b:
f0:bb:e8:a5:e5:3f:69:09:02:ba:fa:f8:51:e2:ec:
62:03:a3:dc:32:32:62:f9:1e:34:70:78:2b:6a:63:
82:e8:d9:ef:a4:3b:98:48:80:1b:6e:0c:20:23:e0:
d9:b9:7f:33:ca:82:29:93:bd:0c:96:34:69:d8:cf:
d2:b2:aa:61:f7:66:99:6e:64:9f:71:56:92:14:3d:
55:8e:c3:00:02:9e:cf:82:a7:7c:1e:5f:a3:af:db:
5c:72:fe:ac:70:ce:cb:54:95:f7:aa:66:a3:5b:48:
6f:ee:71:93:d7:6d:55:58:0b:01:1e:a5:ad:f7:4f:
06:97:70:17:f1:a1:0d:e1:eb:45:9f:4e:fd:f5:bc:
8c:e2:b5:7f:31:1a:e1:25:8a:34:c0:d2:e8:1b:93:
12:c5:7e:a9:90:f8:7b:6d:64:e5:d6:3f:2a:29:65:
ed:dc:df:33:15:81:f0:e5:44:be:a4:53:23:69:b6:
9f:3a:10:61:9b:1f:0c:91:b5:fa:7e:1f:6a:c6:2f:
b9:a1:03:da:0a:24:2e:c3:77:58:f6:1a:78:6c:e1:
9b:82:c2:bf:21:23:42:b8:40:92:93:3c:bf:99:9c:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4D:50:7D:FE:05:72:D4:4C:C8:5D:0B:7A:F8:8E:38:A2:91:3F:B7
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0d:ac:6e:f7:57:82:99:07:ad:de:e2:0f:81:f6:fe:1e:dc:
dc:f7:d7:7c:6a:16:72:ac:34:d6:ab:03:96:73:aa:01:7d:67:
f2:b8:aa:a3:72:d5:d5:7a:92:64:74:d1:7b:bb:0c:79:c7:cc:
de:b4:2f:d5:35:c7:2d:a2:79:39:4c:49:00:2c:57:45:ad:af:
9e:a0:37:b0:3a:e0:5c:f3:86:e1:05:dc:a2:10:5e:6c:9d:3c:
81:f5:8e:1c:7e:16:83:e0:b5:6d:0b:7b:15:b1:1b:8a:73:69:
e9:98:3e:ee:44:55:dd:bc:37:12:10:42:56:b2:e8:0d:43:1d:
b2:50:69:41:84:12:f5:b9:1b:11:6e:9c:cd:99:2d:1b:97:7d:
18:b4:1c:01:f4:10:52:85:d1:ea:84:38:e2:47:a8:e0:08:3e:
e7:27:43:90:33:c8:51:cd:dd:41:bb:a6:23:43:e2:6c:b1:21:
40:75:e6:4a:83:67:19:b2:06:e9:27:b8:5a:b3:5f:32:78:60:
7e:c6:7f:46:19:e8:c9:fb:35:93:12:76:e3:06:93:ea:d9:99:
70:52:d8:f2:ac:cb:d3:98:c4:73:4b:a6:9f:09:76:02:02:08:
31:ae:28:58:a2:60:e2:34:b8:b4:23:ae:8f:02:6d:1e:7d:ff:
33:6b:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:25:15 2025 by rpki-client