Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: PUckAI511chP3rCJZJ7PHsRcrq2VEt22lrTSmiQAbrM=
Subject key identifier: 9D:E6:53:CA:B8:75:F2:70:26:D4:65:1D:92:CC:B1:30:2C:33:C8:85
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019A2A79EA4471607DDF11A4DFD77B2B1429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 07C1
Signing time: Tue 28 Oct 2025 11:00:24 +0000
Manifest this update: Tue 28 Oct 2025 11:00:24 +0000
Manifest next update: Wed 29 Oct 2025 11:00:24 +0000
Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=)
2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: u0fhCmOZyje5qOOHj1E895lBCdI5WHrkfJmUVjXIH6M=)
4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:ea:44:71:60:7d:df:11:a4:df:d7:7b:2b:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Oct 28 11:00:24 2025 GMT
Not After : Oct 29 11:00:24 2025 GMT
Subject: CN=9de653cab875f27026d4651d92ccb1302c33c885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:8c:db:2a:18:86:03:01:f8:fa:22:ce:39:
67:42:7b:de:b6:da:93:88:02:99:90:8c:d5:1b:b4:
c3:03:e6:26:f9:4c:6c:6e:2e:ce:a2:86:14:f4:f3:
d1:92:fd:62:e9:4e:3a:c7:1d:85:cc:eb:01:c0:79:
32:77:32:15:18:89:32:af:5a:a2:18:f2:e4:9b:15:
8c:1b:39:5d:2e:57:5b:b2:f8:7e:41:61:fc:1a:43:
91:64:bf:ba:50:68:85:89:0a:bf:66:68:3e:db:55:
1c:b9:cc:e5:c4:fe:2a:f9:10:6c:61:89:79:79:bf:
66:5c:88:86:40:ce:b5:d8:31:0e:de:73:d1:b2:1a:
28:fb:1e:b0:f1:e6:0b:08:86:19:82:d9:2b:57:82:
88:75:bd:88:a5:b0:48:35:12:32:4d:e6:b2:09:85:
71:a0:34:24:02:de:11:5e:ba:15:06:33:ef:48:bc:
eb:1c:a4:f9:e7:09:37:fc:72:f0:6e:24:95:d0:e9:
12:7e:ea:cc:57:ae:fa:bd:80:9a:fc:f0:05:5b:c4:
68:45:58:ed:85:ae:0a:4b:4f:d1:81:06:6b:2c:64:
5a:a2:26:dd:72:c2:4d:6c:c4:55:e3:8f:ba:f7:2b:
32:97:d1:c7:40:63:df:98:fe:66:4f:80:68:2b:71:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:53:CA:B8:75:F2:70:26:D4:65:1D:92:CC:B1:30:2C:33:C8:85
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9f:a2:ba:6d:dd:b3:1a:75:c3:c7:aa:43:18:aa:94:89:d9:
52:b7:30:43:ce:4c:4b:7b:d5:ca:b7:b8:7f:21:98:17:64:a6:
5d:5b:b2:56:33:0b:18:b6:d5:ae:38:6e:1d:31:d3:68:eb:44:
11:73:7e:a7:f6:f9:ec:cb:dc:dc:f3:2f:d4:88:0b:f1:c9:98:
4e:cc:37:cd:59:a8:5d:1a:4b:37:61:f0:d3:c7:af:9e:b7:00:
9b:2a:1e:a4:7c:ad:38:eb:f7:d1:6e:dd:99:54:73:ea:33:37:
61:d3:88:ba:ba:d3:cd:55:4b:ca:87:d3:f5:47:52:ff:35:5b:
3b:38:12:c2:08:6b:41:5c:f6:95:09:dd:c9:0c:c2:60:6b:9e:
f7:c0:5e:6f:8a:a0:bf:58:5f:a8:b8:cf:d1:cd:b8:30:7b:a3:
f0:81:93:b2:97:78:17:77:46:1b:0f:49:a3:e6:c3:69:78:9d:
3c:c8:41:24:20:0d:bd:55:71:7d:56:11:5a:eb:c7:eb:cd:8d:
a7:60:d8:70:1a:20:6b:00:ba:d3:97:53:1a:61:7c:a3:f4:62:
11:e2:fd:34:03:b8:3e:97:87:e5:26:9d:76:31:89:5a:d7:40:
b5:85:12:af:cf:74:41:de:76:50:33:28:19:c9:3a:d5:98:3f:
d5:b6:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:10 2025 by rpki-client