Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier: NWbIVZLoOoy9JYImERBLoh9uvj/wswGxMbbRdOJ+xo4=
Subject key identifier: EB:C0:3E:F0:14:06:EA:4F:79:33:25:D0:A2:8B:38:DF:E7:E6:0F:9E
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 019A4EF43679A34099AC7AB7E5BB84EA8461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number: 110A
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=)
2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: OAzOLYk3PJPBXAWNQ5t5s1pvMpXf3l1MMMXNmpNTMFA=)
3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=)
4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=)
5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=)
6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=)
7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:36:79:a3:40:99:ac:7a:b7:e5:bb:84:ea:84:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=ebc03ef01406ea4f793325d0a28b38dfe7e60f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:25:d7:04:87:89:94:32:e5:03:13:cb:38:
48:7b:d1:b5:df:f0:cd:cd:5a:57:cc:07:70:f8:19:
3d:92:3c:3e:32:e5:07:b4:91:95:55:36:ab:76:77:
d5:11:5d:a8:3d:cd:c4:40:da:68:0b:84:ac:90:31:
bf:99:7b:dc:a0:39:e2:f3:4d:56:29:0b:a4:c4:a7:
a7:32:46:00:d2:20:8b:9d:dc:f9:28:77:19:9d:b4:
b6:fc:7b:5a:d0:86:85:3f:29:f2:69:c6:62:59:38:
88:4e:64:22:77:ab:3b:3c:61:85:71:a8:6d:bb:f4:
85:f5:1e:3a:6c:33:1f:ff:d4:da:65:9a:fa:47:cb:
e5:20:1f:2c:d9:5c:2f:e4:81:8b:48:c7:79:6d:09:
f3:ab:29:92:55:7c:92:85:24:e5:95:c2:b6:95:7d:
e1:c3:ee:86:59:94:59:7a:fd:84:8d:1e:3a:69:be:
3d:a8:f3:dd:f1:79:5d:36:e8:9a:cf:d2:48:3d:8f:
5e:a1:a1:0a:27:ce:bc:f6:e5:09:41:b4:f3:91:36:
44:2d:9f:ee:65:80:c3:3f:b9:3b:df:ec:97:dc:be:
9e:18:06:95:5a:3e:78:e4:0a:9c:d8:f4:ec:31:dd:
f4:cb:1c:45:e7:0d:5c:33:01:df:6d:87:e9:cb:53:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:3E:F0:14:06:EA:4F:79:33:25:D0:A2:8B:38:DF:E7:E6:0F:9E
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8a:40:59:50:ad:ea:29:54:43:a7:0a:47:46:6e:ec:97:26:
f8:5e:7f:6d:74:c2:57:c0:07:b7:60:7c:3a:9f:45:e8:e1:2d:
1f:d3:69:b6:c1:86:30:dc:af:db:4f:16:5f:c1:56:b4:9a:53:
ba:25:b3:53:1f:21:8b:bd:d6:7f:30:cb:99:9c:38:e5:5b:1c:
90:bc:d2:80:ca:96:68:ac:d0:e8:12:e4:98:04:d6:2d:ad:c5:
b8:ee:d3:e9:a5:56:55:93:c7:58:18:35:46:9b:50:cc:cf:65:
71:31:3a:1c:5e:b9:21:0f:3b:ec:b4:93:08:6f:91:41:6f:ec:
01:9c:0b:0b:ae:96:d5:f6:cf:be:1f:28:dd:00:f1:4c:48:ff:
5e:5f:14:3b:dc:bd:77:05:cf:aa:c8:88:d3:8e:52:3e:a8:f8:
8d:e4:ef:2b:8e:c9:13:f0:ef:b5:06:9f:79:74:6a:eb:af:80:
fd:c0:9b:ed:8d:6b:4d:fd:bb:ad:da:07:97:4d:57:e8:40:40:
c2:24:a6:69:cb:24:85:36:f3:8d:bc:b7:6a:a7:88:de:b6:f0:
2a:93:73:56:1d:0c:b0:e0:95:54:bb:c5:b8:ca:11:07:1b:8e:
94:90:7e:05:5a:77:93:87:6a:4d:9e:cb:ec:7f:66:d3:1a:e6:
84:31:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:48 2025 by rpki-client