Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: 2ItHlRCji1WmnkoLDSM5/0qzVvDtFk1Wo1BI6IUT010=
Subject key identifier: 77:AB:D8:26:58:30:3E:51:0C:7A:1B:53:BD:EB:7A:31:0A:7B:1B:A1
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 019A2108AE2C6ACA575DB76700D9D6434EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 0938
Signing time: Sun 26 Oct 2025 15:00:08 +0000
Manifest this update: Sun 26 Oct 2025 15:00:08 +0000
Manifest next update: Mon 27 Oct 2025 15:00:08 +0000
Files and hashes: 1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: pCuQrq/9xOWzENiVLQzW5H5Sb6hhbXW2oxdxGhOryGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:ae:2c:6a:ca:57:5d:b7:67:00:d9:d6:43:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Oct 26 15:00:08 2025 GMT
Not After : Oct 27 15:00:08 2025 GMT
Subject: CN=77abd82658303e510c7a1b53bdeb7a310a7b1ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:7f:85:02:a7:17:62:9c:95:31:a2:7e:e2:
da:7c:db:5f:ba:69:42:c9:c8:33:9d:8f:d7:31:b3:
ef:0d:0b:4f:fe:4d:29:d0:fe:08:26:d3:6e:fe:a6:
9a:1f:fe:a5:bb:3a:47:ab:26:c2:4e:cc:91:e3:26:
10:22:17:3e:47:28:4b:44:da:a5:08:52:04:52:84:
e0:ab:4f:aa:12:d0:80:c3:a7:f6:b2:f2:15:89:ad:
00:61:04:3a:83:48:af:9d:01:83:1f:54:fd:aa:b7:
5e:ff:98:c9:b5:b1:33:db:b4:ca:a1:4e:35:c2:e3:
f8:e5:8d:34:de:1b:ec:e0:0f:c3:b0:dd:ed:1c:14:
d6:84:e7:a4:54:e0:47:2e:e2:4b:1f:bf:ac:90:ad:
20:88:4e:91:f5:4c:5a:e9:d0:f6:eb:ee:45:7b:5f:
a7:92:f1:06:f2:bc:06:fb:a7:2f:a1:fa:dc:8a:5a:
b2:a0:45:7c:6d:95:94:33:7a:bb:db:fd:5d:52:60:
d4:c6:6a:c2:6c:ed:46:d2:73:47:cd:03:c6:d8:0b:
a5:2d:3e:da:64:33:45:9d:49:39:5c:8d:5d:b9:87:
6c:9c:4a:9b:95:41:db:25:3b:a8:50:5a:6e:6e:fb:
24:12:04:94:e8:69:69:94:b7:db:99:67:df:15:72:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AB:D8:26:58:30:3E:51:0C:7A:1B:53:BD:EB:7A:31:0A:7B:1B:A1
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:23:17:3d:76:da:94:51:0b:1c:75:1e:12:76:43:88:0c:
09:b9:8f:4a:9b:0f:c1:10:e1:b8:9b:13:f5:dc:30:b4:9c:db:
53:5d:0f:6b:9b:ef:df:71:36:b8:b2:3b:62:8a:31:0d:63:45:
b0:02:2c:c5:88:6c:fc:76:4d:8f:17:34:68:f0:99:c2:60:a5:
47:56:63:83:6c:f2:2b:e8:3b:08:f4:00:f1:be:5a:07:8e:4d:
46:49:ab:f7:30:3b:b3:f2:18:78:d1:19:3b:40:15:f1:3d:08:
74:b3:ee:54:46:e7:a9:8e:1d:cc:e2:9d:7c:3c:cc:1a:2a:f5:
d7:36:d4:68:a4:d9:8a:32:61:86:6b:c2:32:18:8a:90:7f:ab:
61:a2:e6:c1:b9:88:2e:6e:a6:2d:e1:18:25:d2:30:12:23:5d:
34:3c:2a:45:63:9f:47:d2:a5:99:d8:97:d0:52:1a:c3:41:41:
12:76:0a:0f:94:e3:e0:fa:b2:9b:c0:1f:fc:07:ed:11:77:a1:
3d:b3:e7:87:25:dd:b0:44:a0:99:b2:32:39:00:2d:56:ef:1c:
01:75:98:f6:2b:a3:c5:7e:b4:50:6a:8a:65:0e:d8:dc:6d:85:
c6:9e:8d:13:d7:f2:dd:72:c5:55:dc:a3:5b:1e:a5:a9:76:fe:
71:a3:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:14:52 2025 by rpki-client