Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: EPS+rz1FODu0r8LYbBWktU+vHWmmzEcYLpSPDkVJs6s=
Subject key identifier: 9A:57:C0:A1:C2:B2:EA:9C:CB:CE:EF:C1:EF:ED:D0:2A:CE:12:4C:75
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 019A0A816AE280398F914D39DC2BE3FAF851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 06:00:44 +0000
Manifest this update: Wed 22 Oct 2025 06:00:44 +0000
Manifest next update: Thu 23 Oct 2025 06:00:44 +0000
Files and hashes: 1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=)
2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=)
3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: oiSrs0ntDxc3evsPQ/qaml/vaUzMg2nQFTR0vjSmhGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:6a:e2:80:39:8f:91:4d:39:dc:2b:e3:fa:f8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Oct 22 06:00:44 2025 GMT
Not After : Oct 23 06:00:44 2025 GMT
Subject: CN=9a57c0a1c2b2ea9ccbceefc1efedd02ace124c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:e8:74:f7:26:af:14:26:65:a0:8c:5b:37:
e6:54:3c:20:9d:e8:1d:6d:4f:36:19:8d:ee:73:25:
2b:41:d2:5e:bd:9a:54:c8:77:2a:5f:12:05:95:04:
c1:09:29:b0:2c:c5:a4:62:f0:8c:7f:85:d0:00:9f:
69:3e:ac:eb:4b:3c:e6:7a:e5:a6:dc:72:06:22:60:
02:74:8f:d9:ed:c6:5d:19:a3:f3:d7:29:a3:a5:22:
5a:be:1e:0c:6a:3f:32:5d:e0:38:d8:9a:ea:49:2d:
b7:fc:36:dd:a2:a8:8d:d5:6f:b9:da:7b:f3:5d:21:
22:60:47:38:1f:fa:df:e0:22:94:44:f7:50:06:53:
c9:06:10:a5:93:2d:2d:ef:f4:88:cc:11:8e:1d:5d:
2b:6f:9c:05:0c:fe:da:8a:18:20:45:2e:9e:47:12:
cd:02:77:5e:9a:c4:5f:d0:9e:62:2b:db:21:53:ff:
10:ed:d9:93:3c:50:7e:74:03:d0:2e:9b:49:5c:78:
fe:fe:3e:bb:86:ea:74:7d:b5:0c:dd:48:42:a3:7e:
3b:42:97:b3:ed:c6:3d:b2:40:de:80:c0:16:a0:33:
7c:74:ab:e4:c8:66:0c:ec:b7:fc:27:f8:54:0e:6e:
d7:cb:74:0c:ae:a8:d5:b3:3b:f4:06:94:c1:3d:fa:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:57:C0:A1:C2:B2:EA:9C:CB:CE:EF:C1:EF:ED:D0:2A:CE:12:4C:75
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f8:69:ba:5a:22:6d:1f:a0:1f:b5:4c:76:41:e2:24:7f:b5:
ba:5e:e4:c8:af:e6:38:1f:11:05:08:11:02:33:e9:c7:74:f1:
21:a9:97:9f:ee:8b:3b:3a:b3:68:b0:6a:c5:f8:82:20:a2:7f:
12:57:cf:12:ff:af:66:96:34:91:e9:db:3d:b5:df:32:0b:df:
bb:a2:d6:c6:cb:6a:1c:8b:22:ca:04:40:2c:bf:9f:c2:1b:9a:
94:65:47:f2:c1:19:e7:a3:d0:fa:82:64:cd:2f:5a:f3:53:4a:
dd:ce:b0:0c:01:fc:dd:f5:85:96:de:e5:4e:85:44:ac:4d:15:
c8:77:1f:fa:fc:56:77:7b:2a:05:64:62:6d:57:56:13:0c:61:
b8:36:6b:cd:57:8a:09:02:28:b0:4f:6b:48:09:8a:4a:70:92:
25:61:71:b3:f1:34:28:94:f1:c0:d5:2a:fa:d5:6b:36:2b:46:
0a:52:8e:4f:07:34:ab:f8:32:0b:ff:58:18:be:f2:da:5f:dd:
4f:e7:0c:38:fc:76:e8:3d:4e:49:32:9a:ec:b2:00:7c:fa:b4:
a0:90:9f:d6:76:c9:17:f6:bb:36:d2:be:29:9a:e2:8d:3b:9a:
ef:1a:b6:8f:f4:1e:3f:c9:57:82:2d:7b:da:64:bb:43:39:4e:
55:5c:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:12:48 2025 by rpki-client