Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: zisRSbDXxpti4v0wqPzdL5P5QKV3W9GUprskIb2jOUY=
Subject key identifier: 44:19:07:FC:57:0C:9A:91:49:0C:57:D8:16:C0:BC:1A:A4:40:AC:F7
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019A1F1ACF1A5EECA671DFA9AD7B3ACFBC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0AED
Signing time: Sun 26 Oct 2025 06:00:41 +0000
Manifest this update: Sun 26 Oct 2025 06:00:41 +0000
Manifest next update: Mon 27 Oct 2025 06:00:41 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: VCeWluYr8CDAz2rLjKYMdWsXihRrP2ZJA7lhjDfRJGw=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:cf:1a:5e:ec:a6:71:df:a9:ad:7b:3a:cf:bc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Oct 26 06:00:41 2025 GMT
Not After : Oct 27 06:00:41 2025 GMT
Subject: CN=441907fc570c9a91490c57d816c0bc1aa440acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:0f:23:29:d4:5f:a5:8c:3f:aa:f3:05:0c:
a8:64:80:f5:09:70:31:ca:36:b6:d2:ee:3e:a6:dc:
1d:75:97:75:a0:88:8f:64:3e:4e:b4:46:b5:13:22:
4e:4d:f4:81:f4:aa:9b:25:fb:be:6c:3e:01:99:fe:
d4:3b:49:9e:70:13:f7:aa:d1:80:3b:67:ea:8d:d9:
98:8c:dd:d1:e5:bc:c9:f4:8b:12:bc:5e:b7:2e:07:
58:09:a8:4d:10:26:48:79:53:18:14:e0:e2:04:d8:
ca:96:3f:1a:c8:a0:6c:3c:dd:cd:02:11:c9:73:fa:
a1:14:9a:0a:33:68:d4:99:98:5c:2b:67:4c:cc:ec:
35:f8:bd:83:17:1f:9d:0e:19:98:ad:d9:a1:2d:dd:
ee:b7:45:51:34:5c:5d:06:d8:73:64:d5:ef:1b:22:
f8:23:93:1c:ac:ee:4b:2e:4d:8f:b2:92:e4:e2:1b:
3f:a4:82:9b:2f:74:57:cd:08:66:2e:2b:1f:be:1b:
a5:4f:52:38:d8:2d:91:71:83:ec:58:00:63:98:cb:
01:95:ff:b7:65:65:00:41:b9:60:4e:4a:5d:99:c6:
77:1c:cc:a0:2f:da:0e:dc:50:c7:77:2e:fd:45:42:
40:ad:4d:23:7a:51:28:10:bc:c9:5c:70:2c:f4:9e:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:07:FC:57:0C:9A:91:49:0C:57:D8:16:C0:BC:1A:A4:40:AC:F7
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8e:cc:8c:cb:29:9f:52:4e:0f:73:37:46:f0:2c:fa:2b:9e:
c9:c4:c6:93:bd:d1:2a:65:f2:5d:b4:4e:ce:4b:4f:ea:a2:31:
b7:23:38:aa:06:a0:8d:ca:70:fb:2f:89:66:d6:15:ee:98:ca:
b0:b8:bc:45:9b:de:30:04:9e:61:16:7e:19:fe:09:30:cb:16:
55:d7:e0:e0:bf:ed:40:e1:bf:f9:36:82:d9:89:fe:aa:73:91:
52:97:6d:38:01:ba:2e:0a:3d:71:e3:60:50:ab:fb:38:35:e4:
29:8a:10:e6:f8:20:43:44:84:2d:ab:68:e2:d7:2b:04:3c:be:
dd:9d:57:92:a6:79:3e:f6:c0:61:df:a7:d2:0a:da:03:35:0b:
9b:62:14:0e:87:d9:7c:a3:6d:5f:17:c2:ec:d8:ed:0c:63:34:
c8:c0:39:11:41:b9:8d:25:f1:11:6f:60:ac:91:fd:b7:08:a5:
86:32:d5:42:80:ee:02:b4:ff:76:4f:70:1b:2c:2c:bf:a8:fa:
a3:bd:19:d6:06:86:3b:fa:c4:cf:32:58:f2:f8:28:33:40:3f:
2f:fa:5c:f7:47:5c:3a:b7:cf:9d:ff:53:62:dc:ab:a1:3e:23:
0d:fe:cf:2b:ad:4b:a5:58:f7:21:32:f9:9c:f1:89:a4:75:41:
cb:a7:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:47:34 2025 by rpki-client