Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json)
Hash identifier: 8e3zBqAYfTbM7vPqm+baPtp6eeSCrf12y+n9UaHANrY=
Subject key identifier: 00:CC:09:D0:3B:0F:42:E0:57:F2:9E:27:FE:71:C8:65:67:54:87:A7
Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c
Certificate serial: 019A51BE72587237E9A97C09C90CC0CD302B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
Manifest number: A7
Signing time: Wed 05 Nov 2025 02:00:26 +0000
Manifest this update: Wed 05 Nov 2025 02:00:26 +0000
Manifest next update: Thu 06 Nov 2025 02:00:26 +0000
Files and hashes: 1: 4qVlaSTsE1gXSumcFtIoCSI6_Ds.roa (hash: gxiJkMzAgslpclu4FVxFkwBMuCJhHIk77n6WLMjRt50=)
2: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: ag16a+ovP3q47kBNCNGiIEDyVQNpH4z6yeX6uzfpL/Q=)
3: JPM4YH3p4W-kOC7R4fma0DgmIZQ.roa (hash: 1rs/yihW/LgAGtoac03H1xBXx8dUEUTLq50/L4CH5AA=)
4: kqgGhTxJAHOFMUNL3EFp83GA7Xo.roa (hash: YbWtoAqUQYcbJzxbPZ7TL2mv+/kqmj3HAGafEmcOApM=)
5: zWLkf9J7tc5E8tsLSE-YhUD6XZY.roa (hash: +Totm03QQJ2SJRLIDXG7rNkdSX+/Y9DffvcFrN9L3w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:72:58:72:37:e9:a9:7c:09:c9:0c:c0:cd:30:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c
Validity
Not Before: Nov 5 02:00:26 2025 GMT
Not After : Nov 6 02:00:26 2025 GMT
Subject: CN=00cc09d03b0f42e057f29e27fe71c865675487a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:47:99:34:08:ce:20:ca:52:c9:eb:a9:d4:
f2:e0:ca:f5:23:f3:03:fd:28:50:83:f1:bd:7d:59:
84:67:9a:c5:e4:df:19:7b:7c:0f:a7:2b:5e:c9:53:
1c:23:91:48:9e:37:84:b2:33:0c:40:f3:15:14:52:
ad:7e:db:e5:47:69:b1:59:26:64:d5:3c:47:09:da:
86:d1:13:0c:3a:37:95:5e:9b:d1:b2:40:48:df:4d:
56:14:a7:60:48:f5:5c:c9:88:31:eb:21:d4:6a:c0:
97:5e:86:9b:88:15:00:c2:72:6e:c9:1c:5c:d1:5d:
af:01:a3:84:f4:f5:e5:bf:04:ad:96:cd:b3:e6:e3:
a0:ac:1a:25:94:5f:1e:c0:69:ba:13:e4:a4:1d:aa:
b3:b9:4d:03:a6:f3:a4:e4:8e:e0:3d:96:5a:e5:22:
14:c4:48:6a:7e:fa:a7:31:70:03:fe:93:39:39:c8:
c7:4b:7e:2c:af:cb:84:48:b5:7e:70:fb:dd:b5:ac:
61:ae:f0:5f:4c:a3:12:d5:11:83:19:74:f2:fb:5b:
03:f7:1c:d0:91:82:32:5b:ef:26:80:16:f3:27:f4:
ca:d6:45:2b:21:fa:54:8e:e4:a0:27:ac:e2:89:b0:
73:15:74:86:e6:61:cb:ce:d3:6e:a6:2b:78:35:9d:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CC:09:D0:3B:0F:42:E0:57:F2:9E:27:FE:71:C8:65:67:54:87:A7
X509v3 Authority Key Identifier:
keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:37:00:7a:dd:94:1a:d2:58:93:55:bb:8d:9a:8f:db:db:c2:
a4:33:8b:e3:d4:ce:0b:bd:cf:c6:58:3a:38:a4:d2:d0:67:2a:
dc:e4:67:b7:8e:f4:9b:14:62:b1:05:9b:56:ca:45:48:57:5c:
9d:02:e3:76:3b:84:22:60:69:ca:dc:4b:77:66:96:7c:31:68:
ed:7a:46:46:06:5f:7a:c4:fd:db:84:79:24:65:05:c5:4b:be:
69:1e:3f:d9:9d:23:e8:d8:4f:ab:c6:b8:8a:f8:0e:ca:3f:cc:
b2:51:61:4b:a4:27:47:66:75:56:20:1f:d4:3c:91:33:a9:47:
33:ef:f8:be:77:23:12:9e:b6:ad:25:fd:ca:07:a4:e8:1a:a3:
57:f1:ca:40:27:36:0c:22:8f:e1:58:af:7f:64:07:83:20:b6:
e3:f3:5d:ba:d1:66:aa:97:69:1e:26:78:35:c2:1b:3c:5a:47:
1d:40:d0:be:31:69:8b:63:07:80:3b:90:b2:ce:71:78:78:c0:
c3:a8:5f:8c:18:52:8a:f7:53:5e:7b:8a:73:81:96:60:3c:0f:
76:8c:45:72:c0:e8:fa:c9:6d:63:11:ed:0a:46:d4:d3:4d:cb:
94:9a:b3:28:da:aa:f1:8d:f8:6e:7f:cf:5d:04:60:1d:15:76:
03:7d:fa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:08 2025 by rpki-client