Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File: h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier: pNcZmF6zG8F27twaJ5r+PPwQUqm5rAsp43O77OeqXJE=
Subject key identifier: 9D:D1:83:A1:91:81:AE:3A:5E:C8:92:13:EA:1B:BA:5B:AD:88:FD:21
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial: 019A4F6236CBED0ED9E547A06F3F550A6B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number: 092D
Signing time: Tue 04 Nov 2025 15:00:27 +0000
Manifest this update: Tue 04 Nov 2025 15:00:27 +0000
Manifest next update: Wed 05 Nov 2025 15:00:27 +0000
Files and hashes: 1: AO9S5FPNyFUFF8sl00iZG2uj63o.roa (hash: dj/tZS47oYr7HP4aHIaoRYk9wXqksDBdwIFty9clVxk=)
2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: XV2iwcOJPjvwNLqGKUZBUNbn7utsgrY28Phku0dZQRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:36:cb:ed:0e:d9:e5:47:a0:6f:3f:55:0a:6b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Validity
Not Before: Nov 4 15:00:27 2025 GMT
Not After : Nov 5 15:00:27 2025 GMT
Subject: CN=9dd183a19181ae3a5ec89213ea1bba5bad88fd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:73:74:31:d0:71:6d:86:d4:d0:0e:85:1c:
7c:c4:33:bb:cd:a6:48:f5:f1:2b:89:1e:f1:4f:93:
5e:0c:2c:30:34:99:8b:fa:b5:5e:f4:59:8a:b0:7c:
8f:f2:cb:17:fd:5a:49:e1:f6:a2:fd:c7:e7:b6:b1:
c7:ae:14:12:32:6a:b7:2a:41:aa:4e:a8:b6:53:55:
21:b3:65:7c:50:76:12:3d:0a:21:28:ed:83:d5:70:
ab:1c:5a:aa:7b:11:64:35:13:3b:43:41:4c:9d:13:
4b:64:84:6e:3f:b7:90:8d:b0:5d:70:d1:b9:31:8a:
19:30:eb:55:ad:2e:9d:54:aa:08:5e:62:70:45:fd:
a7:97:94:b0:2d:fe:b8:c1:12:54:63:b9:d8:97:09:
5a:fd:cb:1d:0f:16:33:92:0b:d5:94:a8:bb:b3:7e:
22:a0:fc:44:bb:ac:8c:93:64:59:3c:d8:02:5b:3b:
c7:0a:87:19:86:14:7e:3f:fd:5c:77:76:61:85:f5:
bf:11:98:ef:6f:a4:d4:c0:33:d8:eb:40:96:54:61:
d2:46:ad:a8:5b:70:1b:35:74:f5:fa:42:42:a5:68:
b4:33:4d:1d:ab:d3:ad:66:75:df:1c:64:9d:45:1c:
d9:f1:5b:ff:61:28:db:f5:f6:08:b8:78:5a:b5:6b:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:83:A1:91:81:AE:3A:5E:C8:92:13:EA:1B:BA:5B:AD:88:FD:21
X509v3 Authority Key Identifier:
keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3f:a0:2a:02:91:4b:08:04:64:25:3b:b6:4c:6c:e3:a0:49:
7e:24:01:40:1e:57:09:b6:5a:b7:3c:d8:06:32:5e:de:3c:43:
42:72:21:70:a5:92:7b:35:38:59:80:a5:70:41:c7:31:a5:a1:
86:62:ff:c8:ca:a2:ce:1b:06:a0:78:05:63:dc:50:cf:cd:30:
da:cf:8b:58:04:41:39:39:db:e3:84:12:ac:3b:9e:12:9c:b5:
3b:37:e2:e7:9b:e7:bd:12:6d:45:37:03:38:36:2d:75:be:ab:
44:48:6a:dc:84:3f:ec:a6:02:55:2d:76:e6:6b:46:30:ce:90:
1a:f4:ca:17:59:0f:f9:15:c2:6e:8c:0e:3f:44:ea:15:0c:84:
c0:38:f9:5d:5a:6e:17:7b:58:dd:e8:1f:37:2c:30:b1:1f:7d:
28:60:a3:0f:19:e6:8d:d3:3b:7c:47:c6:cc:64:5f:06:b3:e2:
2e:47:98:68:d6:f6:9e:df:cd:2a:bb:4e:f6:00:74:45:25:3d:
02:b5:f1:03:b6:16:bb:22:4e:56:58:ef:c0:0a:37:cf:17:b8:
5e:5b:44:6b:0f:7c:71:85:f5:1d:d9:91:7b:3f:08:7e:86:3e:
5f:17:5a:78:38:16:af:5f:da:e1:b1:fb:77:35:df:b3:c5:92:
3e:d5:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:22 2025 by rpki-client