Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: TQlU/aadWX5WYB5BJirfGz8Sf52fn1InCO9cOUgnkvQ=
Subject key identifier: 59:94:A4:4E:CB:B4:C1:AB:45:CB:90:FF:B6:6E:49:BC:1E:DF:7E:8D
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019A239C0428C8A672C78ACED063CC005792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 071D
Signing time: Mon 27 Oct 2025 03:00:18 +0000
Manifest this update: Mon 27 Oct 2025 03:00:18 +0000
Manifest next update: Tue 28 Oct 2025 03:00:18 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: itjcDRf6t+Gdoqcku5dbxX6kLTFca1dADPjoKZVVubE=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:04:28:c8:a6:72:c7:8a:ce:d0:63:cc:00:57:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Oct 27 03:00:18 2025 GMT
Not After : Oct 28 03:00:18 2025 GMT
Subject: CN=5994a44ecbb4c1ab45cb90ffb66e49bc1edf7e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:73:c5:e1:85:5a:d5:6e:b9:cd:83:4c:41:
de:68:8f:22:41:8f:ac:f1:89:e1:93:a4:b7:94:1f:
b4:e3:03:6c:4b:02:3b:2f:87:aa:21:3b:ab:dc:72:
1f:4c:8e:3d:fb:f1:54:0f:a6:b9:5a:0f:58:6a:66:
6f:bf:ac:b8:75:a9:fe:1e:1f:c5:2d:f7:38:bc:bc:
1c:d3:3b:fa:d5:35:b8:06:32:d5:4a:42:1d:f8:c7:
7a:7d:2e:12:3a:c3:c6:4e:9f:8c:0f:1d:8f:84:97:
2d:bf:9e:53:6a:99:95:58:b1:06:9a:7c:51:b8:24:
95:f9:68:4f:de:98:80:20:d5:a3:34:88:a3:fe:1a:
08:32:43:25:38:c6:11:0d:26:27:f8:88:d6:c0:92:
6e:f2:ce:61:41:09:5d:91:0f:d2:c6:e9:ba:30:4b:
25:cc:b4:d8:e4:4b:72:0f:fa:c2:13:4c:0b:0b:01:
20:2e:49:f5:9a:42:74:a9:04:39:90:19:0e:ed:02:
c4:a7:cc:82:66:40:2e:13:98:b5:72:5d:5b:71:cb:
f9:f5:80:b2:e2:5c:c0:5e:c1:5d:aa:5f:6e:0a:dd:
0b:9b:9f:85:12:7c:6b:21:e1:b4:8f:7a:0e:7f:2a:
ea:87:ef:c0:37:a7:2d:ce:5b:91:26:9f:50:cb:41:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:94:A4:4E:CB:B4:C1:AB:45:CB:90:FF:B6:6E:49:BC:1E:DF:7E:8D
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f9:2a:9e:22:40:04:e1:05:b6:ab:2b:5a:66:41:7a:28:e9:
88:11:6a:7c:31:27:1b:82:6c:0a:79:d4:15:7e:74:e5:a3:74:
02:79:1e:1f:19:9e:68:c6:d1:2f:a6:90:8c:73:e8:bd:15:18:
ff:93:84:0d:69:05:be:41:e0:12:7c:88:d4:1d:9f:63:d0:6a:
19:48:aa:89:5f:56:59:4e:0d:83:02:47:b3:af:50:e0:4b:e8:
78:17:e8:ff:df:0d:d4:79:2b:e6:9a:13:a7:71:b0:30:c3:30:
cf:ac:1b:27:b1:73:2f:ce:b5:22:97:e1:36:b1:aa:72:b1:9a:
cf:ab:91:d1:44:d7:37:1b:cc:30:e5:3c:28:b4:3f:88:8c:f4:
a3:d4:7f:00:25:a1:ea:4c:cd:6e:38:1d:ff:d1:1f:00:37:cf:
83:66:af:85:7b:e4:ef:49:07:f6:31:91:12:6f:9e:ce:d4:a0:
ba:d8:9a:41:b1:60:f3:28:44:9d:3d:8b:26:d6:f4:03:4d:28:
a1:66:9c:00:28:35:cb:4a:e6:43:54:03:26:a1:76:5b:d4:88:
8a:33:74:ef:f8:14:06:58:5b:cc:9a:5d:5b:d4:da:71:77:9b:
18:c4:2e:4c:d2:e2:7c:b9:ab:d1:a8:a5:e0:47:88:11:5b:14:
d8:6e:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:23 2025 by rpki-client