
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier: dqZ6rPsDjk0z4Ee4mAdGslr5GoLvFKpOaT3CKZlNnYY=
Subject key identifier: C5:01:7F:C6:A0:7F:A5:20:52:15:2A:6C:5F:F7:81:3E:A3:F6:29:FD
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 019A571B7ADDFE3D5CA75B0FA641130E89F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number: 1727
Signing time: Thu 06 Nov 2025 03:00:09 +0000
Manifest this update: Thu 06 Nov 2025 03:00:09 +0000
Manifest next update: Fri 07 Nov 2025 03:00:09 +0000
Files and hashes: 1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=)
2: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=)
3: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: tYNS3UqAd3NXBnyDhQQMN1dvLACSaCL5xrb57fy9ekk=)
4: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=)
5: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1b:7a:dd:fe:3d:5c:a7:5b:0f:a6:41:13:0e:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Nov 6 03:00:09 2025 GMT
Not After : Nov 7 03:00:09 2025 GMT
Subject: CN=c5017fc6a07fa52052152a6c5ff7813ea3f629fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:01:d6:96:f9:5e:f0:2e:58:6b:62:de:c7:
6c:67:c0:aa:4c:a4:67:75:24:44:4e:61:87:96:94:
60:ae:28:c7:2c:8c:0b:db:52:3a:44:7c:66:00:3c:
d8:81:01:c5:5c:d2:9d:90:6e:63:ae:33:bc:11:7b:
d4:4a:a0:d1:27:66:de:7d:b2:62:c9:9e:12:35:88:
fe:e8:83:8e:0b:97:c4:2b:23:61:a9:f1:3d:a8:76:
09:68:6e:69:a6:a6:7d:af:61:c1:bc:d4:0d:5f:73:
42:20:da:80:d7:af:18:e7:52:66:3d:82:57:ce:4e:
1a:cd:65:65:3c:49:e2:57:79:46:6e:0a:06:1f:55:
bf:b6:b4:24:7f:e1:fe:6a:b7:61:8a:14:d4:30:d4:
a0:ae:4c:df:e7:80:76:ab:71:20:c9:56:e9:15:c1:
be:01:91:95:a9:3c:b9:0d:9f:75:ca:24:af:c7:29:
3e:1b:c5:1c:77:78:0e:11:04:68:f7:42:01:d7:39:
f4:36:d4:53:a5:b4:87:c4:af:60:0f:d6:b4:bc:02:
f4:6c:77:a8:dd:6a:2a:53:a4:75:5b:8a:97:5e:7f:
96:20:e2:63:fc:93:55:3a:d5:ad:a1:30:c6:72:a5:
52:a6:ac:9e:f3:23:a7:27:75:e9:6b:64:4c:91:59:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:7F:C6:A0:7F:A5:20:52:15:2A:6C:5F:F7:81:3E:A3:F6:29:FD
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:07:ba:ff:b6:74:7e:d8:1d:0b:d2:17:c9:02:53:0b:84:44:
2e:f2:02:51:3c:0d:27:ee:3f:22:4f:b5:da:a1:41:a9:ba:c6:
ff:5b:c4:33:bd:db:1c:a8:48:9b:ba:28:ae:a5:97:d2:1a:df:
7c:a1:23:5e:d8:35:dd:98:0a:29:17:d7:ce:d9:94:4e:2d:9e:
90:78:81:9c:34:03:03:22:86:9f:c4:19:e3:45:71:60:20:c2:
16:5b:23:41:d5:31:54:4a:44:8b:94:21:b6:0d:2e:5c:80:ef:
6e:9f:50:97:6b:3c:c1:12:6c:9a:0b:54:3f:f7:57:d9:cd:d3:
b4:32:42:92:e7:31:b0:8a:b3:c0:4f:f4:0d:48:b1:6b:58:2f:
9a:d7:c1:76:a2:68:fe:d9:0e:84:bb:bd:e1:ec:e2:60:de:91:
8e:7a:de:6a:03:14:18:d7:d1:10:28:29:9b:ef:cd:f4:27:09:
15:b3:69:de:a5:bd:d0:12:f5:2e:5f:e9:1b:48:8e:bc:d2:1d:
91:f4:59:b1:32:bf:18:fc:a7:f1:70:8a:fe:a3:6c:51:a2:51:
4a:cb:a5:61:e9:79:69:ef:4c:f2:0f:68:81:63:9a:31:5d:d0:
cb:99:c9:48:11:2b:d6:af:bf:56:d2:15:6a:46:f7:94:d5:13:
5f:55:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:43 2025 by rpki-client