Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: 0WIaAhXA5+A9NCEbHpqA7Qr9QE8KOq8vurVr1yjP+b0=
Subject key identifier: 6E:04:E8:59:29:52:5F:DE:FC:E2:66:A7:E4:40:B8:7A:F9:5E:C4:E9
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 019A51194B70FAEB71455A6DBB9D21BCBEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 16B7
Signing time: Tue 04 Nov 2025 23:00:03 +0000
Manifest this update: Tue 04 Nov 2025 23:00:03 +0000
Manifest next update: Wed 05 Nov 2025 23:00:03 +0000
Files and hashes: 1: 2_G9MV3MarApcSIaC14zzAbTXto.roa (hash: Xsc0Q6TWSpbouB+us1TXP5dMLNVqwF4nhlITaZf4sco=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: T6K7PVhY2Px8fx/dXs0FC+D2U4w+M5zt5bS2aQABFFE=)
3: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:4b:70:fa:eb:71:45:5a:6d:bb:9d:21:bc:be:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Nov 4 23:00:03 2025 GMT
Not After : Nov 5 23:00:03 2025 GMT
Subject: CN=6e04e85929525fdefce266a7e440b87af95ec4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:4b:cd:f8:9e:d3:ae:20:c0:a1:5f:79:ae:
10:09:8f:4b:5e:ca:20:30:d8:7e:c8:51:23:a4:ed:
b2:c6:1c:43:3c:0e:d6:f1:df:a9:e5:07:42:6c:4d:
2f:ea:28:2e:0a:77:8f:a2:a6:73:0e:91:17:ea:4b:
35:dd:f7:42:e8:fd:c4:22:6b:1a:c3:bd:72:77:2b:
eb:c4:d8:74:10:47:b8:32:eb:b4:13:28:7b:c9:ed:
a2:fa:da:90:e1:db:95:45:5c:02:ec:4d:0f:c8:df:
48:91:8a:02:10:b1:28:09:23:16:95:7a:ce:30:4f:
32:02:8c:7a:9e:bd:05:e7:bc:29:07:75:f4:9a:c7:
e9:e6:26:59:85:5a:5c:40:91:6b:ee:a6:68:a3:07:
42:32:c5:78:3f:b8:75:14:87:8f:69:1e:4f:b2:1e:
6b:44:e8:17:03:fa:d6:0c:aa:0f:87:66:f9:54:b2:
02:d0:0e:f2:ef:c2:4e:0b:06:7e:5f:cd:62:46:2b:
9c:9c:3b:15:d5:e5:f0:ed:12:dd:e9:8b:48:f9:c3:
f8:24:a8:40:0a:ab:84:38:e9:6e:ce:d3:e5:69:d6:
02:b0:6c:11:5a:89:41:c8:fe:09:7e:e1:a7:de:52:
09:12:59:3c:75:40:33:c9:0d:73:d3:c6:5e:06:e8:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:E8:59:29:52:5F:DE:FC:E2:66:A7:E4:40:B8:7A:F9:5E:C4:E9
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a5:eb:99:05:6c:e4:e7:35:0f:05:48:ac:d3:14:c4:a7:c7:
ed:0d:3e:ec:27:32:33:d9:8a:9f:75:1c:05:03:f7:f8:e0:1c:
4b:06:ae:2d:b3:60:2f:06:01:ce:68:f3:4c:b5:66:bd:c8:fe:
76:8c:43:dc:a1:b6:bd:00:b0:8d:ac:c2:6e:75:0f:7e:1c:25:
ca:bb:9f:b5:c4:32:56:bc:88:45:60:47:45:31:9e:3e:a0:59:
8a:4b:39:03:55:1a:36:c3:75:4f:05:66:e4:df:c4:b7:22:aa:
1b:d8:3f:f9:56:d8:c6:dc:14:9f:36:0f:f9:93:2c:46:9f:52:
a2:39:64:57:fc:50:07:ed:bf:13:68:56:0a:18:b6:c5:c6:a9:
d8:35:0f:4b:bc:0d:95:c9:33:83:70:f8:a9:e4:31:fe:35:a6:
94:2b:54:64:6a:dc:35:f5:27:67:67:20:7c:c4:25:8b:42:72:
f2:8c:77:08:d3:45:43:4f:21:c8:7a:e9:28:d0:74:6f:34:89:
41:02:a3:e2:49:dc:60:9f:b4:a6:81:83:72:ab:9d:42:89:1d:
ba:dc:ee:cc:b9:fb:e5:f9:f9:14:25:55:85:30:77:3d:c2:1a:
1c:59:ab:eb:ca:cc:bb:78:34:97:b9:a1:a9:f5:f8:22:87:ce:
67:49:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:13:49 2025 by rpki-client