Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: ZuHmv8nSMh9D2ZU6oHS3ZZJBLgoNJpHdyy4qGAxof8g=
Subject key identifier: F8:E3:7E:66:06:C7:0C:A6:FB:FD:DB:E4:9F:38:D4:62:DC:DF:12:C8
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 019A71B8B1D4D66D29A4E66F666BE76762DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 141E
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: MhZynI45nFVa+sI5pqJDeMR8x3zKs0rTUZRoxMpzrGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b1:d4:d6:6d:29:a4:e6:6f:66:6b:e7:67:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=f8e37e6606c70ca6fbfddbe49f38d462dcdf12c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:29:cd:85:2b:8c:6e:32:c0:42:93:be:81:
ef:f1:89:20:04:03:df:d8:85:f2:4a:6c:83:1e:06:
da:66:aa:72:3e:a6:26:cb:4b:73:07:64:9c:c6:01:
36:29:ea:f7:95:f1:2f:b1:74:9b:59:4c:dd:eb:0d:
1c:4d:71:22:3a:4b:8f:f4:06:c0:74:3c:71:9a:4d:
db:ef:b5:99:68:e4:8b:15:d8:7e:79:d2:61:a4:ca:
d1:5e:2b:1c:1a:f4:05:d8:c6:de:a0:e1:af:93:f8:
a3:5f:3c:b6:40:e7:2f:53:51:3d:09:22:b8:30:da:
ca:92:8f:fd:86:61:0e:df:18:97:ff:65:39:9e:43:
4c:7f:8d:14:2d:b8:38:6d:9d:cf:17:88:b3:63:0d:
e3:29:81:8c:a6:b1:8a:a8:44:18:51:e0:13:aa:7b:
99:cd:4e:15:3f:77:8e:b0:98:61:36:ec:3f:2c:66:
b2:51:62:b7:81:f9:20:b1:06:94:92:05:18:17:a4:
17:ab:85:76:c2:62:1a:88:bf:0d:47:01:29:8a:88:
15:64:34:3b:d0:b1:4f:39:8f:85:a9:d6:57:83:fb:
43:b1:5f:5f:80:99:78:78:01:ac:8e:22:91:a9:d5:
9c:e8:ef:73:55:6d:16:57:f9:bd:89:a4:40:c4:61:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E3:7E:66:06:C7:0C:A6:FB:FD:DB:E4:9F:38:D4:62:DC:DF:12:C8
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:01:79:64:f0:5d:34:2a:ba:e6:5e:46:49:34:bf:ef:7a:60:
08:7b:23:73:86:21:39:f2:fe:51:27:36:71:b8:39:cc:97:1c:
0c:92:41:74:ab:32:2e:e7:b7:b8:c2:10:c3:d2:03:de:73:55:
39:1a:13:b2:6a:ae:b8:2c:da:c5:12:03:3a:17:cc:43:55:48:
9a:60:03:1a:db:69:d2:4a:50:8a:d2:f8:d8:5f:61:0e:52:ba:
06:27:8f:c2:a4:8d:18:98:86:bd:24:ed:ce:2c:bc:66:c9:2b:
c3:6a:8f:c0:62:da:ed:aa:49:3a:64:39:1c:95:07:47:e2:23:
a8:28:e1:50:87:b3:c0:c3:25:d1:29:64:13:f6:40:21:e5:71:
79:91:99:5a:45:e4:cd:6f:97:5f:2a:11:14:f8:e6:f8:ff:45:
ab:16:f5:db:61:03:db:31:d0:b6:b8:20:48:4c:9a:45:55:15:
95:da:0b:43:6d:bf:b6:b4:c8:0a:59:e9:33:b8:0d:da:39:a0:
d7:0b:03:e1:f1:27:ba:32:46:8e:6f:4d:d6:b6:09:96:6f:cd:
e6:5e:72:b8:e8:36:40:ba:c0:5e:47:76:44:fe:49:56:47:cf:
d7:5d:5b:65:75:7e:46:1c:34:0e:94:d3:3c:c7:ce:53:dd:87:
a5:0b:15:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:58 2025 by rpki-client