Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: PbnIOVKw9ESLwCZhXUvsh3lOHPW8GMhuzAg8jXQOaIk=
Subject key identifier: CA:9C:05:3D:4D:34:EF:62:43:3B:2B:5E:D3:D9:CB:A9:55:49:1B:CC
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019A52630F43D780942BEDC2FB63A896439E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 068F
Signing time: Wed 05 Nov 2025 05:00:14 +0000
Manifest this update: Wed 05 Nov 2025 05:00:14 +0000
Manifest next update: Thu 06 Nov 2025 05:00:14 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: NDHTkjTH9TW7UgAoYXvRO9p7Ps0k3oiTXlm4XKFtRTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:0f:43:d7:80:94:2b:ed:c2:fb:63:a8:96:43:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Nov 5 05:00:14 2025 GMT
Not After : Nov 6 05:00:14 2025 GMT
Subject: CN=ca9c053d4d34ef62433b2b5ed3d9cba955491bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:bc:42:fc:d4:f6:b2:b5:40:df:1b:0b:29:
64:3e:80:e5:18:97:eb:96:1c:41:8f:07:21:c1:b2:
d0:1c:39:a5:24:9c:9a:bb:0c:56:f5:05:62:c1:54:
d6:78:14:4f:40:a7:ec:63:30:d3:78:3a:37:3c:bc:
1c:a7:fd:96:19:cc:ab:d5:2e:38:b8:3a:a2:56:21:
1e:52:78:d3:70:8b:dd:c4:61:2e:36:95:22:74:78:
21:54:c7:63:0d:b3:18:35:d3:79:b6:59:37:71:1f:
26:46:1f:0b:e5:a7:27:86:08:b7:27:09:3a:2f:aa:
bb:05:c5:d6:ee:88:5f:a5:df:4a:4c:c7:10:e4:83:
ee:46:5f:38:95:2b:92:ec:3a:24:eb:e9:e0:07:9a:
d2:cc:70:89:02:7e:4c:27:1c:78:73:7e:c4:ca:fe:
be:85:26:3e:09:18:25:32:d7:d2:49:4b:d4:c7:2b:
58:0e:b1:f8:af:ba:a3:df:ac:cb:e2:ce:d8:a2:6b:
94:fa:ce:48:00:73:f5:b7:da:d0:5f:e6:8a:bc:8f:
b4:58:4f:5e:02:52:12:32:55:87:5f:e7:de:9a:72:
b9:82:d7:63:29:3c:65:0b:03:ca:89:96:e6:21:a0:
71:b9:ed:98:92:16:9b:4f:d8:72:0e:c4:6d:51:1b:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:05:3D:4D:34:EF:62:43:3B:2B:5E:D3:D9:CB:A9:55:49:1B:CC
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:01:c5:fb:5e:de:08:ab:a5:6f:c3:47:82:73:a2:56:da:da:
ed:e2:f7:dd:0b:4e:c5:de:8c:5f:a3:9f:25:96:c1:1f:77:59:
3a:fc:2b:e2:40:c5:f7:9d:10:e4:b2:fd:4f:6a:23:a1:e0:7d:
4d:e2:40:55:2d:98:51:48:27:ed:cd:75:2f:9e:f4:9c:d8:56:
64:2a:69:68:13:e2:86:69:1f:cc:57:ac:97:f8:2f:5f:71:34:
c9:df:08:ea:8e:be:5c:24:bb:b1:e3:bf:38:30:e5:7e:a9:1b:
16:23:3c:34:24:f0:fc:7f:7b:d3:7d:4f:48:b4:18:f5:64:31:
fa:e1:b9:6c:d8:42:04:88:9c:e1:a3:7f:84:6a:e6:38:95:cf:
f1:60:85:ba:4e:77:c0:dd:45:9f:e5:0c:6e:74:18:94:aa:3a:
a3:28:6d:c0:51:c0:4e:ee:70:c4:d8:3e:f6:37:07:a8:89:09:
85:b0:17:ef:8a:36:00:cf:74:7f:c2:64:d8:f3:f7:b1:f8:2f:
38:7c:67:15:d9:db:1c:0b:e8:89:11:25:dd:0d:7c:e3:82:e0:
ee:f3:45:fb:06:91:6d:32:43:17:20:f2:99:5b:09:3c:d2:01:
e7:a8:b9:d8:7a:0f:9c:95:61:c6:62:ba:6e:dd:a8:96:9c:45:
07:7b:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:19:45 2025 by rpki-client