Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: pb1X+OCIpTFNsAmzXjz4MOoWDcE5Ra9nWm+T/j2uq1I=
Subject key identifier: 92:E4:B8:06:05:37:74:22:07:F7:C6:F4:3A:CF:D8:40:47:C6:3A:78
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 019A5263455DD2854F65EB8C18D38DC4E87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 05:00:28 +0000
Manifest this update: Wed 05 Nov 2025 05:00:28 +0000
Manifest next update: Thu 06 Nov 2025 05:00:28 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: cusa6OSN4/QhdY6+f58eytqB1+1S0Wo6ozA67Y+RPVA=)
2: yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa (hash: LgnuacZQDPP2J60/EcJiQNzEwvS+wm94uYSyH+Ocir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:45:5d:d2:85:4f:65:eb:8c:18:d3:8d:c4:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Nov 5 05:00:28 2025 GMT
Not After : Nov 6 05:00:28 2025 GMT
Subject: CN=92e4b8060537742207f7c6f43acfd84047c63a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:8c:c1:2d:73:3f:b2:6f:a6:ae:12:82:78:
cf:b2:91:cf:f8:ec:0e:09:a3:41:2e:20:88:bf:3a:
22:96:f5:b6:b5:19:bc:7f:44:a0:0a:10:dd:b4:fa:
f2:14:aa:b9:5f:9d:c2:2b:c4:3b:24:97:9b:b0:47:
0b:ab:70:44:d3:4a:45:3c:ee:a0:a0:23:51:1c:ab:
2e:f0:c6:63:15:2b:2b:1e:82:01:bb:12:c2:7c:87:
82:6c:9f:77:ec:c4:5c:45:d7:10:c7:7a:0e:d8:94:
07:d6:65:7e:7b:b4:c6:37:3d:bb:a8:da:67:e4:c5:
49:61:fe:b1:67:16:cc:54:1f:75:ce:4c:88:c8:5f:
6e:8d:9d:cb:c3:31:c2:60:4c:79:3e:10:6b:1e:84:
eb:61:fb:dd:e0:5b:03:29:8d:dd:9f:89:8f:45:e9:
20:88:aa:c6:9c:d4:18:ef:c9:65:45:25:f7:5b:de:
4b:34:3d:61:e8:ab:58:74:b6:b4:51:0e:1a:54:0e:
2b:9c:ea:b1:e8:9a:72:fb:e9:57:c1:29:62:5b:fe:
04:00:ca:ed:2f:8d:b1:82:ad:49:f0:82:88:0d:bf:
59:d7:ab:f4:4a:78:ec:7f:ae:3f:c9:49:61:35:36:
75:f1:41:a9:da:63:3d:63:fb:43:33:34:58:67:2e:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:B8:06:05:37:74:22:07:F7:C6:F4:3A:CF:D8:40:47:C6:3A:78
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a5:16:a2:26:df:71:b1:6d:d0:61:3c:d0:1a:93:a4:e0:e2:
21:45:23:d3:e1:74:a1:5a:ef:ef:9a:f0:65:aa:7e:65:99:6d:
3b:a7:a4:0a:5f:04:ba:1e:b4:22:7e:78:f9:73:c2:5b:9f:f0:
d8:ea:d8:a8:23:e2:2f:30:3b:3e:06:9f:7d:eb:58:b3:d1:f7:
81:35:4e:61:5d:cd:3d:34:ef:55:49:3b:e6:1e:22:0e:43:48:
96:1f:a4:c4:5e:b6:2c:a4:e5:a9:97:3b:3a:73:9d:7a:a9:c2:
a7:0b:c1:13:2a:56:24:d0:3b:53:d5:26:a6:41:0a:28:1f:f2:
2c:1f:de:0e:82:7a:58:ce:a8:fa:18:a2:77:82:6a:a3:6a:eb:
b6:ae:72:78:38:3b:19:89:89:2a:2c:a6:d1:b4:98:33:85:b9:
de:69:de:40:e6:8a:cd:26:25:48:03:c1:3e:0e:e2:b3:c1:a1:
20:81:9c:32:17:02:a9:d4:5a:d0:08:da:11:4d:e5:09:ab:ee:
99:d9:1a:bd:64:a7:b4:32:4d:36:df:21:84:19:61:8c:a1:81:
f5:e2:0a:5d:8f:fe:ec:9c:5e:fb:5b:94:49:cf:07:d1:bf:0d:
af:7b:d2:c0:5d:eb:d8:5e:74:eb:87:7d:0a:0b:b5:d5:d5:3b:
0e:3b:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:43:31 2025 by rpki-client