Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: 7hnv9pOHL0CIofOeYuuJalDYAmtQ0sFweUpWfhJIh+U=
Subject key identifier: 22:D2:FC:97:EE:74:C2:EA:75:19:02:F4:B5:82:21:32:7B:04:90:91
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019A3646FC398AEC4FA7492A18BC8136ADBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 13EC
Signing time: Thu 30 Oct 2025 18:00:12 +0000
Manifest this update: Thu 30 Oct 2025 18:00:12 +0000
Manifest next update: Fri 31 Oct 2025 18:00:12 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: z4gzK6Z/06aztZ3XPchy9/9b5y3XId0rIRyKpA4zojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:46:fc:39:8a:ec:4f:a7:49:2a:18:bc:81:36:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Oct 30 18:00:12 2025 GMT
Not After : Oct 31 18:00:12 2025 GMT
Subject: CN=22d2fc97ee74c2ea751902f4b58221327b049091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:05:cf:c2:0a:84:17:f6:92:b7:be:0c:17:
67:fc:04:98:58:13:fa:e4:2e:fc:7c:5d:7f:88:e4:
77:06:d7:c6:29:c1:30:38:3b:7b:4e:c4:c8:e7:0e:
cb:e5:c6:03:84:9a:9a:2f:a2:45:81:34:30:b9:bb:
47:06:86:c5:06:e1:63:68:34:6f:c9:fe:ef:46:07:
9e:41:e3:c0:1e:13:b5:48:8d:d1:8b:0e:22:1d:13:
56:78:92:81:f2:1d:97:10:90:33:57:d0:48:a8:0c:
65:4d:80:c4:af:07:f9:d2:87:0a:d9:61:79:25:e5:
69:de:0d:73:dd:bf:c4:a5:40:d1:94:68:3c:21:11:
80:ba:7a:d0:b7:91:dc:d0:f3:cd:9d:3e:d8:37:bf:
76:65:44:33:1c:8e:d3:12:01:30:d1:57:80:e2:5a:
62:98:c8:b7:c3:db:d4:90:97:55:38:00:93:3b:e0:
78:6c:dc:07:34:7e:95:16:74:6e:3f:44:26:c7:8b:
ea:04:b7:1c:7c:b8:29:0c:e2:ba:34:86:9a:00:9f:
71:91:cb:dc:2a:95:9d:40:55:11:82:bb:77:48:cb:
0a:1d:56:9c:e2:fa:a3:ac:cb:04:82:01:8f:e4:b2:
28:85:0e:55:6d:ec:35:b7:a0:5b:e2:89:5c:5a:bd:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:FC:97:EE:74:C2:EA:75:19:02:F4:B5:82:21:32:7B:04:90:91
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:56:32:6f:e4:6d:e7:11:89:72:08:64:19:82:06:dd:e6:05:
d4:81:40:4e:dc:80:aa:53:ee:3b:69:87:a0:e8:f2:30:72:2f:
88:ad:26:de:60:ea:fe:87:7c:09:aa:56:cd:fa:66:9b:d6:78:
f6:d2:1c:65:ea:64:ec:ba:7d:0f:92:d2:78:2b:ab:72:89:3d:
7f:f9:8d:4a:43:56:a4:fa:da:fb:60:d3:2f:18:19:b9:cd:1b:
ef:f7:2c:7e:a1:b4:a5:b1:26:13:0b:79:38:db:53:e7:06:fb:
4b:48:e2:58:61:27:90:3e:b3:f7:7e:9c:5f:10:94:46:a2:eb:
15:46:03:50:ec:d2:cb:16:c9:a0:ec:57:77:f8:07:b3:d6:04:
2b:e6:3a:e6:d9:6d:be:6e:ee:03:97:ab:a1:73:b5:d9:50:33:
7e:68:49:8b:01:28:c4:f7:5f:22:e5:04:f7:58:e8:2b:36:64:
02:dc:c1:60:e1:3f:8d:4a:f8:e2:33:b7:03:e1:6f:92:f8:ae:
81:e9:24:37:0f:28:1d:a6:2b:b7:93:ce:2b:ab:38:54:2d:86:
41:70:ba:4d:76:5a:6b:ca:d4:52:95:a2:a9:62:33:bf:90:b0:
e3:76:23:ec:69:5f:9b:6f:53:7b:19:b3:71:cd:83:f7:b6:5d:
ac:ae:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:55:34 2025 by rpki-client